Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a57c2a18-d694-31cc-aa8c-962f474b3386.roa
File:                     a57c2a18-d694-31cc-aa8c-962f474b3386.roa (raw, json)
Hash identifier:          peCeL+uwgNXqNitKlNVQgnQG/OEqNbN6pBLdWKokYpw=
Subject key identifier:   44:C7:A0:87:CC:15:6E:D7:C9:A9:0D:AA:3E:23:4A:53:65:23:07:34
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DD2CA45251AB6CF408A00
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a57c2a18-d694-31cc-aa8c-962f474b3386.roa
Signing time:             Thu 06 Aug 2026 20:23:48 +0000
ROA not before:           Thu 06 Aug 2026 20:23:48 +0000
ROA not after:            Wed 04 Nov 2026 21:23:48 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:389::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:d2:ca:45:25:1a:b6:cf:40:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:48 2026 GMT
            Not After : Nov  4 21:23:48 2026 GMT
        Subject: CN=19364ac3-bfe0-4a99-94b9-4830292504e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:90:1b:bd:df:e8:32:e9:22:0e:c4:52:07:a9:
                    a3:19:fb:07:38:53:d7:02:ec:fa:51:0c:84:3e:0f:
                    34:4f:ff:2c:19:ba:f6:a0:1c:90:67:b5:b2:27:bb:
                    c6:c6:00:7f:b8:ad:12:51:8b:51:bf:32:8d:a9:02:
                    49:1f:56:5b:ae:32:4b:14:06:14:e7:5f:13:0d:ee:
                    3d:86:cb:11:7d:64:44:16:de:4f:a9:ca:b6:ce:9b:
                    b6:1a:ac:e6:8e:ef:4b:fe:99:18:a7:16:b0:06:32:
                    39:6b:3e:10:08:40:a6:be:06:63:12:51:80:ec:2c:
                    dd:7b:93:0d:12:f3:89:5e:10:b4:8c:be:be:0e:6b:
                    3b:d8:df:d3:8b:33:9d:03:aa:85:c5:ee:24:cc:eb:
                    39:f5:aa:14:9e:6d:17:07:f9:f0:0f:4a:ad:b9:aa:
                    27:da:b0:44:81:dc:7b:c6:27:ed:b5:30:bf:24:99:
                    0c:8a:96:68:44:fa:77:30:ad:6b:93:43:0a:a8:f2:
                    88:ff:8a:cf:56:af:e4:e4:5d:16:86:ae:3f:db:2d:
                    ff:25:54:6e:5f:cd:62:a7:1a:53:be:56:62:67:b0:
                    ae:bd:77:54:26:66:e9:50:08:db:4a:e6:b1:e6:39:
                    85:b3:40:43:0b:2a:e0:37:11:3c:16:bc:a8:cc:90:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C7:A0:87:CC:15:6E:D7:C9:A9:0D:AA:3E:23:4A:53:65:23:07:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a57c2a18-d694-31cc-aa8c-962f474b3386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:389::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:25:38:04:bb:ab:23:f9:a3:7d:6e:4e:92:1a:2d:04:80:48:
         e5:ee:b4:3b:68:32:87:de:3d:f2:7f:ea:cc:00:6b:4e:5b:bc:
         45:81:df:8f:78:df:97:07:96:4c:ec:f1:aa:84:f7:16:62:bb:
         ab:b4:1d:f6:d5:1b:35:51:53:28:6a:5b:99:14:14:f6:67:7d:
         8f:ca:29:74:39:9b:b4:39:6f:41:40:5a:dc:25:a4:51:bd:52:
         2c:3f:51:91:63:54:b8:dd:29:f5:d6:3b:d4:00:68:fb:67:c1:
         27:d2:0e:6c:d4:29:c1:e6:f5:68:ce:29:5c:53:93:06:f3:73:
         9a:de:06:aa:d1:f2:d9:11:39:1f:c7:d7:cc:1d:a6:e0:11:89:
         37:2b:43:1d:ab:cf:6d:ab:3a:c7:f3:92:88:62:4e:fd:40:a6:
         cb:3e:f8:5b:e1:5f:12:ec:83:67:d7:50:e4:26:27:e0:a4:03:
         7f:89:6a:bb:7a:f5:68:f5:5d:77:e5:3f:71:e5:b8:46:99:c1:
         a8:75:b9:f8:4e:cc:4e:19:80:90:16:95:31:5d:1e:40:9e:d0:
         c6:ae:38:1d:07:c7:78:d6:d6:f8:e4:89:78:29:07:e4:83:8a:
         b1:a9:11:a7:e5:b0:44:13:da:d2:03:85:03:1c:ea:4f:2b:26:
         0d:f4:ef:97
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7AHdLKRSUats9AigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJkNmMyZWUtODZjNS00YTE4LTljNGMtZGU2MTk2OWFi
MzM5MB4XDTI2MDgwNjIwMjM0OFoXDTI2MTEwNDIxMjM0OFowLzEtMCsGA1UEAxMk
MTkzNjRhYzMtYmZlMC00YTk5LTk0YjktNDgzMDI5MjUwNGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZAbvd/oMukiDsRSB6mjGfsHOFPXAuz6UQyE
Pg80T/8sGbr2oByQZ7WyJ7vGxgB/uK0SUYtRvzKNqQJJH1ZbrjJLFAYU518TDe49
hssRfWREFt5Pqcq2zpu2Gqzmju9L/pkYpxawBjI5az4QCECmvgZjElGA7Czde5MN
EvOJXhC0jL6+Dms72N/TizOdA6qFxe4kzOs59aoUnm0XB/nwD0qtuaon2rBEgdx7
xifttTC/JJkMipZoRPp3MK1rk0MKqPKI/4rPVq/k5F0Whq4/2y3/JVRuX81ipxpT
vlZiZ7CuvXdUJmbpUAjbSuax5jmFs0BDCyrgNxE8FryozJDgcQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFETHoIfMFW7XyakNqj4jSlNlIwc0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2
YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYxOTY5YWIzMzkvYTU3YzJhMTgtZDY5NC0z
MWNjLWFhOGMtOTYyZjQ3NGIzMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjJkNmMyZWUtODZjNS00YTE4LTlj
NGMtZGU2MTk2OWFiMzM5L2YyZDZjMmVlLTg2YzUtNGExOC05YzRjLWRlNjE5Njlh
YjMzOS5jcmwwHwYDVR0jBBgwFoAUuuy9IFymTTHUnjmeD7RR2nqMU7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYx
OTY5YWIzMzkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
A4kwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAUiU4BLurI/mjfW5OkhotBIBI5e60O2gyh9498n/qzABrTlu8
RYHfj3jflweWTOzxqoT3FmK7q7Qd9tUbNVFTKGpbmRQU9md9j8opdDmbtDlvQUBa
3CWkUb1SLD9RkWNUuN0p9dY71ABo+2fBJ9IObNQpweb1aM4pXFOTBvNzmt4GqtHy
2RE5H8fXzB2m4BGJNytDHavPbas6x/OSiGJO/UCmyz74W+FfEuyDZ9dQ5CYn4KQD
f4lqu3r1aPVdd+U/ceW4RpnBqHW5+E7MThmAkBaVMV0eQJ7Qxq44HQfHeNbW+OSJ
eCkH5IOKsakRp+WwRBPa0gOFAxzqTysmDfTvlw==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:38:58 2026 by rpki-client