Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/dfd8032e-1314-3b90-ae05-93a52b12736d.roa
File:                     dfd8032e-1314-3b90-ae05-93a52b12736d.roa (raw, json)
Hash identifier:          6y8xKJ6KgDFC0dkMwoTMnotHYmWweYh6vpzTaUeTRhc=
Subject key identifier:   3B:4D:78:AB:9A:E9:BC:68:BE:FF:63:37:62:8B:63:88:22:64:79:35
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DCC07DBB7535CA93DFC80
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/dfd8032e-1314-3b90-ae05-93a52b12736d.roa
Signing time:             Thu 06 Aug 2026 20:23:45 +0000
ROA not before:           Thu 06 Aug 2026 20:23:45 +0000
ROA not after:            Wed 04 Nov 2026 21:23:45 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:326::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:cc:07:db:b7:53:5c:a9:3d:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:45 2026 GMT
            Not After : Nov  4 21:23:45 2026 GMT
        Subject: CN=622fe4f0-5b90-48ff-9490-9216a6875b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:57:c2:13:f5:3f:e2:54:03:5a:b9:b2:2f:
                    0b:e0:c2:0b:83:c6:b1:a1:f8:18:df:56:07:7c:f7:
                    82:23:39:10:a8:cc:a7:76:97:12:a8:93:af:34:a1:
                    d0:6e:6c:2b:5c:1b:17:23:fa:c7:78:76:e3:1b:9f:
                    c5:38:60:28:bd:67:da:7a:ef:40:2d:53:4a:38:7c:
                    87:6e:89:e4:53:b6:bd:1d:21:a0:57:19:2d:1c:d9:
                    71:cd:b1:d0:f9:d6:b5:7d:a0:26:5f:76:5f:20:d3:
                    1f:22:82:c4:2f:6f:6a:8c:91:54:1b:74:bf:47:28:
                    9d:62:d8:fa:b0:ac:b2:c8:29:b4:d0:24:b3:c8:ca:
                    f7:da:2a:c4:ea:59:90:01:48:57:55:93:a8:8e:15:
                    27:b3:c7:15:1d:5f:73:24:74:5a:24:bb:16:47:75:
                    9c:84:f5:c5:cd:2d:c3:a8:d3:86:94:33:0b:81:10:
                    ae:8b:a1:b8:b5:fb:3b:14:66:b8:c0:bb:2b:a3:b4:
                    11:8a:81:54:17:65:3d:8f:65:73:3d:0e:eb:87:9b:
                    1c:b3:9a:b7:64:a8:8c:76:2c:1b:d9:ad:fd:da:17:
                    40:8b:ab:b9:25:4b:ed:b5:6f:ec:08:f2:04:b8:56:
                    62:1a:de:81:0b:93:b9:c3:43:bb:38:3c:87:c4:4b:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4D:78:AB:9A:E9:BC:68:BE:FF:63:37:62:8B:63:88:22:64:79:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/dfd8032e-1314-3b90-ae05-93a52b12736d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:326::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e6:16:54:43:c8:fd:c6:f9:4e:4f:1f:a6:c7:db:d2:7b:30:
         8c:d4:58:99:4f:ba:6d:23:1a:23:88:78:1f:d1:d4:53:ff:af:
         fd:59:41:74:57:f4:e1:bb:96:15:c1:f5:b4:d7:2e:96:05:98:
         d7:35:00:bf:1e:d1:ff:3e:85:d7:bc:67:c0:a4:ff:ec:bf:64:
         71:84:d8:92:d0:b8:cb:da:14:a2:4d:d4:19:ad:73:ef:21:6f:
         7f:b3:a4:03:d3:81:3d:f4:a3:43:c6:dd:49:be:bb:8e:3b:e5:
         69:66:b7:27:42:45:ff:01:74:f1:cc:12:83:f8:1b:81:2e:79:
         c0:09:76:dc:ba:10:e7:16:0a:e7:55:e3:22:b8:98:d9:87:59:
         32:7d:c4:a9:93:af:51:4e:9f:f7:4c:9f:26:6c:da:3b:e4:1c:
         39:2a:67:0d:9e:1c:5a:14:bf:35:76:1d:d6:b6:78:0d:fe:e3:
         36:db:06:71:ea:fb:a7:e0:81:b3:16:ed:21:68:6d:b0:bf:3d:
         fe:14:57:b7:88:29:a2:6b:ce:9a:07:60:6d:1e:d3:ee:77:a1:
         10:39:74:51:62:79:3b:4a:d8:a7:37:f9:ed:db:5e:c2:59:6b:
         e3:31:ac:bf:8c:96:5f:04:0f:38:e0:8e:5f:d0:1d:fa:d7:3a:
         69:2f:1f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:57 2026 by rpki-client