Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/135842b6-e4eb-3b8e-8562-dd77a08bb8eb.roa
File:                     135842b6-e4eb-3b8e-8562-dd77a08bb8eb.roa (raw, json)
Hash identifier:          /EiVYDffNaf7Ug7KOXy9QZK7kqiSYSfeJNvmZkjQ1bk=
Subject key identifier:   DB:D9:F8:C1:16:5F:4D:5B:AA:D2:7E:2C:B7:C1:E2:F0:B2:35:DE:C2
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DC7BE1C1FA228D5A6B840
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/135842b6-e4eb-3b8e-8562-dd77a08bb8eb.roa
Signing time:             Thu 06 Aug 2026 20:23:43 +0000
ROA not before:           Thu 06 Aug 2026 20:23:43 +0000
ROA not after:            Wed 04 Nov 2026 21:23:43 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2e2::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:c7:be:1c:1f:a2:28:d5:a6:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:43 2026 GMT
            Not After : Nov  4 21:23:43 2026 GMT
        Subject: CN=99736736-6a57-433a-8cb4-fc1a0d300bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:3b:61:ad:12:e5:ab:6c:58:c2:60:24:96:
                    93:c0:dc:ae:7d:e5:99:ad:8c:d6:d7:fb:4b:d0:45:
                    c0:40:89:04:a0:d9:c8:e2:9e:9e:ea:78:f4:ef:3f:
                    c6:4e:9b:72:b1:2a:d4:81:68:fe:1a:64:67:4c:24:
                    28:24:7a:fb:d9:44:a0:16:12:ec:bf:55:51:f1:bc:
                    35:1a:b9:f9:2d:4a:4a:d4:05:e2:d9:29:c2:a9:64:
                    00:09:66:aa:44:33:98:2a:fa:1a:80:87:6e:03:65:
                    6b:55:b8:79:90:c3:91:91:13:81:08:b1:0b:53:b2:
                    af:e7:38:77:c3:36:75:ec:e1:40:8a:1d:6b:16:5c:
                    87:c5:c9:1b:8e:84:c4:c0:6c:63:45:a6:ae:e0:28:
                    49:39:ee:3e:58:07:b6:96:24:9f:62:75:26:12:02:
                    79:17:b7:1e:65:3a:82:ef:4e:a0:8c:8b:fd:5e:f5:
                    91:da:b6:83:23:6b:b6:bb:66:63:f0:7f:57:74:e4:
                    9a:33:0c:68:7c:d8:d3:88:45:19:44:ae:11:6b:ed:
                    f2:17:72:e1:d0:76:7f:c7:59:77:2d:aa:73:89:b1:
                    b6:04:24:4d:20:89:56:65:3b:0f:06:2c:89:98:ed:
                    2e:43:92:eb:5a:01:58:1c:33:78:57:e5:d3:a6:af:
                    e4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D9:F8:C1:16:5F:4D:5B:AA:D2:7E:2C:B7:C1:E2:F0:B2:35:DE:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/135842b6-e4eb-3b8e-8562-dd77a08bb8eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2e2::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:35:5a:98:07:3a:6f:f9:af:91:eb:53:f9:a7:e5:ef:1e:32:
         f5:8e:47:70:49:d8:eb:e6:16:2a:03:e9:a5:b4:4c:2d:c2:18:
         27:fc:35:bd:6b:0c:c4:aa:24:a3:17:b5:89:66:9a:9f:16:f3:
         da:61:b0:74:3a:ea:7d:bc:57:1c:09:4a:eb:22:ce:6f:30:77:
         43:5c:15:8e:87:9e:30:ac:39:46:bc:a2:dc:dd:eb:3a:52:3a:
         76:a5:3f:50:1c:d6:fd:ad:d8:8f:9e:cc:72:ea:5a:f7:49:f1:
         74:df:15:4b:15:c9:d1:67:22:7c:37:05:31:a1:3c:ce:b8:03:
         74:08:a5:cd:f6:a5:79:ab:9d:66:84:c9:77:2e:ee:4e:2a:02:
         65:4c:46:84:be:48:36:73:39:e1:56:70:fe:d1:04:02:e5:ca:
         54:fd:49:c1:01:89:90:45:e8:a7:30:c0:00:ff:22:35:4b:f9:
         70:69:08:57:fe:f6:ed:62:c6:aa:e2:f2:6c:60:0f:76:da:6b:
         95:7d:6b:a6:28:f2:38:8b:c0:9e:43:4e:e2:ad:b1:4e:82:82:
         32:79:45:f9:90:03:40:4b:85:d0:16:c1:02:1a:c4:e5:13:4b:
         97:cb:2d:c1:4f:c2:74:1f:92:8b:04:0b:63:ac:df:6c:f1:d3:
         8a:90:98:01
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7AHce+HB+iKNWmuEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJkNmMyZWUtODZjNS00YTE4LTljNGMtZGU2MTk2OWFi
MzM5MB4XDTI2MDgwNjIwMjM0M1oXDTI2MTEwNDIxMjM0M1owLzEtMCsGA1UEAxMk
OTk3MzY3MzYtNmE1Ny00MzNhLThjYjQtZmMxYTBkMzAwYmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojc7Ya0S5atsWMJgJJaTwNyufeWZrYzW1/tL
0EXAQIkEoNnI4p6e6nj07z/GTptysSrUgWj+GmRnTCQoJHr72USgFhLsv1VR8bw1
Grn5LUpK1AXi2SnCqWQACWaqRDOYKvoagIduA2VrVbh5kMORkROBCLELU7Kv5zh3
wzZ17OFAih1rFlyHxckbjoTEwGxjRaau4ChJOe4+WAe2liSfYnUmEgJ5F7ceZTqC
706gjIv9XvWR2raDI2u2u2Zj8H9XdOSaMwxofNjTiEUZRK4Ra+3yF3Lh0HZ/x1l3
LapzibG2BCRNIIlWZTsPBiyJmO0uQ5LrWgFYHDN4V+XTpq/kUQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFNvZ+MEWX01bqtJ+LLfB4vCyNd7CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2
YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYxOTY5YWIzMzkvMTM1ODQyYjYtZTRlYi0z
YjhlLTg1NjItZGQ3N2EwOGJiOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjJkNmMyZWUtODZjNS00YTE4LTlj
NGMtZGU2MTk2OWFiMzM5L2YyZDZjMmVlLTg2YzUtNGExOC05YzRjLWRlNjE5Njlh
YjMzOS5jcmwwHwYDVR0jBBgwFoAUuuy9IFymTTHUnjmeD7RR2nqMU7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYx
OTY5YWIzMzkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AuIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAdjVamAc6b/mvketT+afl7x4y9Y5HcEnY6+YWKgPppbRMLcIY
J/w1vWsMxKokoxe1iWaanxbz2mGwdDrqfbxXHAlK6yLObzB3Q1wVjoeeMKw5Rryi
3N3rOlI6dqU/UBzW/a3Yj57Mcupa90nxdN8VSxXJ0WcifDcFMaE8zrgDdAilzfal
eaudZoTJdy7uTioCZUxGhL5INnM54VZw/tEEAuXKVP1JwQGJkEXopzDAAP8iNUv5
cGkIV/727WLGquLybGAPdtprlX1rpijyOIvAnkNO4q2xToKCMnlF+ZADQEuF0BbB
AhrE5RNLl8stwU/CdB+SiwQLY6zfbPHTipCYAQ==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:19 2026 by rpki-client