Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/d5f112fa-bfad-3b7b-a77e-6e2ca2974fd6.roa
File:                     d5f112fa-bfad-3b7b-a77e-6e2ca2974fd6.roa (raw, json)
Hash identifier:          C+NY9Qye4Gt6u+HPwj9x/pBwqYYHvW7n8bi4PVjLnmI=
Subject key identifier:   D6:FF:3B:CA:C5:D2:19:2D:3F:63:A4:56:40:4D:E8:0D:31:D0:4E:3F
Certificate issuer:       /CN=a5c518d0-6c8f-4cc0-8433-e63522746509
Certificate serial:       010D0C9F4328584ECDCEF8C57B58684366FEEC32
Authority key identifier: 2D:BA:CE:8D:F1:48:38:B5:3F:38:07:D5:D5:4A:CA:FC:C6:C2:9B:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/d5f112fa-bfad-3b7b-a77e-6e2ca2974fd6.roa
Signing time:             Tue 11 Aug 2026 18:06:15 +0000
ROA not before:           Tue 11 Aug 2026 18:06:15 +0000
ROA not after:            Mon 09 Nov 2026 19:06:15 +0000
asID:                     402778
IP address blocks:        2602:f33f::/36 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:ce:f8:c5:7b:58:68:43:66:fe:ec:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c518d0-6c8f-4cc0-8433-e63522746509
        Validity
            Not Before: Aug 11 18:06:15 2026 GMT
            Not After : Nov  9 19:06:15 2026 GMT
        Subject: CN=6dd89a12-2fa0-4771-a867-725911e534f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:c3:7b:15:2e:4c:2d:e5:c2:3e:5e:b1:35:
                    db:d1:18:f5:4f:0e:7c:c7:e1:2b:a4:a7:ca:46:c4:
                    9a:58:74:d1:88:c4:b5:90:b1:00:cb:d3:0d:54:11:
                    e1:4a:e5:25:3e:7e:8d:33:a4:04:fe:80:79:64:5a:
                    b5:31:f3:51:12:23:71:24:7b:2d:5b:4d:a1:1d:4d:
                    03:c8:10:05:3f:b5:f7:e2:1f:9c:26:ae:5c:36:1f:
                    f1:4c:2e:6f:91:d3:5e:4d:4d:09:5c:29:27:d0:85:
                    19:af:1c:71:a2:12:55:f6:7c:8d:4a:a6:93:da:73:
                    96:92:c1:37:38:7e:68:88:1d:4e:cb:7c:bb:06:26:
                    48:6b:b1:8e:00:c2:d9:bc:05:7a:49:e6:9d:21:8c:
                    1a:b1:31:04:5a:1a:b8:32:b3:fc:3f:9d:62:c1:14:
                    c9:f1:bd:9d:90:e8:63:5f:18:28:f6:7d:bb:0a:4d:
                    63:1f:b6:15:78:8b:fb:e9:24:32:f2:24:de:0f:f6:
                    90:0e:7f:f6:45:8a:40:9d:8e:b7:02:0a:ad:49:c6:
                    10:22:ad:2b:ee:26:28:3c:77:48:a7:b8:39:fd:f5:
                    44:cf:47:a9:b5:f2:98:12:47:d7:a1:bf:50:92:e5:
                    7e:20:11:bc:ee:c4:54:12:1f:38:80:64:a3:46:e5:
                    a3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FF:3B:CA:C5:D2:19:2D:3F:63:A4:56:40:4D:E8:0D:31:D0:4E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/d5f112fa-bfad-3b7b-a77e-6e2ca2974fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.crl

            X509v3 Authority Key Identifier:
