Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/db85493e-d1f7-3678-ba25-23cf9704a35d.roa
File:                     db85493e-d1f7-3678-ba25-23cf9704a35d.roa (raw, json)
Hash identifier:          zLmBCjtneF4XResliHSbP2nbuBBoqu5xGtz7JSqqs6g=
Subject key identifier:   40:40:A0:67:93:98:EA:57:08:67:EE:30:BB:9C:97:A6:C2:B2:2C:1E
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DACB038243F5255CAC040
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/db85493e-d1f7-3678-ba25-23cf9704a35d.roa
Signing time:             Thu 06 Aug 2026 20:23:30 +0000
ROA not before:           Thu 06 Aug 2026 20:23:30 +0000
ROA not after:            Wed 04 Nov 2026 21:23:30 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:110::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:ac:b0:38:24:3f:52:55:ca:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:30 2026 GMT
            Not After : Nov  4 21:23:30 2026 GMT
        Subject: CN=900a28cc-d722-4fab-a8a9-cf0983b313c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:0b:2f:7d:81:d6:eb:33:7c:28:33:04:46:
                    84:8e:f5:8a:73:16:c9:8e:27:7e:67:02:c0:b9:50:
                    58:ba:9f:68:1e:8f:c5:00:37:e7:b6:33:93:8e:cb:
                    eb:d6:4e:ad:87:19:ed:f4:31:da:b3:17:cd:0b:51:
                    23:b0:b8:75:47:42:31:f9:4d:db:a2:59:8c:2e:9a:
                    92:0e:08:76:85:e4:a7:6c:f9:86:8f:b3:ad:25:33:
                    1e:54:53:34:1a:49:c1:39:3c:bc:07:d6:b2:87:31:
                    61:bc:84:20:7a:22:c6:dc:53:cb:50:d1:23:b2:db:
                    f6:fe:97:1e:84:15:2f:13:25:00:d7:9c:c9:2b:96:
                    3e:2f:aa:40:55:c2:6f:90:e1:2b:d8:c1:25:06:3a:
                    73:f3:8a:85:02:67:4e:b0:73:5d:57:b5:a3:f7:27:
                    97:35:f6:d6:9d:79:b9:25:ed:86:4b:2e:10:03:95:
                    1b:6e:48:9c:03:b2:02:84:4a:f9:12:3e:40:ea:f9:
                    89:a7:90:92:d6:f3:86:63:ee:81:9e:c7:f3:e7:57:
                    21:c5:85:b1:01:f2:af:77:61:6b:f9:d0:89:f6:34:
                    88:54:ef:03:c0:b7:d1:23:16:27:3f:6d:63:5f:59:
                    ad:d7:01:a8:02:09:f2:15:86:aa:c6:41:90:cc:e4:
                    ea:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:40:A0:67:93:98:EA:57:08:67:EE:30:BB:9C:97:A6:C2:B2:2C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/db85493e-d1f7-3678-ba25-23cf9704a35d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:110::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:5b:5c:0e:0d:1d:0d:b0:c3:c9:ed:98:29:88:e8:88:8a:
         28:1a:cb:f5:8b:fa:2d:01:94:9d:28:b5:33:cb:2b:1d:a9:78:
         c9:bb:36:3a:dd:25:39:41:39:89:75:2b:a6:01:28:3e:d8:91:
         dd:a6:d4:a2:d8:06:28:ba:f7:6c:f7:1b:2c:33:bc:11:3a:55:
         9c:cb:34:0c:46:5f:dd:1c:5d:80:e8:10:78:94:e1:af:23:e9:
         a0:42:1b:67:29:2b:3a:13:c7:10:52:0a:85:c7:d4:b5:f5:4c:
         54:b3:a9:fd:26:b7:ae:c1:82:4c:8c:b8:88:d4:6c:ce:43:22:
         0d:65:ff:33:98:14:80:ed:12:88:76:2a:1c:0b:86:ce:e7:2e:
         f1:19:bd:48:56:94:fa:96:20:6d:22:e8:c0:c9:32:bf:a1:bf:
         ea:9f:e5:be:9c:dd:03:61:e4:7e:4c:ac:db:c2:c7:c0:44:57:
         b5:aa:31:2f:8a:ca:35:72:85:30:08:db:8b:dc:10:07:f1:90:
         6c:13:c3:1a:fc:39:e0:b0:1b:5f:9a:23:dc:d9:a8:4f:4a:d2:
         c3:4c:7a:29:29:97:64:d6:b3:29:20:2e:0e:b2:d8:b2:4c:0e:
         04:f5:22:ec:c6:f5:2c:6b:4d:fd:fd:fc:f4:3e:4a:f2:89:99:
         26:18:6d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:39:01 2026 by rpki-client