Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/afdafd83-8180-3017-b9a0-64fa4d0175fc.roa
File:                     afdafd83-8180-3017-b9a0-64fa4d0175fc.roa (raw, json)
Hash identifier:          tynpFSvwVCclzEvRSYWO0R0V6PhUNQYlWKFS0okm4nc=
Subject key identifier:   22:E1:59:5F:EE:67:92:26:0C:41:1D:41:9E:B1:42:4B:AC:84:A4:D7
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DB49E69B74D9F37A1DD80
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/afdafd83-8180-3017-b9a0-64fa4d0175fc.roa
Signing time:             Thu 06 Aug 2026 20:23:34 +0000
ROA not before:           Thu 06 Aug 2026 20:23:34 +0000
ROA not after:            Wed 04 Nov 2026 21:23:34 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1a1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:b4:9e:69:b7:4d:9f:37:a1:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:34 2026 GMT
            Not After : Nov  4 21:23:34 2026 GMT
        Subject: CN=fe17c3fd-b98a-4cfc-ad8f-48ae247cab87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:2f:36:43:1b:88:d6:d2:52:de:08:49:ef:
                    9c:8b:5f:3d:55:78:62:14:e1:4c:d1:00:3f:f6:10:
                    5f:83:22:ed:6b:b0:f8:cb:82:fd:76:e2:db:ea:14:
                    c3:1e:2d:ea:7c:7d:25:c0:28:53:9b:a3:c0:bb:74:
                    f9:ed:5c:10:52:b7:de:0c:29:03:c0:67:74:d0:a5:
                    6f:18:75:d6:b9:05:91:66:aa:9c:73:9b:bb:ba:11:
                    7e:14:e2:db:c4:b1:8e:5b:58:b5:43:fd:60:1b:20:
                    38:71:2c:46:6c:75:c7:ac:fd:6e:22:02:d4:97:b8:
                    63:1f:33:25:e2:ee:92:5b:96:cc:17:17:bd:4c:c0:
                    74:e1:26:30:74:de:f4:fc:c4:0d:10:92:13:09:6a:
                    19:92:fd:83:36:9f:94:3f:6e:23:b9:60:87:41:72:
                    22:9e:51:a9:5a:ae:f5:f0:67:aa:51:46:77:14:60:
                    c8:11:43:b6:6b:67:f4:c9:4d:ad:22:3f:ed:95:e1:
                    0b:ce:64:79:d4:44:cb:74:ae:21:f6:cd:df:cb:93:
                    67:be:57:af:af:0f:cb:75:4b:cf:d3:0c:fa:85:43:
                    2a:b3:84:b2:8e:61:63:c6:c9:33:ac:48:00:70:6a:
                    49:d9:10:54:f6:1a:00:0d:9c:97:cf:6c:ac:1e:ab:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E1:59:5F:EE:67:92:26:0C:41:1D:41:9E:B1:42:4B:AC:84:A4:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/afdafd83-8180-3017-b9a0-64fa4d0175fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1a1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b8:f5:68:cd:ae:b0:2f:f7:75:66:c4:03:0c:89:f0:56:f5:
         f9:27:ba:36:88:ad:de:d8:78:e0:d2:de:59:04:c7:47:e8:de:
         c6:47:5f:b6:a1:8d:66:05:cb:49:a8:7a:1a:05:6c:cf:46:9e:
         7f:12:92:e4:91:cd:43:b2:98:83:1d:f3:fa:84:2c:8b:5b:ce:
         58:24:1b:ec:fa:b0:85:e3:b4:c0:ac:32:44:ab:21:71:82:94:
         61:13:84:42:b6:4a:3b:04:6f:fd:8a:07:c4:24:69:b7:f8:33:
         55:b9:0e:82:08:83:bf:22:60:bc:ae:00:69:0f:11:38:f6:fa:
         7c:27:56:b2:28:91:bd:7c:9a:73:00:be:35:6f:99:07:7e:2c:
         9d:68:56:50:0e:2e:67:7e:82:b7:ac:a7:98:3f:b4:29:51:a8:
         60:b1:8a:f7:fb:c2:7d:28:a3:db:11:7c:ef:f9:3b:d2:e5:ad:
         24:0e:81:df:7e:84:19:26:d3:c3:e3:01:6f:49:e5:22:52:4e:
         45:87:b7:e5:7c:0c:58:99:52:bc:59:49:c9:36:0f:23:d2:cc:
         ba:0f:c5:f4:c3:fa:b0:c8:a4:4d:fc:3e:94:02:0e:ea:28:bc:
         95:1e:19:a1:88:3f:de:ae:1b:2b:60:eb:57:0a:8b:48:9c:11:
         3f:8f:35:33
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7AHbSeabdNnzeh3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJkNmMyZWUtODZjNS00YTE4LTljNGMtZGU2MTk2OWFi
MzM5MB4XDTI2MDgwNjIwMjMzNFoXDTI2MTEwNDIxMjMzNFowLzEtMCsGA1UEAxMk
ZmUxN2MzZmQtYjk4YS00Y2ZjLWFkOGYtNDhhZTI0N2NhYjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosovNkMbiNbSUt4ISe+ci189VXhiFOFM0QA/
9hBfgyLta7D4y4L9duLb6hTDHi3qfH0lwChTm6PAu3T57VwQUrfeDCkDwGd00KVv
GHXWuQWRZqqcc5u7uhF+FOLbxLGOW1i1Q/1gGyA4cSxGbHXHrP1uIgLUl7hjHzMl
4u6SW5bMFxe9TMB04SYwdN70/MQNEJITCWoZkv2DNp+UP24juWCHQXIinlGpWq71
8GeqUUZ3FGDIEUO2a2f0yU2tIj/tleELzmR51ETLdK4h9s3fy5Nnvlevrw/LdUvP
0wz6hUMqs4SyjmFjxskzrEgAcGpJ2RBU9hoADZyXz2ysHquaKQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFCLhWV/uZ5ImDEEdQZ6xQkushKTXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2
YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYxOTY5YWIzMzkvYWZkYWZkODMtODE4MC0z
MDE3LWI5YTAtNjRmYTRkMDE3NWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjJkNmMyZWUtODZjNS00YTE4LTlj
NGMtZGU2MTk2OWFiMzM5L2YyZDZjMmVlLTg2YzUtNGExOC05YzRjLWRlNjE5Njlh
YjMzOS5jcmwwHwYDVR0jBBgwFoAUuuy9IFymTTHUnjmeD7RR2nqMU7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYx
OTY5YWIzMzkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AaEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAcLj1aM2usC/3dWbEAwyJ8Fb1+Se6Noit3th44NLeWQTHR+je
xkdftqGNZgXLSah6GgVsz0aefxKS5JHNQ7KYgx3z+oQsi1vOWCQb7PqwheO0wKwy
RKshcYKUYROEQrZKOwRv/YoHxCRpt/gzVbkOggiDvyJgvK4AaQ8ROPb6fCdWsiiR
vXyacwC+NW+ZB34snWhWUA4uZ36Ct6ynmD+0KVGoYLGK9/vCfSij2xF87/k70uWt
JA6B336EGSbTw+MBb0nlIlJORYe35XwMWJlSvFlJyTYPI9LMug/F9MP6sMikTfw+
lAIO6ii8lR4ZoYg/3q4bK2DrVwqLSJwRP481Mw==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:38:46 2026 by rpki-client