Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/da36da21-0443-32eb-9cd8-ff78dfcdbd8f.roa
File:                     da36da21-0443-32eb-9cd8-ff78dfcdbd8f.roa (raw, json)
Hash identifier:          fUd4hTtVz0mVQVpsqVJofQ2rP9NDESuWym1XEivzPfY=
Subject key identifier:   C2:5D:2F:C4:65:2F:5A:B9:1B:71:AE:45:D4:24:E9:84:64:99:EC:2F
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DA098D7919C0F7F7EFF00
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/da36da21-0443-32eb-9cd8-ff78dfcdbd8f.roa
Signing time:             Thu 06 Aug 2026 20:23:25 +0000
ROA not before:           Thu 06 Aug 2026 20:23:25 +0000
ROA not after:            Wed 04 Nov 2026 21:23:25 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:22::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:a0:98:d7:91:9c:0f:7f:7e:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:25 2026 GMT
            Not After : Nov  4 21:23:25 2026 GMT
        Subject: CN=7cd39436-8a18-4739-b790-4124ac4ce5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:b8:4c:56:64:b7:63:bc:ca:fe:82:aa:61:
                    eb:c5:db:9d:66:db:df:1d:09:7d:65:b0:37:14:8a:
                    11:0f:f3:98:f9:36:b4:4a:ce:97:31:50:76:35:26:
                    f0:0f:43:25:86:59:d0:73:9e:b9:ee:84:d3:39:5b:
                    5f:e5:81:de:c7:b1:20:aa:8b:58:d3:81:fb:48:b3:
                    98:98:93:f6:cb:40:69:f6:b0:c5:51:64:fb:d4:ad:
                    1a:9c:7b:9a:76:05:b0:70:1c:61:52:b2:6f:b9:e0:
                    a2:c8:6e:ec:1a:34:5e:95:40:80:44:8b:13:77:1d:
                    8d:e4:bf:ec:7f:62:72:8c:03:66:58:97:13:06:60:
                    fe:8e:82:0b:97:d9:11:df:f0:65:44:a2:3c:18:ee:
                    60:95:6e:ba:19:d3:fe:9d:83:8b:9a:5d:05:36:02:
                    4e:55:25:76:9a:a0:bb:aa:b6:7d:67:d8:83:b6:55:
                    72:1f:68:ef:6b:6c:a4:f5:35:bb:e5:45:0a:aa:93:
                    fa:a9:bf:77:24:b5:ff:f3:98:27:0d:b0:62:b1:61:
                    6b:c6:5c:60:06:12:bb:51:d2:01:1f:f9:62:a0:92:
                    1a:16:ce:b9:68:ec:34:c3:c9:36:7a:ee:8f:a7:07:
                    34:3b:f0:fa:ef:81:a8:45:4c:81:7d:66:55:50:94:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5D:2F:C4:65:2F:5A:B9:1B:71:AE:45:D4:24:E9:84:64:99:EC:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/da36da21-0443-32eb-9cd8-ff78dfcdbd8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:22::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:cf:44:f9:b0:c8:8c:df:de:4e:c1:6e:30:de:7d:e1:64:03:
         e4:e7:25:96:09:47:bf:9a:f9:20:e6:cf:41:22:cf:de:e6:ca:
         d0:e5:22:0d:4f:68:6f:87:b2:a3:1c:9b:cd:bb:e5:e0:d9:a3:
         2f:2b:e1:2e:6b:d4:14:23:80:97:2e:9e:0e:60:d7:bf:0e:85:
         44:11:fb:38:fd:8c:f3:df:5a:b7:b3:92:18:01:d1:a1:7b:8d:
         ee:24:f2:5f:b3:ad:d8:f3:a3:a0:96:09:da:2f:4a:78:6d:dd:
         da:af:03:78:69:72:a3:35:bd:78:2e:2d:70:8d:29:5a:f3:68:
         dc:da:f8:aa:b5:9a:ba:9c:bb:4a:39:5e:8f:0a:78:8a:19:88:
         9b:d2:31:98:05:cb:6a:47:b7:ef:8c:c6:5f:5e:df:96:2c:7b:
         1e:c5:f6:db:c2:98:25:fe:a3:ee:2b:04:a1:98:54:f3:a0:65:
         0f:85:0f:b2:21:d4:c6:7b:eb:0a:f6:2f:2f:3e:85:cb:a9:18:
         63:0e:34:d8:3d:4a:a5:9c:fb:3f:bd:ff:16:d5:ed:aa:d5:1f:
         de:6b:80:f4:ad:ca:45:ad:b9:fd:06:44:a1:7c:78:1c:2b:be:
         5a:7b:1c:da:52:b5:db:ff:b4:27:af:ac:8f:c3:e9:61:90:9a:
         60:67:b5:1b
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7AHaCY15GcD39+/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJkNmMyZWUtODZjNS00YTE4LTljNGMtZGU2MTk2OWFi
MzM5MB4XDTI2MDgwNjIwMjMyNVoXDTI2MTEwNDIxMjMyNVowLzEtMCsGA1UEAxMk
N2NkMzk0MzYtOGExOC00NzM5LWI3OTAtNDEyNGFjNGNlNWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4i4TFZkt2O8yv6CqmHrxdudZtvfHQl9ZbA3
FIoRD/OY+Ta0Ss6XMVB2NSbwD0MlhlnQc5657oTTOVtf5YHex7EgqotY04H7SLOY
mJP2y0Bp9rDFUWT71K0anHuadgWwcBxhUrJvueCiyG7sGjRelUCARIsTdx2N5L/s
f2JyjANmWJcTBmD+joILl9kR3/BlRKI8GO5glW66GdP+nYOLml0FNgJOVSV2mqC7
qrZ9Z9iDtlVyH2jva2yk9TW75UUKqpP6qb93JLX/85gnDbBisWFrxlxgBhK7UdIB
H/lioJIaFs65aOw0w8k2eu6Ppwc0O/D674GoRUyBfWZVUJSiDwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFMJdL8RlL1q5G3GuRdQk6YRkmewvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2
YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYxOTY5YWIzMzkvZGEzNmRhMjEtMDQ0My0z
MmViLTljZDgtZmY3OGRmY2RiZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjJkNmMyZWUtODZjNS00YTE4LTlj
NGMtZGU2MTk2OWFiMzM5L2YyZDZjMmVlLTg2YzUtNGExOC05YzRjLWRlNjE5Njlh
YjMzOS5jcmwwHwYDVR0jBBgwFoAUuuy9IFymTTHUnjmeD7RR2nqMU7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYx
OTY5YWIzMzkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
ACIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEANc9E+bDIjN/eTsFuMN594WQD5OcllglHv5r5IObPQSLP3ubK
0OUiDU9ob4eyoxybzbvl4NmjLyvhLmvUFCOAly6eDmDXvw6FRBH7OP2M899at7OS
GAHRoXuN7iTyX7Ot2POjoJYJ2i9KeG3d2q8DeGlyozW9eC4tcI0pWvNo3Nr4qrWa
upy7Sjlejwp4ihmIm9IxmAXLake374zGX17flix7HsX228KYJf6j7isEoZhU86Bl
D4UPsiHUxnvrCvYvLz6Fy6kYYw402D1KpZz7P73/FtXtqtUf3muA9K3KRa25/QZE
oXx4HCu+Wnsc2lK12/+0J6+sj8PpYZCaYGe1Gw==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:35:56 2026 by rpki-client