Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/947ffd34-f205-350a-81a2-4e8c129f1f2e.roa
File:                     947ffd34-f205-350a-81a2-4e8c129f1f2e.roa (raw, json)
Hash identifier:          0tcGkyJAEPDMgtWpclQzrl+hLUmDzQiFvrz1BR2dkgY=
Subject key identifier:   D1:FE:F2:22:29:65:3D:23:CD:C3:77:95:A2:12:18:5C:44:68:23:1D
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DD285F349EDFDA87F1900
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/947ffd34-f205-350a-81a2-4e8c129f1f2e.roa
Signing time:             Thu 06 Aug 2026 20:23:48 +0000
ROA not before:           Thu 06 Aug 2026 20:23:48 +0000
ROA not after:            Wed 04 Nov 2026 21:23:48 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:385::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:d2:85:f3:49:ed:fd:a8:7f:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:48 2026 GMT
            Not After : Nov  4 21:23:48 2026 GMT
        Subject: CN=462d4ea6-233d-4d1d-883a-9f34479ffc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:d5:15:49:a4:d1:d8:7d:2a:ae:7d:c2:91:
                    01:39:a2:b4:52:0c:01:2e:c9:2e:8b:dc:c7:d9:bd:
                    0c:f4:c8:52:a4:f9:cd:4d:30:99:10:b9:28:23:09:
                    cb:4c:e7:87:a0:8c:27:a5:ca:cf:1c:ec:cd:b1:c0:
                    59:66:17:f0:fe:00:90:8d:f8:2e:82:c6:ac:65:f7:
                    53:52:04:93:aa:8e:09:58:89:62:02:64:fc:4c:49:
                    05:ce:cd:63:95:0a:39:8e:8c:2d:2d:af:92:e1:d8:
                    85:9d:ba:7d:98:d4:3c:32:1e:fe:5b:2c:48:2e:ef:
                    63:a3:35:5e:cb:32:1d:ed:3f:15:de:45:79:6f:db:
                    45:0a:d2:ea:ec:3a:53:9a:42:1a:7d:ff:ad:8e:98:
                    41:5d:bc:36:47:40:ac:d1:5c:fa:16:83:3f:3c:e6:
                    5c:a4:92:1d:e0:6d:7b:29:79:c0:8a:82:7e:74:01:
                    5c:ea:72:59:57:7e:13:97:74:f0:44:42:4e:5e:72:
                    e1:d6:10:dc:a4:2f:12:20:bf:83:6d:fe:d2:df:c5:
                    32:da:ff:9f:72:fe:4f:a3:5d:68:bb:aa:75:a5:61:
                    07:02:1e:16:95:82:6f:4d:07:bf:b7:1c:1e:67:71:
                    7e:3d:09:12:f6:20:b1:97:e4:e4:ae:de:24:90:5a:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FE:F2:22:29:65:3D:23:CD:C3:77:95:A2:12:18:5C:44:68:23:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/947ffd34-f205-350a-81a2-4e8c129f1f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:385::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c8:1e:d1:f0:a2:38:40:86:eb:66:39:40:29:5c:a2:df:3d:
         1b:85:af:4c:e3:86:b9:15:8f:9b:4a:e9:17:4c:61:45:8d:f3:
         20:cc:07:07:d7:bc:b7:96:17:f7:42:21:0a:ef:85:fe:de:ac:
         35:d7:37:bf:4f:d2:ae:80:b4:d4:d7:63:6a:b4:4d:cd:d2:49:
         5f:df:34:08:67:90:43:61:16:4e:d9:1f:15:0c:27:fb:65:f3:
         55:68:67:52:80:6b:b3:48:66:f2:f4:80:e0:bd:c7:dd:7f:d3:
         75:d7:86:de:1c:48:54:0a:39:f6:c5:24:8e:93:fc:e6:d5:1c:
         ec:3f:d4:75:dd:0c:8e:ee:16:70:40:d5:dd:a7:48:5d:9e:e8:
         68:76:83:be:4d:63:ca:ef:a1:70:28:95:6b:4d:94:d4:b7:94:
         13:36:d9:cf:9e:6e:26:21:9f:96:a7:6f:39:41:de:08:d5:15:
         bc:d9:61:8c:0c:59:16:21:bd:7c:c5:57:04:b6:f1:bb:c0:0c:
         1f:a7:a8:87:15:d8:df:f9:7c:41:57:7c:46:32:f6:41:d7:2e:
         a4:1d:b7:f0:55:f1:39:f5:b1:ea:0b:0c:32:ac:cd:bf:31:2c:
         a7:38:ff:74:1c:a4:1f:22:00:8b:e4:07:25:14:d6:a2:99:4d:
         12:75:1d:cb
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7AHdKF80nt/ah/GQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJkNmMyZWUtODZjNS00YTE4LTljNGMtZGU2MTk2OWFi
MzM5MB4XDTI2MDgwNjIwMjM0OFoXDTI2MTEwNDIxMjM0OFowLzEtMCsGA1UEAxMk
NDYyZDRlYTYtMjMzZC00ZDFkLTg4M2EtOWYzNDQ3OWZmYzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g7VFUmk0dh9Kq59wpEBOaK0UgwBLskui9zH
2b0M9MhSpPnNTTCZELkoIwnLTOeHoIwnpcrPHOzNscBZZhfw/gCQjfgugsasZfdT
UgSTqo4JWIliAmT8TEkFzs1jlQo5jowtLa+S4diFnbp9mNQ8Mh7+WyxILu9jozVe
yzId7T8V3kV5b9tFCtLq7DpTmkIaff+tjphBXbw2R0Cs0Vz6FoM/POZcpJId4G17
KXnAioJ+dAFc6nJZV34Tl3TwREJOXnLh1hDcpC8SIL+Dbf7S38Uy2v+fcv5Po11o
u6p1pWEHAh4WlYJvTQe/txweZ3F+PQkS9iCxl+Tkrt4kkFru4wIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFNH+8iIpZT0jzcN3laISGFxEaCMdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2
YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYxOTY5YWIzMzkvOTQ3ZmZkMzQtZjIwNS0z
NTBhLTgxYTItNGU4YzEyOWYxZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjJkNmMyZWUtODZjNS00YTE4LTlj
NGMtZGU2MTk2OWFiMzM5L2YyZDZjMmVlLTg2YzUtNGExOC05YzRjLWRlNjE5Njlh
YjMzOS5jcmwwHwYDVR0jBBgwFoAUuuy9IFymTTHUnjmeD7RR2nqMU7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYx
OTY5YWIzMzkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
A4UwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAccge0fCiOECG62Y5QClcot89G4WvTOOGuRWPm0rpF0xhRY3z
IMwHB9e8t5YX90IhCu+F/t6sNdc3v0/SroC01NdjarRNzdJJX980CGeQQ2EWTtkf
FQwn+2XzVWhnUoBrs0hm8vSA4L3H3X/TddeG3hxIVAo59sUkjpP85tUc7D/Udd0M
ju4WcEDV3adIXZ7oaHaDvk1jyu+hcCiVa02U1LeUEzbZz55uJiGflqdvOUHeCNUV
vNlhjAxZFiG9fMVXBLbxu8AMH6eohxXY3/l8QVd8RjL2QdcupB238FXxOfWx6gsM
MqzNvzEspzj/dBykHyIAi+QHJRTWoplNEnUdyw==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:39:30 2026 by rpki-client