                keyid:2D:BA:CE:8D:F1:48:38:B5:3F:38:07:D5:D5:4A:CA:FC:C6:C2:9B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f33f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a7:80:94:e6:a4:2a:1b:69:74:ff:18:79:82:a1:d7:ca:39:
         61:d3:cc:8d:31:06:82:df:bc:fc:47:59:b2:a3:ed:87:c0:dd:
         72:7e:3b:ba:92:4a:d0:f6:ba:c5:62:1f:8b:9c:5e:10:f5:db:
         a7:b0:4f:5b:40:30:68:ce:3a:7a:5d:3b:02:96:92:ef:b6:b1:
         94:80:a5:ef:61:41:af:36:b0:ea:32:5f:5c:3e:fd:fc:46:f0:
         d4:81:bf:fe:50:bc:c6:f4:ab:0a:b0:4b:22:4a:96:4f:67:02:
         a5:2b:eb:b8:45:b9:38:4d:0e:d8:cb:e3:1c:12:75:87:d0:b0:
         ce:17:3d:7b:6f:40:21:a5:66:91:f4:90:a6:1c:58:9a:05:92:
         e4:c6:d6:c9:10:6a:80:0a:af:78:70:75:64:7f:f8:3c:fe:63:
         0d:12:3f:ed:d7:e2:5a:65:20:67:e1:94:bd:6c:7c:91:a4:40:
         7d:20:09:71:1a:ac:60:9d:9f:83:c7:cc:11:b9:99:13:f5:05:
         4d:95:79:5c:56:4c:5a:4b:7c:5e:c5:ac:14:b8:84:14:ab:11:
         e6:e5:32:04:bc:a4:fe:ea:08:3e:a1:f4:d8:62:20:11:0e:1a:
         f5:d2:ec:17:65:72:4b:ba:74:2b:29:d0:e7:be:2f:9b:51:c9:
         84:5a:78:21
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7NzvjFe1hoQ2b+7DIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTVjNTE4ZDAtNmM4Zi00Y2MwLTg0MzMtZTYzNTIyNzQ2
NTA5MB4XDTI2MDgxMTE4MDYxNVoXDTI2MTEwOTE5MDYxNVowLzEtMCsGA1UEAxMk
NmRkODlhMTItMmZhMC00NzcxLWE4NjctNzI1OTExZTUzNGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJfDexUuTC3lwj5esTXb0Rj1Tw58x+ErpKfK
RsSaWHTRiMS1kLEAy9MNVBHhSuUlPn6NM6QE/oB5ZFq1MfNREiNxJHstW02hHU0D
yBAFP7X34h+cJq5cNh/xTC5vkdNeTU0JXCkn0IUZrxxxohJV9nyNSqaT2nOWksE3
OH5oiB1Oy3y7BiZIa7GOAMLZvAV6SeadIYwasTEEWhq4MrP8P51iwRTJ8b2dkOhj
Xxgo9n27Ck1jH7YVeIv76SQy8iTeD/aQDn/2RYpAnY63AgqtScYQIq0r7iYoPHdI
p7g5/fVEz0eptfKYEkfXob9QkuV+IBG87sRUEh84gGSjRuWj9QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNb/O8rF0hktP2OkVkBN6A0x0E4/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9hNWM1
MThkMC02YzhmLTRjYzAtODQzMy1lNjM1MjI3NDY1MDkvZDVmMTEyZmEtYmZhZC0z
YjdiLWE3N2UtNmUyY2EyOTc0ZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYTVjNTE4ZDAtNmM4Zi00Y2MwLTg0
MzMtZTYzNTIyNzQ2NTA5L2E1YzUxOGQwLTZjOGYtNGNjMC04NDMzLWU2MzUyMjc0
NjUwOS5jcmwwHwYDVR0jBBgwFoAULbrOjfFIOLU/OAfV1UrK/MbCm2IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9hNWM1MThkMC02YzhmLTRjYzAtODQzMy1lNjM1
MjI3NDY1MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgLzPwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPKeAlOakKhtpdP8YeYKh18o5YdPMjTEGgt+8/EdZsqPth8Ddcn47
upJK0Pa6xWIfi5xeEPXbp7BPW0AwaM46el07ApaS77axlICl72FBrzaw6jJfXD79
/Ebw1IG//lC8xvSrCrBLIkqWT2cCpSvruEW5OE0O2MvjHBJ1h9Cwzhc9e29AIaVm
kfSQphxYmgWS5MbWyRBqgAqveHB1ZH/4PP5jDRI/7dfiWmUgZ+GUvWx8kaRAfSAJ
cRqsYJ2fg8fMEbmZE/UFTZV5XFZMWkt8XsWsFLiEFKsR5uUyBLyk/uoIPqH02GIg
EQ4a9dLsF2VyS7p0KynQ574vm1HJhFp4IQ==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:46:08 2026 by rpki-client