Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3e848b11-b243-32a1-a43d-1fe420f34fca.roa
File:                     3e848b11-b243-32a1-a43d-1fe420f34fca.roa (raw, json)
Hash identifier:          BnkddHdFO3XuKkgjdDdn3p41BLNd8RwJ08uk5lW52fY=
Subject key identifier:   9C:4F:9B:E4:D2:8C:73:57:E5:3C:B0:A0:64:BE:CA:09:1A:FF:EA:19
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DB9551E85369D584AF800
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3e848b11-b243-32a1-a43d-1fe420f34fca.roa
Signing time:             Thu 06 Aug 2026 20:23:36 +0000
ROA not before:           Thu 06 Aug 2026 20:23:36 +0000
ROA not after:            Wed 04 Nov 2026 21:23:36 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1f4::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:b9:55:1e:85:36:9d:58:4a:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:36 2026 GMT
            Not After : Nov  4 21:23:36 2026 GMT
        Subject: CN=43a13ceb-acb1-4022-9a31-d8287e92e479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6c:73:f6:99:aa:ed:18:4d:6f:9a:0a:bd:03:
                    42:51:d9:7c:ef:48:21:38:f2:7d:ae:64:87:63:ce:
                    df:78:e1:58:38:fa:88:c5:65:6e:61:84:39:07:e7:
                    ca:f8:32:b7:01:12:88:70:5d:f5:3c:31:9c:a8:72:
                    74:8f:9f:6a:8d:ba:8a:3c:b3:2b:73:e3:fc:40:2b:
                    67:e8:3d:ae:89:88:e6:8b:e1:a8:d5:51:53:c9:ad:
                    b2:a8:24:14:69:0b:87:1d:26:88:c8:fe:90:e8:16:
                    98:ad:17:ca:51:48:ce:73:06:b6:d7:3d:cf:1d:b3:
                    ee:30:85:c4:40:f3:fb:68:a4:31:82:b0:03:6e:68:
                    07:00:db:78:32:21:b8:d6:2d:01:7b:c7:3b:ad:5f:
                    3c:02:30:f7:0c:6d:d9:95:b5:84:55:38:4f:08:e6:
                    b2:74:cc:c3:b5:c9:37:f4:d6:bc:33:c5:46:84:5e:
                    c0:ca:13:31:ab:87:db:7e:f5:ac:94:0a:bf:b3:0a:
                    00:dd:9c:c8:ee:ba:f0:7c:7f:e5:3a:20:df:0b:4d:
                    9e:4d:ac:aa:ce:86:e6:5d:0d:76:34:7b:d6:5d:25:
                    ca:54:8a:c8:05:d0:c6:85:b3:32:ef:4a:91:21:4d:
                    13:60:6b:8d:fa:8f:09:f0:7b:a6:10:5c:9b:85:28:
                    1f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4F:9B:E4:D2:8C:73:57:E5:3C:B0:A0:64:BE:CA:09:1A:FF:EA:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3e848b11-b243-32a1-a43d-1fe420f34fca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1f4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f3:4f:4a:5a:c0:7c:12:71:8b:f4:67:66:21:3c:6a:07:7b:
         96:ce:35:8a:4d:99:7f:db:10:0b:45:da:0d:e8:5e:de:95:9e:
         04:fa:c7:6d:a3:98:90:ca:87:4c:40:2a:ff:f5:c9:77:2a:42:
         73:f2:c0:1b:07:7f:25:e5:a8:64:c9:ab:35:2d:61:05:5a:a9:
         01:d4:b7:af:61:a7:91:ec:64:40:38:ee:bc:7b:3d:a0:97:2d:
         3b:5f:37:d6:b7:6f:bd:51:cd:21:61:30:61:da:a7:04:81:aa:
         5e:e5:f1:4a:85:4c:df:d0:14:93:0b:f1:ae:f0:6b:e3:ed:69:
         6e:08:d6:17:03:26:03:41:e0:4f:fd:48:3d:3d:34:ec:84:9d:
         cc:3a:7e:af:1f:04:31:f4:83:46:66:82:fb:f9:ee:2e:76:bf:
         fa:d7:eb:de:73:50:70:54:95:da:cc:1d:53:47:66:90:27:88:
         0d:e1:bb:21:84:80:55:8a:0e:2f:2d:d9:5e:b3:89:4a:32:7c:
         5c:f9:71:9f:98:2b:f7:20:b8:d8:d6:ad:4d:dc:4b:6d:ec:44:
         d8:d6:29:ee:73:f1:e8:ba:39:65:bb:d9:75:5e:f0:29:2c:48:
         5b:bb:e7:7f:84:fe:67:89:d9:2f:fe:da:6e:eb:57:38:36:50:
         97:c6:67:6a
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7AHblVHoU2nVhK+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJkNmMyZWUtODZjNS00YTE4LTljNGMtZGU2MTk2OWFi
MzM5MB4XDTI2MDgwNjIwMjMzNloXDTI2MTEwNDIxMjMzNlowLzEtMCsGA1UEAxMk
NDNhMTNjZWItYWNiMS00MDIyLTlhMzEtZDgyODdlOTJlNDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWxz9pmq7RhNb5oKvQNCUdl870ghOPJ9rmSH
Y87feOFYOPqIxWVuYYQ5B+fK+DK3ARKIcF31PDGcqHJ0j59qjbqKPLMrc+P8QCtn
6D2uiYjmi+Go1VFTya2yqCQUaQuHHSaIyP6Q6BaYrRfKUUjOcwa21z3PHbPuMIXE
QPP7aKQxgrADbmgHANt4MiG41i0Be8c7rV88AjD3DG3ZlbWEVThPCOaydMzDtck3
9Na8M8VGhF7AyhMxq4fbfvWslAq/swoA3ZzI7rrwfH/lOiDfC02eTayqzobmXQ12
NHvWXSXKVIrIBdDGhbMy70qRIU0TYGuN+o8J8HumEFybhSgfXwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFJxPm+TSjHNX5TywoGS+ygka/+oZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2
YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYxOTY5YWIzMzkvM2U4NDhiMTEtYjI0My0z
MmExLWE0M2QtMWZlNDIwZjM0ZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjJkNmMyZWUtODZjNS00YTE4LTlj
NGMtZGU2MTk2OWFiMzM5L2YyZDZjMmVlLTg2YzUtNGExOC05YzRjLWRlNjE5Njlh
YjMzOS5jcmwwHwYDVR0jBBgwFoAUuuy9IFymTTHUnjmeD7RR2nqMU7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYx
OTY5YWIzMzkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AfQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAOPNPSlrAfBJxi/RnZiE8agd7ls41ik2Zf9sQC0XaDehe3pWe
BPrHbaOYkMqHTEAq//XJdypCc/LAGwd/JeWoZMmrNS1hBVqpAdS3r2GnkexkQDju
vHs9oJctO1831rdvvVHNIWEwYdqnBIGqXuXxSoVM39AUkwvxrvBr4+1pbgjWFwMm
A0HgT/1IPT007ISdzDp+rx8EMfSDRmaC+/nuLna/+tfr3nNQcFSV2swdU0dmkCeI
DeG7IYSAVYoOLy3ZXrOJSjJ8XPlxn5gr9yC42NatTdxLbexE2NYp7nPx6Lo5ZbvZ
dV7wKSxIW7vnf4T+Z4nZL/7abutXODZQl8Znag==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:38:45 2026 by rpki-client