Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/053a9a2a-ef9a-317d-83c1-4d754f0dce1e.roa
File:                     053a9a2a-ef9a-317d-83c1-4d754f0dce1e.roa (raw, json)
Hash identifier:          r4M8dg/LJ2wMnPs6q7Ja5OPBLnORnA1eNl3JHuMjrCs=
Subject key identifier:   58:DE:5E:26:27:FB:18:9C:12:5E:28:00:16:1B:45:8C:66:DE:34:03
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DCC2869755CEBEF0F6D80
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/053a9a2a-ef9a-317d-83c1-4d754f0dce1e.roa
Signing time:             Thu 06 Aug 2026 20:23:45 +0000
ROA not before:           Thu 06 Aug 2026 20:23:45 +0000
ROA not after:            Wed 04 Nov 2026 21:23:45 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:328::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:cc:28:69:75:5c:eb:ef:0f:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:45 2026 GMT
            Not After : Nov  4 21:23:45 2026 GMT
        Subject: CN=be1af6a3-9de8-4502-b6af-09efc622bdb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c1:9a:0a:61:6b:8f:4d:ca:38:6f:e1:dc:3a:
                    f0:d0:d4:b9:a7:c7:b6:88:a5:78:15:df:02:c0:09:
                    40:be:05:8b:b7:61:d4:e6:93:37:74:24:21:4d:66:
                    5e:3f:ab:f5:67:fb:54:a2:2d:8b:ff:d7:e3:e1:8a:
                    72:44:dd:d8:ca:6c:b5:b2:a2:a2:66:45:f1:ac:90:
                    3c:69:e6:5a:28:99:4d:e7:d0:03:77:93:7d:e6:46:
                    b8:68:88:7c:d4:dc:c6:dd:ad:fb:40:c2:a7:ff:0c:
                    3d:ab:42:87:2c:42:e7:9b:68:64:ae:c3:ef:83:56:
                    a1:91:24:4c:ff:88:c3:5f:5d:4e:f1:6e:ea:32:07:
                    ae:18:80:05:ae:38:7f:c4:6c:24:bd:78:70:52:b8:
                    05:c0:40:b7:bd:1d:7b:21:46:e4:9e:29:7c:72:e2:
                    df:fa:f7:b0:68:6c:09:e5:9e:a4:cb:4e:ee:80:53:
                    bf:60:87:46:f9:9a:41:96:2c:03:8a:41:6f:bf:b8:
                    00:ea:83:3d:52:35:c8:9a:11:2b:fd:e2:a9:7b:95:
                    d9:e3:92:a4:87:43:87:1e:05:14:b8:63:c4:0c:45:
                    8e:47:fe:28:8f:8f:43:d7:63:52:93:53:bc:88:aa:
                    60:af:5b:17:f2:f2:e4:c4:ef:12:e6:e9:fe:dc:67:
                    ed:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DE:5E:26:27:FB:18:9C:12:5E:28:00:16:1B:45:8C:66:DE:34:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/053a9a2a-ef9a-317d-83c1-4d754f0dce1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:328::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:2f:e3:69:0a:c4:ba:9a:6a:99:22:22:0b:d5:29:45:ed:a6:
         eb:62:93:63:81:e4:ee:e3:5e:1a:df:0b:33:0c:b7:f7:9a:34:
         41:3f:82:f8:8a:f9:47:68:df:b1:33:5b:e8:de:54:16:8d:45:
         89:65:b9:4d:cf:9f:76:c0:07:21:41:88:a0:cc:dc:c6:16:ea:
         3c:1d:67:25:41:44:e7:15:fe:41:0d:d3:9d:92:71:60:ad:2e:
         11:70:3c:14:c5:20:d6:6f:81:30:8e:d4:2d:ce:f7:26:a5:d3:
         eb:9c:b6:5c:bb:31:5f:26:a0:18:81:9d:ab:0a:b3:d0:00:5b:
         e7:2e:55:64:e9:7c:3b:47:3b:25:30:a8:0e:9e:8b:07:a1:21:
         17:69:4b:2b:c2:54:df:10:3f:e8:09:23:0d:fb:1a:3d:be:c5:
         57:74:a1:5f:39:df:bb:61:57:e1:1b:4d:71:72:a2:b0:62:86:
         23:6a:74:18:0f:d1:12:04:c3:7f:62:7a:c5:30:7d:15:38:50:
         41:9c:bf:68:5a:21:a7:49:47:77:5c:89:0b:2b:ac:c2:5a:9f:
         84:be:bf:a0:57:bf:b7:d0:e7:c3:17:b0:e9:7f:be:06:b7:76:
         9f:a8:59:1e:ad:9b:f0:7e:49:43:e5:22:a6:34:c3:41:a2:13:
         f6:e0:89:06
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7AHcwoaXVc6+8PbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJkNmMyZWUtODZjNS00YTE4LTljNGMtZGU2MTk2OWFi
MzM5MB4XDTI2MDgwNjIwMjM0NVoXDTI2MTEwNDIxMjM0NVowLzEtMCsGA1UEAxMk
YmUxYWY2YTMtOWRlOC00NTAyLWI2YWYtMDllZmM2MjJiZGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcGaCmFrj03KOG/h3Drw0NS5p8e2iKV4Fd8C
wAlAvgWLt2HU5pM3dCQhTWZeP6v1Z/tUoi2L/9fj4YpyRN3Yymy1sqKiZkXxrJA8
aeZaKJlN59ADd5N95ka4aIh81NzG3a37QMKn/ww9q0KHLELnm2hkrsPvg1ahkSRM
/4jDX11O8W7qMgeuGIAFrjh/xGwkvXhwUrgFwEC3vR17IUbknil8cuLf+vewaGwJ
5Z6ky07ugFO/YIdG+ZpBliwDikFvv7gA6oM9UjXImhEr/eKpe5XZ45Kkh0OHHgUU
uGPEDEWOR/4oj49D12NSk1O8iKpgr1sX8vLkxO8S5un+3Gft4QIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFFjeXiYn+xicEl4oABYbRYxm3jQDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2
YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYxOTY5YWIzMzkvMDUzYTlhMmEtZWY5YS0z
MTdkLTgzYzEtNGQ3NTRmMGRjZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjJkNmMyZWUtODZjNS00YTE4LTlj
NGMtZGU2MTk2OWFiMzM5L2YyZDZjMmVlLTg2YzUtNGExOC05YzRjLWRlNjE5Njlh
YjMzOS5jcmwwHwYDVR0jBBgwFoAUuuy9IFymTTHUnjmeD7RR2nqMU7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYx
OTY5YWIzMzkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AygwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAMi/jaQrEuppqmSIiC9UpRe2m62KTY4Hk7uNeGt8LMwy395o0
QT+C+Ir5R2jfsTNb6N5UFo1FiWW5Tc+fdsAHIUGIoMzcxhbqPB1nJUFE5xX+QQ3T
nZJxYK0uEXA8FMUg1m+BMI7ULc73JqXT65y2XLsxXyagGIGdqwqz0ABb5y5VZOl8
O0c7JTCoDp6LB6EhF2lLK8JU3xA/6AkjDfsaPb7FV3ShXznfu2FX4RtNcXKisGKG
I2p0GA/REgTDf2J6xTB9FThQQZy/aFohp0lHd1yJCyuswlqfhL6/oFe/t9Dnwxew
6X++Brd2n6hZHq2b8H5JQ+UipjTDQaIT9uCJBg==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:37:25 2026 by rpki-client