Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/4dc2f201-86f2-377b-bb07-69d2025a5b2b.roa
File:                     4dc2f201-86f2-377b-bb07-69d2025a5b2b.roa (raw, json)
Hash identifier:          9RfZkXQ/jmRWbyUE/ii6ZqUyTvUydVgIKBtXwrZ+GpU=
Subject key identifier:   01:AD:FD:14:4E:26:FC:B1:C6:E2:BA:A7:BA:D2:06:F5:34:2E:5F:38
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DA5C6CF7E63124F665380
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/4dc2f201-86f2-377b-bb07-69d2025a5b2b.roa
Signing time:             Thu 06 Aug 2026 20:23:27 +0000
ROA not before:           Thu 06 Aug 2026 20:23:27 +0000
ROA not after:            Wed 04 Nov 2026 21:23:27 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:8b::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:a5:c6:cf:7e:63:12:4f:66:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:27 2026 GMT
            Not After : Nov  4 21:23:27 2026 GMT
        Subject: CN=3568f839-7cb7-4ea5-be47-a5035efee63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fe:40:21:6b:49:ef:f4:f1:d1:e7:42:d3:c7:
                    3a:57:b3:25:14:28:e8:b0:2e:4e:1c:51:c8:11:fe:
                    48:04:54:49:1a:c3:52:ff:c1:73:48:b0:9a:44:ee:
                    f1:a5:b6:93:d2:50:3e:69:2b:90:ac:cf:dd:fa:ac:
                    d5:c6:ee:8e:d7:88:56:c9:fe:c8:29:e1:16:94:c2:
                    d6:ee:4e:76:29:a5:7a:b9:43:e4:db:7d:9d:87:4c:
                    17:c6:d9:85:89:de:4c:a8:cb:cf:c9:f3:0f:4a:46:
                    31:6c:83:77:14:0c:5f:3b:dd:97:e5:1c:be:99:51:
                    27:cb:ea:9e:4a:46:69:c4:1d:c9:60:25:f4:ca:d8:
                    16:b7:c7:ed:14:9f:a4:9e:12:9e:c0:af:86:c6:d1:
                    e9:20:5a:d4:09:d9:c5:bc:27:37:35:28:fb:86:d0:
                    b9:46:c6:13:e1:11:fc:e0:93:db:c0:3c:3d:c8:76:
                    50:54:98:43:f3:dd:53:1d:19:ce:96:f8:05:82:7d:
                    6d:06:7d:06:15:81:a5:a0:3e:4f:82:6d:8c:f4:6d:
                    89:94:20:a2:64:21:71:32:e3:2f:00:75:eb:2a:01:
                    26:92:be:50:e7:43:c1:00:0b:f6:89:99:c5:00:d6:
                    38:7b:e4:24:90:9e:b7:56:0c:3e:e6:4d:6a:34:c8:
                    b2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AD:FD:14:4E:26:FC:B1:C6:E2:BA:A7:BA:D2:06:F5:34:2E:5F:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/4dc2f201-86f2-377b-bb07-69d2025a5b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:8b::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:36:df:1e:c5:a5:ef:00:c5:50:30:0e:94:37:2b:47:a9:c1:
         03:ca:c0:66:b1:fa:7e:83:e6:5f:ef:57:da:e7:39:21:81:1e:
         60:bb:f9:43:55:90:1a:ac:dd:5f:0a:db:9a:85:55:09:3b:58:
         d8:2b:c2:03:2c:c7:bf:c1:ba:ef:7e:58:24:c9:fd:5f:d3:53:
         a9:6b:14:c3:0c:30:ea:76:34:c2:68:eb:a3:59:be:76:f3:58:
         f6:1d:b8:35:8a:a8:1d:9a:f1:90:00:2a:9b:43:d8:2f:fc:ba:
         ae:45:8a:1b:c8:23:8d:7e:97:a2:01:5d:d1:e8:43:cd:26:14:
         59:5f:ea:4b:03:01:ec:a3:79:b4:33:16:be:e4:32:1e:f1:60:
         6f:c7:aa:14:d3:46:d4:64:15:6e:c8:1d:db:74:49:1d:d1:71:
         06:27:27:ae:8e:44:b7:e0:8e:c7:f0:35:ad:dc:0f:c3:76:61:
         13:63:63:51:c5:04:8f:25:01:13:63:36:87:5e:22:89:2b:d7:
         db:b1:21:54:b6:5f:70:2b:9e:a8:5d:7d:7b:c5:eb:76:a6:94:
         97:da:fc:44:7c:99:68:88:5b:f8:20:d4:5a:76:db:df:47:de:
         29:13:33:ae:a2:7e:73:a5:8c:f1:6f:e0:80:e6:8b:32:fa:f8:
         39:8c:b7:61
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7AHaXGz35jEk9mU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJkNmMyZWUtODZjNS00YTE4LTljNGMtZGU2MTk2OWFi
MzM5MB4XDTI2MDgwNjIwMjMyN1oXDTI2MTEwNDIxMjMyN1owLzEtMCsGA1UEAxMk
MzU2OGY4MzktN2NiNy00ZWE1LWJlNDctYTUwMzVlZmVlNjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP5AIWtJ7/Tx0edC08c6V7MlFCjosC5OHFHI
Ef5IBFRJGsNS/8FzSLCaRO7xpbaT0lA+aSuQrM/d+qzVxu6O14hWyf7IKeEWlMLW
7k52KaV6uUPk232dh0wXxtmFid5MqMvPyfMPSkYxbIN3FAxfO92X5Ry+mVEny+qe
SkZpxB3JYCX0ytgWt8ftFJ+knhKewK+GxtHpIFrUCdnFvCc3NSj7htC5RsYT4RH8
4JPbwDw9yHZQVJhD891THRnOlvgFgn1tBn0GFYGloD5Pgm2M9G2JlCCiZCFxMuMv
AHXrKgEmkr5Q50PBAAv2iZnFANY4e+QkkJ63Vgw+5k1qNMiydwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFAGt/RROJvyxxuK6p7rSBvU0Ll84MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2
YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYxOTY5YWIzMzkvNGRjMmYyMDEtODZmMi0z
NzdiLWJiMDctNjlkMjAyNWE1YjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjJkNmMyZWUtODZjNS00YTE4LTlj
NGMtZGU2MTk2OWFiMzM5L2YyZDZjMmVlLTg2YzUtNGExOC05YzRjLWRlNjE5Njlh
YjMzOS5jcmwwHwYDVR0jBBgwFoAUuuy9IFymTTHUnjmeD7RR2nqMU7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYx
OTY5YWIzMzkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AIswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAVzbfHsWl7wDFUDAOlDcrR6nBA8rAZrH6foPmX+9X2uc5IYEe
YLv5Q1WQGqzdXwrbmoVVCTtY2CvCAyzHv8G6735YJMn9X9NTqWsUwwww6nY0wmjr
o1m+dvNY9h24NYqoHZrxkAAqm0PYL/y6rkWKG8gjjX6XogFd0ehDzSYUWV/qSwMB
7KN5tDMWvuQyHvFgb8eqFNNG1GQVbsgd23RJHdFxBicnro5Et+COx/A1rdwPw3Zh
E2NjUcUEjyUBE2M2h14iiSvX27EhVLZfcCueqF19e8XrdqaUl9r8RHyZaIhb+CDU
Wnbb30feKRMzrqJ+c6WM8W/ggOaLMvr4OYy3YQ==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:26 2026 by rpki-client