Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/ef02e62a-35e3-355f-91aa-a2aa1474bc92.roa
File:                     ef02e62a-35e3-355f-91aa-a2aa1474bc92.roa (raw, json)
Hash identifier:          PvoV7vjnC8PGuKNe38DPFXlzx9D6NiO4Qp/UU8P6JmI=
Subject key identifier:   7F:30:4F:42:37:C0:AC:BF:DD:BF:34:86:86:31:D9:E5:26:4B:15:87
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DA042ABE6CCAA6BE4F300
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/ef02e62a-35e3-355f-91aa-a2aa1474bc92.roa
Signing time:             Thu 06 Aug 2026 20:23:24 +0000
ROA not before:           Thu 06 Aug 2026 20:23:24 +0000
ROA not after:            Wed 04 Nov 2026 21:23:24 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1b::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:a0:42:ab:e6:cc:aa:6b:e4:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:24 2026 GMT
            Not After : Nov  4 21:23:24 2026 GMT
        Subject: CN=ba493187-b543-4251-b33c-55b04cc7a1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c4:1e:d0:89:cc:0f:ec:fb:3f:10:32:33:06:
                    4b:f6:7b:f8:f8:6d:4e:b9:f9:2e:1b:de:26:59:c1:
                    76:77:7b:c5:78:97:79:ed:69:34:83:55:41:1e:41:
                    f4:7a:bb:24:42:71:37:65:0d:72:c8:7d:c5:30:68:
                    5e:5e:5c:f3:47:54:11:a0:28:6d:5f:fa:36:1c:20:
                    55:2d:75:e4:07:8c:e9:c0:fb:ce:9b:37:7f:91:6d:
                    11:a6:29:41:e1:27:b1:46:f5:03:95:d5:0c:c6:ee:
                    4c:cf:56:40:0c:0a:a1:37:a5:e5:a9:69:14:e0:ca:
                    8c:19:a7:2d:90:42:79:1b:3b:94:69:bf:69:dc:26:
                    e0:7d:87:64:6f:66:b2:5c:bb:04:62:da:d6:07:19:
                    95:70:a0:aa:8d:a0:17:85:d9:92:3e:10:2b:6c:66:
                    52:17:00:89:20:67:06:62:9d:4e:f0:26:a8:a4:e9:
                    dc:4e:b1:cf:b8:62:4b:b6:16:a5:06:80:8f:8e:e4:
                    44:e5:c0:03:ed:84:42:a1:3c:f1:aa:27:f4:00:3d:
                    03:34:32:92:08:63:7f:ef:e4:2d:39:1b:57:7d:37:
                    36:80:71:34:b1:ae:dc:6a:84:a0:7b:9b:c3:f0:6d:
                    8a:72:df:0d:b0:f8:26:28:81:3f:c5:2d:14:96:2e:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:30:4F:42:37:C0:AC:BF:DD:BF:34:86:86:31:D9:E5:26:4B:15:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/ef02e62a-35e3-355f-91aa-a2aa1474bc92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1b::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:1f:43:03:19:2e:ad:23:15:be:af:66:b1:f7:a9:3a:d2:1e:
         b5:eb:92:97:28:3c:b1:c4:e1:37:1c:e5:35:5d:58:9c:fa:2c:
         e1:81:5b:b0:ef:88:12:b6:2f:4a:af:45:40:6a:ec:b7:15:33:
         6d:74:25:c0:90:13:33:6c:5c:42:0f:83:55:3e:af:0a:56:87:
         be:84:13:96:d1:1d:4e:b0:6b:cc:8f:a4:a6:4d:2a:5c:5e:74:
         ff:b2:42:a1:68:59:f5:0f:37:e2:78:ef:45:27:77:31:34:a2:
         3a:8a:af:e8:36:21:33:c5:a9:17:a1:ae:9e:0a:ac:be:eb:1e:
         f7:9d:7d:cd:83:a7:2b:52:a7:24:a3:87:ed:fd:f5:26:40:c1:
         f9:dc:ca:90:67:a4:f0:2a:8e:a1:0f:83:a1:fd:73:b0:30:d3:
         bc:ed:13:35:bb:1f:ff:2d:8d:24:7d:61:28:ca:ca:a9:45:da:
         69:a9:89:c8:45:c6:cc:24:96:c2:68:65:30:86:37:be:a6:8c:
         9e:21:12:28:a1:f8:44:90:0c:1a:47:cb:25:ca:b1:b2:d3:50:
         ca:16:89:9a:4a:24:3a:75:8d:66:60:4d:22:53:0b:31:29:3f:
         8e:f3:11:52:8b:88:6b:f2:88:f9:16:93:81:80:1e:b5:6b:1e:
         af:8f:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:37:11 2026 by rpki-client