Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/434825c5-8609-3d3f-ad4a-bd00bd4b3e64.roa
File:                     434825c5-8609-3d3f-ad4a-bd00bd4b3e64.roa (raw, json)
Hash identifier:          OEKrYU5qEGDk2Q2yk1QlhlPzoFEsxcgRrYYE/UB0bR4=
Subject key identifier:   44:68:E0:5A:DE:77:D8:40:D7:F6:9E:96:AC:30:05:90:E9:3C:89:FB
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DCBA6D13D6D811502D8D0
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/434825c5-8609-3d3f-ad4a-bd00bd4b3e64.roa
Signing time:             Thu 06 Aug 2026 20:23:45 +0000
ROA not before:           Thu 06 Aug 2026 20:23:45 +0000
ROA not after:            Wed 04 Nov 2026 21:23:45 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:320::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:cb:a6:d1:3d:6d:81:15:02:d8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:45 2026 GMT
            Not After : Nov  4 21:23:45 2026 GMT
        Subject: CN=55787ad4-c198-4548-8bbf-97b69f2c3bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:35:65:4a:30:45:86:b2:e0:2e:9d:95:a9:
                    bc:d1:3a:97:76:1d:b1:79:54:d2:a3:50:06:9d:00:
                    c5:ff:c1:e0:e5:f8:8c:a6:c5:76:91:2d:10:a0:6f:
                    82:63:89:c1:33:65:74:12:e0:d1:bb:de:65:a8:c4:
                    ef:5f:ce:38:ef:42:88:5a:c7:62:52:a8:42:ff:fe:
                    a3:3b:51:2e:b5:e8:e6:be:c9:fe:41:c8:0a:0c:d7:
                    67:28:3d:84:c0:82:4a:c1:95:1b:38:08:4f:7b:fe:
                    12:73:02:88:a4:a7:1f:5f:53:48:16:b3:c9:33:07:
                    0d:93:58:63:e9:8d:85:24:35:d2:34:e6:5b:b3:7d:
                    76:12:e8:0a:4f:1b:d1:4b:bc:72:e6:1b:5a:c3:1b:
                    ea:c4:d1:4c:34:fd:6c:94:ce:aa:b0:a0:04:99:0d:
                    e2:c9:2c:33:60:7d:5c:0d:16:e6:7f:fd:00:85:fc:
                    79:34:a9:43:d5:41:60:83:22:92:76:b7:b7:b5:46:
                    25:48:00:1f:3e:fa:d4:ba:3f:d5:28:57:f5:2d:ce:
                    d2:bf:84:0f:d0:fa:bf:22:da:cb:31:56:26:d1:b9:
                    fd:da:41:7c:af:fa:2d:65:fe:1b:0b:fd:96:66:41:
                    cb:8e:3c:40:5f:6e:65:9c:57:94:17:df:63:21:36:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:68:E0:5A:DE:77:D8:40:D7:F6:9E:96:AC:30:05:90:E9:3C:89:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/434825c5-8609-3d3f-ad4a-bd00bd4b3e64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:320::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:44:32:d3:4d:4d:05:f0:fa:05:2c:f0:1c:6e:cc:26:18:d6:
         e1:cd:b2:a8:04:8c:64:83:22:b0:05:a3:44:f8:09:0c:30:8b:
         7a:8f:f3:d8:73:ac:4f:82:70:03:49:2e:6c:ad:8f:bf:be:7e:
         28:3f:5e:d7:f0:aa:8d:36:96:68:c6:54:1e:59:57:13:93:71:
         fb:28:af:6c:0a:8d:9a:83:98:32:47:65:13:27:e6:fc:08:14:
         ac:5a:b7:19:52:e2:de:f6:35:ed:b9:f0:99:4e:c3:ad:94:8b:
         e4:38:69:12:30:55:08:53:d3:d0:b3:6a:cf:e7:84:6f:d6:42:
         06:01:fd:99:5a:c8:5a:74:31:97:67:f4:1b:a4:17:53:5b:0c:
         75:33:41:b9:19:19:ee:d0:21:33:d5:4c:4b:eb:84:e0:7f:ff:
         7f:1c:46:47:e3:62:b5:ae:be:4f:b9:17:89:40:7c:7b:ba:d7:
         03:f5:9b:1c:fc:3a:ee:20:0d:5b:c7:d4:1a:b7:24:e4:0f:bd:
         90:29:f6:36:3c:7e:b3:66:9e:0a:95:81:4f:9a:26:c5:e4:40:
         ca:e5:66:89:59:99:06:9f:e2:93:37:a3:72:52:51:75:7b:da:
         6b:b8:a9:0d:e1:e2:62:7d:f5:50:7b:8d:08:73:12:1c:36:31:
         eb:c3:46:2e
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7AHcum0T1tgRUC2NAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJkNmMyZWUtODZjNS00YTE4LTljNGMtZGU2MTk2OWFi
MzM5MB4XDTI2MDgwNjIwMjM0NVoXDTI2MTEwNDIxMjM0NVowLzEtMCsGA1UEAxMk
NTU3ODdhZDQtYzE5OC00NTQ4LThiYmYtOTdiNjlmMmMzYmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VY1ZUowRYay4C6dlam80TqXdh2xeVTSo1AG
nQDF/8Hg5fiMpsV2kS0QoG+CY4nBM2V0EuDRu95lqMTvX84470KIWsdiUqhC//6j
O1Eutejmvsn+QcgKDNdnKD2EwIJKwZUbOAhPe/4ScwKIpKcfX1NIFrPJMwcNk1hj
6Y2FJDXSNOZbs312EugKTxvRS7xy5htawxvqxNFMNP1slM6qsKAEmQ3iySwzYH1c
DRbmf/0Ahfx5NKlD1UFggyKSdre3tUYlSAAfPvrUuj/VKFf1Lc7Sv4QP0Pq/ItrL
MVYm0bn92kF8r/otZf4bC/2WZkHLjjxAX25lnFeUF99jITZdxQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFERo4Fred9hA1/aelqwwBZDpPIn7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2
YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYxOTY5YWIzMzkvNDM0ODI1YzUtODYwOS0z
ZDNmLWFkNGEtYmQwMGJkNGIzZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjJkNmMyZWUtODZjNS00YTE4LTlj
NGMtZGU2MTk2OWFiMzM5L2YyZDZjMmVlLTg2YzUtNGExOC05YzRjLWRlNjE5Njlh
YjMzOS5jcmwwHwYDVR0jBBgwFoAUuuy9IFymTTHUnjmeD7RR2nqMU7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYx
OTY5YWIzMzkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAYUQy001NBfD6BSzwHG7MJhjW4c2yqASMZIMisAWjRPgJDDCL
eo/z2HOsT4JwA0kubK2Pv75+KD9e1/CqjTaWaMZUHllXE5Nx+yivbAqNmoOYMkdl
Eyfm/AgUrFq3GVLi3vY17bnwmU7DrZSL5DhpEjBVCFPT0LNqz+eEb9ZCBgH9mVrI
WnQxl2f0G6QXU1sMdTNBuRkZ7tAhM9VMS+uE4H//fxxGR+Nita6+T7kXiUB8e7rX
A/WbHPw67iANW8fUGrck5A+9kCn2Njx+s2aeCpWBT5omxeRAyuVmiVmZBp/ikzej
clJRdXvaa7ipDeHiYn31UHuNCHMSHDYx68NGLg==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:38:58 2026 by rpki-client