Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/fd966ec4-f52e-333c-9a81-993992333ad8.roa
File:                     fd966ec4-f52e-333c-9a81-993992333ad8.roa (raw, json)
Hash identifier:          MEc+UdNE4nHv2Quz2WHqO/rWqLpmdArCoxhYDD4h4u4=
Subject key identifier:   9D:72:AD:3C:91:8B:75:5D:01:BD:F3:DD:C5:5B:67:F1:82:3D:7F:DA
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DBCAE3164F6D8EF136000
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/fd966ec4-f52e-333c-9a81-993992333ad8.roa
Signing time:             Thu 06 Aug 2026 20:23:38 +0000
ROA not before:           Thu 06 Aug 2026 20:23:38 +0000
ROA not after:            Wed 04 Nov 2026 21:23:38 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:22c::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:bc:ae:31:64:f6:d8:ef:13:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:38 2026 GMT
            Not After : Nov  4 21:23:38 2026 GMT
        Subject: CN=e367a1f1-a077-4e33-8137-d21be2a14023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:be:b4:dd:4e:b1:22:6c:9c:cb:e2:2c:f0:
                    a6:87:fc:ff:75:3f:2e:e3:6c:99:b7:8b:c2:22:1c:
                    ee:41:3b:4a:c4:e4:85:70:a0:6c:5a:d5:03:d1:de:
                    00:a7:81:fb:fd:5a:bc:9b:1e:15:0e:d4:38:22:40:
                    72:44:36:06:9b:e1:6e:4a:36:98:4a:29:81:6f:b4:
                    06:d7:24:f3:a7:f7:c6:4d:90:ef:46:fa:51:56:55:
                    cd:43:cb:81:4c:47:69:a9:8c:e8:84:b3:a8:b3:1b:
                    a8:d3:5f:a3:63:5a:a7:a1:a1:0e:47:80:a2:01:9c:
                    bf:d2:cb:10:cb:0d:5c:3c:d7:15:ff:ff:7e:b5:4d:
                    f6:57:b9:fc:4a:a5:c6:19:a8:e6:33:3a:f9:59:32:
                    cc:b5:5b:12:92:20:02:84:2b:bc:55:ae:26:b6:b4:
                    de:a0:a0:f8:cf:bf:21:ba:f6:d6:f6:61:3b:3e:39:
                    00:9a:76:c9:b1:39:fa:8a:cb:10:be:bb:d0:dc:61:
                    c1:9c:d1:df:22:44:2f:58:63:7a:7c:e4:2d:97:f8:
                    47:cc:46:da:79:02:df:5c:94:5e:ea:7a:4d:bf:9b:
                    00:12:52:77:19:2c:23:3e:3c:6f:e5:a6:0b:09:72:
                    71:c6:f2:66:c1:06:2a:57:17:4c:9b:0c:cf:d2:dd:
                    a4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:72:AD:3C:91:8B:75:5D:01:BD:F3:DD:C5:5B:67:F1:82:3D:7F:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/fd966ec4-f52e-333c-9a81-993992333ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:22c::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e1:f0:f3:ba:bf:dc:c6:10:5d:9b:df:d7:3e:ac:0f:a3:56:
         a2:36:54:71:8a:9b:00:9f:df:2c:91:e9:63:31:e9:9b:79:11:
         f3:10:ae:86:96:77:89:5d:b1:ba:27:3e:41:2d:00:0a:5a:ad:
         6c:a8:9e:1c:6d:b8:77:ce:07:5f:fc:20:3b:fc:2c:a0:af:46:
         60:3a:e2:db:72:67:11:7e:46:f7:f5:38:f0:cb:02:8a:45:19:
         e2:43:dd:93:5f:43:da:60:d5:de:b2:f5:5d:f4:cf:b1:1f:6e:
         23:5c:c0:6d:d3:5d:4d:6e:88:88:80:f6:94:53:e5:3f:ef:fb:
         88:ca:9a:94:15:46:4a:63:d7:40:df:0f:cb:f8:06:db:b1:1c:
         e1:59:97:c1:10:3f:e9:38:51:3b:54:21:e4:35:d1:e4:85:23:
         74:b5:e8:37:44:0a:39:05:c6:41:0c:b5:c8:e5:fa:66:b2:27:
         79:01:27:89:17:a2:9b:32:e1:f8:1e:be:60:92:eb:6f:86:fa:
         81:a8:e6:19:07:0a:16:87:c9:b9:c9:71:36:b7:ff:76:2b:ee:
         d0:cc:12:13:b0:17:51:b9:a8:d4:29:09:bc:48:fd:81:54:e9:
         49:73:48:16:e1:5c:03:12:79:e8:0f:bc:54:36:56:9e:77:8d:
         21:c6:d6:9f
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7AHbyuMWT22O8TYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJkNmMyZWUtODZjNS00YTE4LTljNGMtZGU2MTk2OWFi
MzM5MB4XDTI2MDgwNjIwMjMzOFoXDTI2MTEwNDIxMjMzOFowLzEtMCsGA1UEAxMk
ZTM2N2ExZjEtYTA3Ny00ZTMzLTgxMzctZDIxYmUyYTE0MDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvm+tN1OsSJsnMviLPCmh/z/dT8u42yZt4vC
IhzuQTtKxOSFcKBsWtUD0d4Ap4H7/Vq8mx4VDtQ4IkByRDYGm+FuSjaYSimBb7QG
1yTzp/fGTZDvRvpRVlXNQ8uBTEdpqYzohLOosxuo01+jY1qnoaEOR4CiAZy/0ssQ
yw1cPNcV//9+tU32V7n8SqXGGajmMzr5WTLMtVsSkiAChCu8Va4mtrTeoKD4z78h
uvbW9mE7PjkAmnbJsTn6issQvrvQ3GHBnNHfIkQvWGN6fOQtl/hHzEbaeQLfXJRe
6npNv5sAElJ3GSwjPjxv5aYLCXJxxvJmwQYqVxdMmwzP0t2kJwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFJ1yrTyRi3VdAb3z3cVbZ/GCPX/aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2
YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYxOTY5YWIzMzkvZmQ5NjZlYzQtZjUyZS0z
MzNjLTlhODEtOTkzOTkyMzMzYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjJkNmMyZWUtODZjNS00YTE4LTlj
NGMtZGU2MTk2OWFiMzM5L2YyZDZjMmVlLTg2YzUtNGExOC05YzRjLWRlNjE5Njlh
YjMzOS5jcmwwHwYDVR0jBBgwFoAUuuy9IFymTTHUnjmeD7RR2nqMU7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMmQ2YzJlZS04NmM1LTRhMTgtOWM0Yy1kZTYx
OTY5YWIzMzkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AiwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAcOHw87q/3MYQXZvf1z6sD6NWojZUcYqbAJ/fLJHpYzHpm3kR
8xCuhpZ3iV2xuic+QS0AClqtbKieHG24d84HX/wgO/wsoK9GYDri23JnEX5G9/U4
8MsCikUZ4kPdk19D2mDV3rL1XfTPsR9uI1zAbdNdTW6IiID2lFPlP+/7iMqalBVG
SmPXQN8Py/gG27Ec4VmXwRA/6ThRO1Qh5DXR5IUjdLXoN0QKOQXGQQy1yOX6ZrIn
eQEniReimzLh+B6+YJLrb4b6gajmGQcKFofJuclxNrf/divu0MwSE7AXUbmo1CkJ
vEj9gVTpSXNIFuFcAxJ56A+8VDZWnneNIcbWnw==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:41:05 2026 by rpki-client