Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/f581f15d-d3f9-3d67-ab4f-2130b58decd9.roa
File:                     f581f15d-d3f9-3d67-ab4f-2130b58decd9.roa (raw, json)
Hash identifier:          BLTHcNZSu1iU5+kNK16X5bacUgUFDDp5gkvlQKHyF+E=
Subject key identifier:   03:53:42:0A:CF:06:C6:8E:45:6D:C9:20:F2:4C:31:7F:62:86:31:06
Certificate issuer:       /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
Certificate serial:       010D0C9F4328584E91E1DF6E1801CA7980E43F70
Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/f581f15d-d3f9-3d67-ab4f-2130b58decd9.roa
Signing time:             Tue 21 Jul 2026 06:55:50 +0000
ROA not before:           Tue 21 Jul 2026 06:55:50 +0000
ROA not after:            Mon 19 Oct 2026 06:55:50 +0000
asID:                     140666
IP address blocks:        2602:fa80:51::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:91:e1:df:6e:18:01:ca:79:80:e4:3f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
        Validity
            Not Before: Jul 21 06:55:50 2026 GMT
            Not After : Oct 19 06:55:50 2026 GMT
        Subject: CN=228ec37a-2c1f-4600-9e22-bf83fccf677c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:ba:1e:1a:61:c5:ca:07:1b:48:79:88:74:
                    9d:0c:99:f8:fc:e9:6f:1c:99:47:a1:91:00:4b:a2:
                    a1:b4:10:47:87:1b:df:62:83:26:77:05:6d:91:2d:
                    9a:83:0c:e5:d8:d2:05:f9:e3:86:d4:0c:a5:1b:2a:
                    43:5e:f1:65:f1:5c:ea:c8:8a:16:49:f8:dd:e1:e6:
                    5d:82:6a:42:2e:18:ef:88:7b:7b:ef:32:10:34:4a:
                    54:8c:2a:bd:10:35:34:d7:16:3c:c6:05:05:0e:40:
                    47:9f:1b:11:8a:05:c9:0e:70:73:1c:13:6c:ef:f9:
                    de:97:73:6e:f7:eb:b6:b7:14:b8:99:94:44:95:3f:
                    a0:c6:2b:2b:0b:b6:8e:c0:0d:d9:48:11:f4:e2:63:
                    3e:46:5d:96:ae:48:f1:33:07:9a:21:45:68:24:f1:
                    33:4e:76:c3:6d:4e:1d:17:75:5f:17:e5:3a:1a:fb:
                    ea:d5:1c:9d:d7:08:a9:19:a0:19:2f:00:e1:ab:89:
                    ff:ad:11:48:32:2e:c5:5c:dd:08:19:69:2a:c2:29:
                    3d:6f:0c:52:10:76:55:be:bc:d9:da:d1:c8:90:e1:
                    be:94:97:e3:f1:14:11:53:75:5c:3a:44:3a:b9:98:
                    2d:bd:b6:b6:94:2a:03:53:05:5a:08:78:83:42:39:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:53:42:0A:CF:06:C6:8E:45:6D:C9:20:F2:4C:31:7F:62:86:31:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/f581f15d-d3f9-3d67-ab4f-2130b58decd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl

            X509v3 Authority Key Identifier:
                keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa80:51::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:55:38:25:36:7e:ce:39:2a:a5:f5:39:4f:9e:ae:fa:05:16:
         c1:0c:cc:3d:02:41:c0:df:bd:4e:35:65:09:b1:47:bc:59:06:
         d4:5d:f4:5e:a1:8c:0f:e2:ab:81:9a:ad:59:58:44:2d:9a:1a:
         61:82:34:be:b1:75:35:55:5f:59:ca:af:9d:5e:e1:7a:26:bd:
         c0:61:01:d0:cd:19:0b:bb:34:d8:8a:8d:2f:37:2a:be:e5:7a:
         df:21:42:d8:47:4a:23:c3:97:be:5a:9d:f3:20:f1:0b:00:b4:
         04:5f:a4:52:a4:77:16:e1:cd:46:d0:9f:13:6e:b8:f7:c2:9a:
         45:1d:6b:07:6d:48:26:4e:59:9c:b8:57:1f:9a:a6:ff:0d:c0:
         05:b8:e6:8f:36:10:1e:55:2f:b3:0d:ad:59:ac:65:fe:b4:f9:
         74:cc:84:41:d9:11:b4:ae:49:6e:e0:78:2e:56:d7:69:e3:2a:
         ef:8a:dd:1a:6f:e1:3b:cb:97:9b:69:07:52:02:0e:aa:a0:a9:
         cc:51:c0:56:88:a8:90:6c:3c:71:59:e8:bc:b3:f7:b5:ae:12:
         76:0d:42:fb:cd:21:c6:cb:7c:af:2b:66:f2:9e:65:9e:c4:2b:
         9b:b5:81:c8:2a:fa:f5:00:c5:0e:90:89:e5:d8:f3:30:d9:1b:
         09:8f:cf:a6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6R4d9uGAHKeYDkP3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj
M2NkMB4XDTI2MDcyMTA2NTU1MFoXDTI2MTAxOTA2NTU1MFowLzEtMCsGA1UEAxMk
MjI4ZWMzN2EtMmMxZi00NjAwLTllMjItYmY4M2ZjY2Y2NzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwky6HhphxcoHG0h5iHSdDJn4/OlvHJlHoZEA
S6KhtBBHhxvfYoMmdwVtkS2agwzl2NIF+eOG1AylGypDXvFl8VzqyIoWSfjd4eZd
gmpCLhjviHt77zIQNEpUjCq9EDU01xY8xgUFDkBHnxsRigXJDnBzHBNs7/nel3Nu
9+u2txS4mZRElT+gxisrC7aOwA3ZSBH04mM+Rl2WrkjxMweaIUVoJPEzTnbDbU4d
F3VfF+U6Gvvq1Ryd1wipGaAZLwDhq4n/rRFIMi7FXN0IGWkqwik9bwxSEHZVvrzZ
2tHIkOG+lJfj8RQRU3VcOkQ6uZgtvba2lCoDUwVaCHiDQjlCTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFANTQgrPBsaORW3JIPJMMX9ihjEGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm
ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvZjU4MWYxNWQtZDNmOS0z
ZDY3LWFiNGYtMjEzMGI1OGRlY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz
MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw
YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy
ZDQzMGMzY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gABR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADxVOCU2fs45KqX1OU+ervoFFsEMzD0CQcDfvU41ZQmxR7xZBtRd
9F6hjA/iq4GarVlYRC2aGmGCNL6xdTVVX1nKr51e4XomvcBhAdDNGQu7NNiKjS83
Kr7let8hQthHSiPDl75anfMg8QsAtARfpFKkdxbhzUbQnxNuuPfCmkUdawdtSCZO
WZy4Vx+apv8NwAW45o82EB5VL7MNrVmsZf60+XTMhEHZEbSuSW7geC5W12njKu+K
3Rpv4TvLl5tpB1ICDqqgqcxRwFaIqJBsPHFZ6Lyz97WuEnYNQvvNIcbLfK8rZvKe
ZZ7EK5u1gcgq+vUAxQ6QieXY8zDZGwmPz6Y=
-----END CERTIFICATE-----
Generated at Tue Jul 21 16:27:53 2026 by rpki-client