Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/8fa073a7-0360-353f-850c-d450f9c6f866.roa
File:                     8fa073a7-0360-353f-850c-d450f9c6f866.roa (raw, json)
Hash identifier:          S3T7NSt6pDmLbm63iHqBLz4SupF+eUUrw9Jb17qT8+o=
Subject key identifier:   56:4B:2D:F6:CC:48:5E:A4:F3:05:35:8B:04:4C:61:F3:4C:F3:F2:84
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DD7BD23456106CA6C8DC0
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/8fa073a7-0360-353f-850c-d450f9c6f866.roa
Signing time:             Thu 06 Aug 2026 20:23:51 +0000
ROA not before:           Thu 06 Aug 2026 20:23:51 +0000
ROA not after:            Wed 04 Nov 2026 21:23:51 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3d2::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:d7:bd:23:45:61:06:ca:6c:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:51 2026 GMT
            Not After : Nov  4 21:23:51 2026 GMT
        Subject: CN=91c7ffbb-fa7f-4022-a42d-a4ad48a34024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:29:4c:35:ed:d0:39:08:80:53:c1:7a:1a:9a:
                    d6:61:93:49:87:49:34:27:73:9b:f7:f5:32:10:87:
                    5a:55:35:6b:e5:b3:92:de:e9:73:00:bf:c8:4d:7c:
                    39:4e:cf:94:36:f0:67:90:75:f9:3a:e3:4d:92:5f:
                    6e:af:99:1e:9b:29:32:3f:27:0e:6e:59:a4:4c:19:
                    91:05:a2:45:36:74:8b:ba:19:f0:b1:ef:7c:d5:a3:
                    61:67:ae:71:95:be:7e:9e:92:24:a6:11:1d:59:99:
                    7d:89:15:6b:2f:a0:f6:3e:da:33:3f:5b:85:fc:b3:
                    78:75:cd:ee:87:58:6f:1e:d1:67:2f:37:e0:2d:28:
                    ca:89:13:c6:96:e4:dc:04:10:53:8f:85:2d:5e:15:
                    2a:0a:a5:dd:05:38:f3:cf:54:b4:7e:01:22:53:68:
                    0f:b5:3b:a5:53:57:2d:c7:1a:1d:a1:92:2c:fc:e7:
                    e6:e6:ae:bd:46:07:55:e1:c2:cb:97:bf:76:af:d5:
                    23:39:87:5d:53:73:3c:f9:2f:e9:cf:94:df:ff:d3:
                    0b:6f:c2:9d:62:f5:b7:d9:a6:bc:f6:ce:dd:ba:f7:
                    94:ad:a5:cc:1b:17:1a:8d:ae:0f:26:c8:87:c3:c9:
                    5c:f5:99:60:2b:6a:f7:93:00:ed:04:21:99:3a:e1:
                    c3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4B:2D:F6:CC:48:5E:A4:F3:05:35:8B:04:4C:61:F3:4C:F3:F2:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/8fa073a7-0360-353f-850c-d450f9c6f866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3d2::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3b:f1:45:a9:93:97:2c:be:04:37:da:3d:0b:11:0b:9a:03:
         e2:0c:19:0a:5f:8c:8a:fc:73:f9:12:d3:50:9a:72:6d:22:97:
         3b:07:76:f9:59:ce:0f:dc:d9:93:6e:e3:57:15:12:e3:11:21:
         bf:51:ea:75:70:29:69:75:5e:26:a3:de:78:81:91:b2:a3:6b:
         4e:1b:75:86:39:f3:9b:da:ae:9a:2d:0b:dc:64:5e:a5:75:89:
         06:0e:c5:5a:5b:fe:d3:dc:eb:e8:47:be:c7:3a:c2:9f:bf:cb:
         dd:2c:8a:d1:a9:61:d3:8f:18:53:16:6b:21:02:bb:b6:c2:13:
         10:fe:ba:9f:fc:f6:72:2e:26:57:6f:02:2a:74:76:25:36:9f:
         01:7e:be:76:cf:e0:36:5b:07:0a:4f:93:bb:1e:dc:71:6e:8e:
         6e:f1:31:08:2b:9d:6c:ec:ff:5f:4d:69:aa:f3:09:a7:c5:5c:
         7e:c4:0d:c8:84:31:d1:3b:36:54:18:0d:5d:1c:7a:75:8b:ac:
         1a:d0:57:27:3e:f2:d0:3f:f2:42:20:7d:f3:11:50:21:c0:20:
         b9:82:89:b3:b4:2d:bd:92:b6:ab:07:31:ec:8e:08:19:c7:fa:
         af:08:b8:f0:c1:57:0b:45:2a:1b:07:5d:94:8b:4e:1a:11:ff:
         69:fc:e0:c6
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7AHde9I0VhBspsjcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJkNmMyZWUtODZjNS00YTE4LTljNGMtZGU2MTk2OWFi
MzM5MB4XDTI2MDgwNjIwMjM1MVoXDTI2MTEwNDIxMjM1MVowLzEtMCsGA1UEAxMk
OTFjN2ZmYmItZmE3Zi00MDIyLWE0MmQtYTRhZDQ4YTM0MDI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SlMNe3QOQiAU8F6GprWYZNJh0k0J3Ob9/Uy
EIdaVTVr5bOS3ulzAL/ITXw5Ts+UNvBnkHX5OuNNkl9ur5kemykyPycOblmkTBmR
BaJFNnSLuhnwse981aNhZ65xlb5+npIkphEdWZl9iRVrL6D2PtozP1uF/LN4dc3u
h1hvHtFnLzfgLSjKiRPGluTcBBBTj4UtXhUqCqXdBTjzz1S0fgEiU2gPtTulU1ct
xxodoZIs/Ofm5q69RgdV4cLLl792r9UjOYddU3M8+S/pz5Tf/9MLb8KdYvW32aa8
9s7duveUraXMGxcaja4PJsiHw8lc9ZlgK2r3kwDtBCGZOuHDpwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFFZLLfbMSF6k8wU1iwRMYfNM8/KEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2
YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYxOTY5YWIzMzkvOGZhMDczYTctMDM2MC0z
NTNmLTg1MGMtZDQ1MGY5YzZmODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjJkNmMyZWUtODZjNS00YTE4LTlj
NGMtZGU2MTk2OWFiMzM5L2YyZDZjMmVlLTg2YzUtNGExOC05YzRjLWRlNjE5Njlh
YjMzOS5jcmwwHwYDVR0jBBgwFoAUuuy9IFymTTHUnjmeD7RR2nqMU7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYx
OTY5YWIzMzkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
A9IwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAeDvxRamTlyy+BDfaPQsRC5oD4gwZCl+Mivxz+RLTUJpybSKX
Owd2+VnOD9zZk27jVxUS4xEhv1HqdXApaXVeJqPeeIGRsqNrTht1hjnzm9qumi0L
3GRepXWJBg7FWlv+09zr6Ee+xzrCn7/L3SyK0alh048YUxZrIQK7tsITEP66n/z2
ci4mV28CKnR2JTafAX6+ds/gNlsHCk+Tux7ccW6ObvExCCudbOz/X01pqvMJp8Vc
fsQNyIQx0Ts2VBgNXRx6dYusGtBXJz7y0D/yQiB98xFQIcAguYKJs7QtvZK2qwcx
7I4IGcf6rwi48MFXC0UqGwddlItOGhH/afzgxg==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:39:55 2026 by rpki-client