Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/63447563-6832-3949-831d-61feeda7249d.roa
File:                     63447563-6832-3949-831d-61feeda7249d.roa (raw, json)
Hash identifier:          ixYj8Q3sWO6vSseMgR81yN2UnmuvqwOXUTuSPone6VY=
Subject key identifier:   C3:73:CC:B3:C4:55:88:97:46:2B:D0:6A:8A:54:87:BD:4C:39:77:01
Certificate issuer:       /CN=c04d5752-0429-45a3-a347-607b7dc70707
Certificate serial:       010D0C9F4328584EB6E1A6AA63F9A0D262472A00
Authority key identifier: 9A:BF:C2:54:66:DF:73:F4:CD:FE:24:4F:FD:AA:10:9E:13:7B:0B:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/63447563-6832-3949-831d-61feeda7249d.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     32668
IP address blocks:        2602:f86a::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a6:aa:63:f9:a0:d2:62:47:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04d5752-0429-45a3-a347-607b7dc70707
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=b8d14e35-87ca-45c7-b58b-657271520e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:81:95:ea:f8:26:4d:74:70:32:64:c9:e8:
                    22:c6:bd:f6:d4:b0:0d:8d:52:01:0f:75:c6:7b:06:
                    cc:ca:7a:09:d9:db:e8:aa:71:76:57:83:45:50:ca:
                    76:6e:67:c2:3b:6f:d9:53:c6:db:81:07:37:55:8b:
                    1f:c8:62:b0:ad:10:d6:f7:2b:6c:10:00:a3:6e:18:
                    8b:1d:b0:e9:3a:32:12:a5:c9:45:bd:1b:a9:86:d1:
                    af:c9:64:90:ee:0c:d6:4c:bf:47:96:a0:8c:90:26:
                    e2:19:12:fc:ab:59:4c:c4:78:14:9f:1e:15:b5:90:
                    45:ec:86:85:12:df:c5:5a:89:38:d7:da:2c:4d:4d:
                    3e:2b:76:0a:75:c2:9e:86:7e:2d:39:d8:b4:c2:ae:
                    57:93:6b:80:c5:07:47:f9:2e:eb:c6:40:9d:9e:d6:
                    0c:24:86:71:f5:66:ff:2c:45:cd:42:4e:a2:33:65:
                    25:1e:d0:ef:44:1f:be:9b:bb:86:cc:e1:65:a1:37:
                    16:dc:d3:69:91:e3:c4:d4:48:30:f0:a7:d9:e9:0f:
                    65:21:f1:8c:2d:c8:05:6f:7e:81:9e:d3:23:7a:a7:
                    2e:0e:5f:41:23:54:38:27:d5:96:68:b7:d2:cc:48:
                    36:56:ac:46:6b:2b:42:49:52:68:57:61:a3:81:1e:
                    3e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:73:CC:B3:C4:55:88:97:46:2B:D0:6A:8A:54:87:BD:4C:39:77:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/63447563-6832-3949-831d-61feeda7249d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.crl

            X509v3 Authority Key Identifier:
                keyid:9A:BF:C2:54:66:DF:73:F4:CD:FE:24:4F:FD:AA:10:9E:13:7B:0B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f86a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d1:7b:22:b7:c5:90:72:fc:d1:5f:2e:ac:c9:99:06:71:14:
