Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f5a8d318-2227-36b1-b4a2-7a80fac45847.roa
File:                     f5a8d318-2227-36b1-b4a2-7a80fac45847.roa (raw, json)
Hash identifier:          CdK/TCXVjrUqIdQloGSFk7lBs6OWM0jX/ZqbnB5OToY=
Subject key identifier:   22:9E:3B:A8:B8:F0:32:3B:B7:8C:E0:2C:A6:F9:FE:62:7C:15:30:75
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DBF8386F2333C48314080
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f5a8d318-2227-36b1-b4a2-7a80fac45847.roa
Signing time:             Thu 06 Aug 2026 20:23:39 +0000
ROA not before:           Thu 06 Aug 2026 20:23:39 +0000
ROA not after:            Wed 04 Nov 2026 21:23:39 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:25c::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:bf:83:86:f2:33:3c:48:31:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:39 2026 GMT
            Not After : Nov  4 21:23:39 2026 GMT
        Subject: CN=8fe7fa60-19a3-43c7-be2c-8341d382fa5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:90:56:ef:85:90:cd:3e:be:92:80:2c:cf:ed:
                    1e:23:50:ae:ca:1b:26:61:07:92:98:84:9c:d2:b0:
                    74:47:d7:12:11:bd:63:68:32:cd:03:c4:80:d0:d0:
                    bd:e2:50:b6:f4:e8:51:1b:99:e9:4c:96:52:48:8b:
                    31:35:7e:cd:ae:ae:65:51:c4:d3:b2:41:5c:e9:5b:
                    52:3f:52:5e:c7:ef:0f:82:24:ed:e5:31:0a:e4:08:
                    0a:89:36:32:2a:92:a0:52:79:a6:9c:57:0c:47:90:
                    23:a6:59:11:03:b9:cd:0c:10:61:96:7f:ee:51:e8:
                    14:5f:9e:6d:75:da:85:f6:1f:8c:71:ff:9a:1a:d9:
                    c8:80:9a:46:d2:82:28:ea:c8:8d:0b:6b:51:9a:02:
                    3f:06:19:b6:87:76:f8:d0:b1:27:0a:9c:67:96:6b:
                    da:61:41:41:92:8b:ab:f7:f6:35:da:20:7c:e9:b5:
                    ff:43:e8:a8:77:1f:29:0d:d9:5c:0d:01:2a:6f:9e:
                    e3:9f:68:5d:9d:14:4c:04:70:25:22:3c:c6:cd:c8:
                    5e:c5:f0:c0:bd:e1:37:ac:6e:80:34:67:c7:d7:9a:
                    1f:79:8c:83:a4:48:6f:f3:14:9e:9b:02:1a:2d:3e:
                    da:69:9c:2f:96:22:db:e9:15:4a:ba:44:97:f6:4a:
                    7c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9E:3B:A8:B8:F0:32:3B:B7:8C:E0:2C:A6:F9:FE:62:7C:15:30:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f5a8d318-2227-36b1-b4a2-7a80fac45847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:25c::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:14:94:f5:eb:b3:29:4c:f7:cf:4b:12:c9:eb:31:16:1b:a8:
         9f:5a:4e:e7:66:b1:c0:fb:36:02:0a:bc:e2:e2:73:c6:dd:d0:
         41:d6:5d:df:dc:dc:aa:fb:be:c4:45:54:c8:c0:5b:40:d9:a7:
         ce:ac:7b:93:85:5a:53:91:70:8c:70:e2:91:92:f6:a0:d0:7f:
         3c:24:6e:5c:ba:87:0e:4c:0a:02:47:e0:04:fa:4d:ff:37:20:
         4b:2e:d6:16:57:5e:88:0f:b9:bd:27:59:cd:e8:db:56:ed:f8:
         a6:fa:b8:c1:7c:cf:42:92:3e:1c:7f:25:f0:9c:3e:68:14:d9:
         43:04:21:7b:49:db:0a:e6:89:aa:ee:81:ef:b6:40:a4:e9:f4:
         c7:4e:b3:7b:de:e9:39:c4:59:cf:12:b1:01:f8:ac:fd:f7:fd:
         01:69:02:2d:42:02:ea:84:11:13:db:9a:c2:6d:9f:30:bb:f8:
         38:10:dd:4b:65:07:82:ff:38:25:8c:4e:12:38:2d:a9:4d:e7:
         7a:c1:56:43:26:04:46:42:0a:4d:ee:af:1f:ca:1e:60:b0:ba:
         41:83:f0:84:d9:6a:18:95:e6:35:0c:af:15:01:9a:f1:bf:a3:
         b7:94:78:8f:51:91:33:d7:3f:4d:7d:be:bb:7c:51:1a:65:c8:
         7e:35:77:8e
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7AHb+DhvIzPEgxQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJkNmMyZWUtODZjNS00YTE4LTljNGMtZGU2MTk2OWFi
MzM5MB4XDTI2MDgwNjIwMjMzOVoXDTI2MTEwNDIxMjMzOVowLzEtMCsGA1UEAxMk
OGZlN2ZhNjAtMTlhMy00M2M3LWJlMmMtODM0MWQzODJmYTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZBW74WQzT6+koAsz+0eI1CuyhsmYQeSmISc
0rB0R9cSEb1jaDLNA8SA0NC94lC29OhRG5npTJZSSIsxNX7Nrq5lUcTTskFc6VtS
P1Jex+8PgiTt5TEK5AgKiTYyKpKgUnmmnFcMR5AjplkRA7nNDBBhln/uUegUX55t
ddqF9h+Mcf+aGtnIgJpG0oIo6siNC2tRmgI/Bhm2h3b40LEnCpxnlmvaYUFBkour
9/Y12iB86bX/Q+iodx8pDdlcDQEqb57jn2hdnRRMBHAlIjzGzchexfDAveE3rG6A
NGfH15ofeYyDpEhv8xSemwIaLT7aaZwvliLb6RVKukSX9kp80QIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFCKeO6i48DI7t4zgLKb5/mJ8FTB1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2
YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYxOTY5YWIzMzkvZjVhOGQzMTgtMjIyNy0z
NmIxLWI0YTItN2E4MGZhYzQ1ODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjJkNmMyZWUtODZjNS00YTE4LTlj
NGMtZGU2MTk2OWFiMzM5L2YyZDZjMmVlLTg2YzUtNGExOC05YzRjLWRlNjE5Njlh
YjMzOS5jcmwwHwYDVR0jBBgwFoAUuuy9IFymTTHUnjmeD7RR2nqMU7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYx
OTY5YWIzMzkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AlwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEASxSU9euzKUz3z0sSyesxFhuon1pO52axwPs2Agq84uJzxt3Q
QdZd39zcqvu+xEVUyMBbQNmnzqx7k4VaU5FwjHDikZL2oNB/PCRuXLqHDkwKAkfg
BPpN/zcgSy7WFldeiA+5vSdZzejbVu34pvq4wXzPQpI+HH8l8Jw+aBTZQwQhe0nb
CuaJqu6B77ZApOn0x06ze97pOcRZzxKxAfis/ff9AWkCLUIC6oQRE9uawm2fMLv4
OBDdS2UHgv84JYxOEjgtqU3nesFWQyYERkIKTe6vH8oeYLC6QYPwhNlqGJXmNQyv
FQGa8b+jt5R4j1GRM9c/TX2+u3xRGmXIfjV3jg==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:39:22 2026 by rpki-client