Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/dfbcaec8-9468-3d0a-8bc5-18f5044c7cc4.roa
File:                     dfbcaec8-9468-3d0a-8bc5-18f5044c7cc4.roa (raw, json)
Hash identifier:          fQKgHa+qlu5YRBWG/55H5NUNh30HSPpsLJaM7DOF2HU=
Subject key identifier:   0C:9B:29:13:93:54:39:F6:4B:8A:66:E5:43:8B:9B:14:A0:4D:28:55
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01D9F7F7F4BEF6C0884BC80
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/dfbcaec8-9468-3d0a-8bc5-18f5044c7cc4.roa
Signing time:             Thu 06 Aug 2026 20:23:24 +0000
ROA not before:           Thu 06 Aug 2026 20:23:24 +0000
ROA not after:            Wed 04 Nov 2026 21:23:24 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:b::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:9f:7f:7f:4b:ef:6c:08:84:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:24 2026 GMT
            Not After : Nov  4 21:23:24 2026 GMT
        Subject: CN=c4b5f38e-e93b-45db-a6c3-0cc4c22da872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:f8:d6:b9:09:aa:ff:81:17:37:37:9c:e7:
                    5c:77:20:10:3f:e4:79:ec:48:4d:86:f1:f5:44:d1:
                    e2:4b:eb:7e:d5:ab:2e:6b:d3:66:b5:00:6a:92:dc:
                    f1:64:87:b5:d5:66:ad:33:ac:47:2f:18:fb:9d:59:
                    09:b4:a1:48:0b:b9:76:33:b8:92:82:1c:1d:18:43:
                    bf:a4:2d:74:d7:f6:d2:4d:15:54:13:b9:85:62:82:
                    5d:7f:91:89:16:23:f6:ab:70:10:29:e6:b6:57:7f:
                    f2:9a:30:2c:ed:2a:d4:4b:2a:98:ce:52:ff:0b:ee:
                    a5:62:ee:cf:51:c0:e0:3e:0f:f8:7e:57:54:fa:16:
                    b0:bb:9b:09:a8:1a:5f:3f:05:2f:c5:48:42:e0:34:
                    35:99:00:5d:4c:b3:d1:d2:a1:8a:f7:65:97:a5:f7:
                    13:91:af:cc:05:1b:ae:2a:fe:a0:b0:66:53:21:7e:
                    c4:10:b6:38:e4:a3:2c:d6:3d:99:01:d0:9e:37:4e:
                    31:45:8b:54:dd:b6:01:85:03:b7:42:e8:e3:b3:44:
                    6d:3d:1c:cb:62:80:57:dd:e6:77:01:f5:00:c2:50:
                    2c:ba:5d:00:77:8b:b6:1e:32:8e:e6:59:41:f0:66:
                    a5:c9:23:22:1a:fb:2f:36:33:5e:25:82:b8:e9:2e:
                    ac:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9B:29:13:93:54:39:F6:4B:8A:66:E5:43:8B:9B:14:A0:4D:28:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/dfbcaec8-9468-3d0a-8bc5-18f5044c7cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:b::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:23:b1:9e:47:57:2d:69:9a:b8:e1:cd:b6:28:28:42:7d:55:
         c0:04:19:13:00:70:43:3c:e4:e6:55:a8:4b:f2:87:69:8f:c4:
         a5:75:03:da:15:6e:68:36:80:14:1b:95:af:07:95:fd:11:90:
         b4:b2:00:f7:4a:d6:4c:f6:c7:b1:7c:44:9b:e9:82:06:97:41:
         6f:04:04:81:42:9a:c0:61:93:9f:e2:7b:aa:0e:f2:4c:7b:4a:
         e3:ab:d4:b7:1e:a3:07:be:30:df:03:ea:3b:52:2b:ba:2c:1b:
         b2:66:cc:ff:da:97:bd:5d:bb:e8:b5:8c:b5:f6:77:c7:f7:9e:
         f9:3d:22:f3:79:2e:2a:75:9d:61:44:09:cb:b1:86:83:5c:9a:
         36:8e:93:f4:84:1a:b9:ae:96:ad:c7:72:b5:6d:0d:15:c9:ba:
         cb:30:c2:cc:17:f9:26:94:ba:8e:47:d6:61:e6:54:b5:48:e7:
         4f:53:1d:9c:cc:70:4d:46:69:43:c4:c1:03:5b:b6:c3:23:f8:
         a7:5d:7b:89:3d:e8:b8:e7:35:cd:fb:00:25:37:59:ba:f5:db:
         9f:6c:e2:99:00:a6:fe:0d:f5:d3:9a:28:a1:11:04:94:91:5a:
         8b:74:55:6f:1e:c9:27:05:94:74:0f:5d:f3:77:da:48:54:97:
         a9:0d:5a:2a
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7AHZ9/f0vvbAiEvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJkNmMyZWUtODZjNS00YTE4LTljNGMtZGU2MTk2OWFi
MzM5MB4XDTI2MDgwNjIwMjMyNFoXDTI2MTEwNDIxMjMyNFowLzEtMCsGA1UEAxMk
YzRiNWYzOGUtZTkzYi00NWRiLWE2YzMtMGNjNGMyMmRhODcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRH41rkJqv+BFzc3nOdcdyAQP+R57EhNhvH1
RNHiS+t+1asua9NmtQBqktzxZIe11WatM6xHLxj7nVkJtKFIC7l2M7iSghwdGEO/
pC101/bSTRVUE7mFYoJdf5GJFiP2q3AQKea2V3/ymjAs7SrUSyqYzlL/C+6lYu7P
UcDgPg/4fldU+hawu5sJqBpfPwUvxUhC4DQ1mQBdTLPR0qGK92WXpfcTka/MBRuu
Kv6gsGZTIX7EELY45KMs1j2ZAdCeN04xRYtU3bYBhQO3Qujjs0RtPRzLYoBX3eZ3
AfUAwlAsul0Ad4u2HjKO5llB8GalySMiGvsvNjNeJYK46S6sewIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFAybKROTVDn2S4pm5UOLmxSgTShVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2
YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYxOTY5YWIzMzkvZGZiY2FlYzgtOTQ2OC0z
ZDBhLThiYzUtMThmNTA0NGM3Y2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjJkNmMyZWUtODZjNS00YTE4LTlj
NGMtZGU2MTk2OWFiMzM5L2YyZDZjMmVlLTg2YzUtNGExOC05YzRjLWRlNjE5Njlh
YjMzOS5jcmwwHwYDVR0jBBgwFoAUuuy9IFymTTHUnjmeD7RR2nqMU7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYx
OTY5YWIzMzkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AAswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAISOxnkdXLWmauOHNtigoQn1VwAQZEwBwQzzk5lWoS/KHaY/E
pXUD2hVuaDaAFBuVrweV/RGQtLIA90rWTPbHsXxEm+mCBpdBbwQEgUKawGGTn+J7
qg7yTHtK46vUtx6jB74w3wPqO1IruiwbsmbM/9qXvV276LWMtfZ3x/ee+T0i83ku
KnWdYUQJy7GGg1yaNo6T9IQaua6WrcdytW0NFcm6yzDCzBf5JpS6jkfWYeZUtUjn
T1MdnMxwTUZpQ8TBA1u2wyP4p117iT3ouOc1zfsAJTdZuvXbn2zimQCm/g3105oo
oREElJFai3RVbx7JJwWUdA9d83faSFSXqQ1aKg==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:58 2026 by rpki-client