         47:eb:20:93:bf:f0:b8:d5:af:59:ff:fa:a4:5f:50:c0:94:00:
         e2:bd:60:b8:a4:58:9c:ed:e8:f2:61:51:d2:3b:91:b8:66:89:
         73:a7:0d:78:71:79:14:54:7e:81:d2:52:93:db:55:a9:4e:85:
         d1:d3:8c:86:53:55:01:d4:4e:c4:e9:c0:48:a9:53:00:29:ec:
         a8:81:ff:65:4c:d6:b4:1a:a0:68:d6:29:01:dc:27:20:fc:0e:
         78:eb:b4:da:2b:33:b4:9e:36:c4:74:33:b6:f5:e4:61:52:72:
         f2:c2:49:36:8a:da:6e:61:e0:ee:b6:ff:7d:3d:27:4a:c1:2a:
         be:66:91:28:04:ea:90:5d:e4:1c:4b:24:91:01:28:6f:a1:cb:
         80:b6:39:3b:65:f4:2f:35:fb:f6:d9:cf:24:b0:2a:c7:ea:93:
         ef:c6:6b:a3:ee:89:44:f5:57:34:75:4e:76:da:24:c2:89:f1:
         7c:73:eb:e6:76:68:a7:a4:33:cc:9c:fc:6d:92:d0:c9:50:f9:
         47:e3:fa:75:ca:70:b7:dd:93:ef:78:8e:ae:a8:41:cc:d0:26:
         bf:98:d9:e4:7a:e6:2a:ea:2d:ae:67:3f:bb:bf:98:98:14:af:
         4c:61:54:a3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE624aaqY/mg0mJHKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA0ZDU3NTItMDQyOS00NWEzLWEzNDctNjA3YjdkYzcw
NzA3MB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk
YjhkMTRlMzUtODdjYS00NWM3LWI1OGItNjU3MjcxNTIwZTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmyBler4Jk10cDJkyegixr321LANjVIBD3XG
ewbMynoJ2dvoqnF2V4NFUMp2bmfCO2/ZU8bbgQc3VYsfyGKwrRDW9ytsEACjbhiL
HbDpOjISpclFvRuphtGvyWSQ7gzWTL9HlqCMkCbiGRL8q1lMxHgUnx4VtZBF7IaF
Et/FWok419osTU0+K3YKdcKehn4tOdi0wq5Xk2uAxQdH+S7rxkCdntYMJIZx9Wb/
LEXNQk6iM2UlHtDvRB++m7uGzOFloTcW3NNpkePE1Egw8KfZ6Q9lIfGMLcgFb36B
ntMjeqcuDl9BI1Q4J9WWaLfSzEg2VqxGaytCSVJoV2GjgR4+8QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMNzzLPEVYiXRivQaopUh71MOXcBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMDRk
NTc1Mi0wNDI5LTQ1YTMtYTM0Ny02MDdiN2RjNzA3MDcvNjM0NDc1NjMtNjgzMi0z
OTQ5LTgzMWQtNjFmZWVkYTcyNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzA0ZDU3NTItMDQyOS00NWEzLWEz
NDctNjA3YjdkYzcwNzA3L2MwNGQ1NzUyLTA0MjktNDVhMy1hMzQ3LTYwN2I3ZGM3
MDcwNy5jcmwwHwYDVR0jBBgwFoAUmr/CVGbfc/TN/iRP/aoQnhN7Cw0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMDRkNTc1Mi0wNDI5LTQ1YTMtYTM0Ny02MDdi
N2RjNzA3MDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4agAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATtF7IrfFkHL80V8urMmZBnEUR+sgk7/wuNWvWf/6pF9QwJQA4r1g
uKRYnO3o8mFR0juRuGaJc6cNeHF5FFR+gdJSk9tVqU6F0dOMhlNVAdROxOnASKlT
ACnsqIH/ZUzWtBqgaNYpAdwnIPwOeOu02isztJ42xHQztvXkYVJy8sJJNorabmHg
7rb/fT0nSsEqvmaRKATqkF3kHEskkQEob6HLgLY5O2X0LzX79tnPJLAqx+qT78Zr
o+6JRPVXNHVOdtokwonxfHPr5nZop6QzzJz8bZLQyVD5R+P6dcpwt92T73iOrqhB
zNAmv5jZ5HrmKuotrmc/u7+YmBSvTGFUow==
-----END CERTIFICATE-----
Generated at Fri Aug 21 04:29:24 2026 by rpki-client