Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/e9e58323-fb8f-3c1a-a332-8d473d9f8ff1.roa
File:                     e9e58323-fb8f-3c1a-a332-8d473d9f8ff1.roa (raw, json)
Hash identifier:          gYID35J08WvedFS3NsupEqm6L8VE6rPPe4MsDwhMCrQ=
Subject key identifier:   AC:67:58:2D:FF:45:C3:C9:D1:75:66:49:8E:DA:86:10:3E:48:03:7C
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DB3F28AFBEA082ECC32A0
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/e9e58323-fb8f-3c1a-a332-8d473d9f8ff1.roa
Signing time:             Thu 06 Aug 2026 20:23:34 +0000
ROA not before:           Thu 06 Aug 2026 20:23:34 +0000
ROA not after:            Wed 04 Nov 2026 21:23:34 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:195::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:b3:f2:8a:fb:ea:08:2e:cc:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:34 2026 GMT
            Not After : Nov  4 21:23:34 2026 GMT
        Subject: CN=921c131a-2071-4172-a79f-6ee49671e642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:49:bb:c9:37:2f:04:aa:4c:85:8e:d7:84:
                    2f:b8:9a:5b:46:5a:28:23:d7:d0:47:e6:bb:74:33:
                    14:97:d7:85:13:ff:04:f8:a9:90:e0:7f:62:3e:94:
                    12:e9:66:61:6a:29:00:1f:60:4f:cc:df:18:a6:2a:
                    ac:85:c9:1d:57:51:c3:13:93:13:03:9f:92:eb:40:
                    c0:9d:c0:29:30:71:87:43:cb:59:59:ae:fd:df:0f:
                    eb:57:13:af:88:76:eb:5a:8c:4a:a8:0d:82:76:f0:
                    a9:75:f5:bd:c5:56:b9:d1:df:93:ef:64:a6:d1:2f:
                    1a:b8:1c:ff:fe:9d:d0:31:6a:89:0e:26:11:58:36:
                    20:4a:9d:d7:d9:e0:1f:5a:3a:32:fc:c7:22:a4:57:
                    63:71:04:d8:e3:94:55:33:1c:07:67:12:10:9e:1c:
                    eb:9f:54:b7:3d:69:9c:38:50:3e:a6:fd:10:e2:1d:
                    1e:52:11:df:90:0b:f4:6a:79:f4:d6:c3:f4:52:55:
                    9e:6d:ed:96:9d:f6:02:43:64:e3:a9:f3:72:11:0b:
                    e8:3f:e1:6a:ba:7f:e9:a3:12:d6:35:e4:ce:6f:17:
                    ae:a1:81:52:6a:8b:06:c3:d4:a1:f8:d9:9c:6c:8c:
                    15:55:d8:54:f2:dc:fb:e1:70:c8:c3:99:ef:f7:5c:
                    53:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:67:58:2D:FF:45:C3:C9:D1:75:66:49:8E:DA:86:10:3E:48:03:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/e9e58323-fb8f-3c1a-a332-8d473d9f8ff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:195::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:3b:2d:e5:09:1e:dc:aa:14:df:6d:6a:f1:44:b3:15:85:29:
         83:0a:6e:1f:9d:4d:06:15:60:bc:1e:c2:5a:8e:78:ae:71:46:
         1a:79:c9:55:08:89:77:89:44:04:d9:31:8a:8f:80:c9:55:23:
         82:fd:00:1a:89:64:3f:4b:ea:b4:7a:ac:52:04:0c:a3:39:b3:
         b8:28:1d:82:b0:cc:59:92:af:a0:ca:21:da:74:ba:8b:2b:c6:
         dc:a6:24:06:bd:d7:64:4b:2f:ec:7b:77:68:94:9c:fe:33:f1:
         83:bf:87:70:10:74:5a:9d:50:70:8a:b8:3f:8d:0b:87:e0:4c:
         ab:bc:5e:5a:9c:45:b9:74:41:7c:2a:1e:7c:1e:1b:2d:82:46:
         15:90:62:37:b0:3c:13:64:b5:b3:b6:e1:22:00:18:c7:68:89:
         b6:1c:4a:67:ad:c7:ab:a1:b5:1e:09:bf:a1:f2:a2:77:29:c5:
         62:12:cf:90:2f:84:22:c3:88:85:8a:c5:ca:c2:f3:d5:dd:d6:
         cb:47:17:f8:2e:d7:95:6e:d1:64:de:91:1b:ef:1f:7d:39:90:
         cc:03:e9:71:d4:fb:d6:97:bb:b8:6a:b2:4e:ad:31:36:b8:c2:
         c1:68:e8:6c:1f:e4:b8:0f:eb:2e:bc:d4:13:a0:d0:11:1a:d1:
         52:18:04:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:37:13 2026 by rpki-client