Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/2bceddd6-98ab-3038-bfc6-2984ea72ba6f.roa
File:                     2bceddd6-98ab-3038-bfc6-2984ea72ba6f.roa (raw, json)
Hash identifier:          Z1zhcNPyJqpFvlTZHKmgqmqUVIAauPPPM9EB3TIuoSk=
Subject key identifier:   53:6A:4E:AC:A8:D5:C8:89:9D:75:BE:06:6A:63:8E:73:D4:77:B1:26
Certificate issuer:       /CN=664e4c51-f7b5-453e-a7b0-8081a6404662
Certificate serial:       010D0C9F4328584EF19AEDA53CA809244D0DD080
Authority key identifier: AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/2bceddd6-98ab-3038-bfc6-2984ea72ba6f.roa
Signing time:             Mon 24 Aug 2026 13:50:29 +0000
ROA not before:           Mon 24 Aug 2026 13:50:29 +0000
ROA not after:            Sun 22 Nov 2026 14:50:29 +0000
asID:                     62731
IP address blocks:        2602:ffa6:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:9a:ed:a5:3c:a8:09:24:4d:0d:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=664e4c51-f7b5-453e-a7b0-8081a6404662
        Validity
            Not Before: Aug 24 13:50:29 2026 GMT
            Not After : Nov 22 14:50:29 2026 GMT
        Subject: CN=ffa11203-d90e-4a72-bb0e-dbd6e2d62ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3a:27:f5:dd:cd:85:f1:77:2c:78:02:72:69:
                    91:45:bd:61:cc:5e:b7:7d:4b:dd:40:a1:5b:2b:d5:
                    7b:50:04:09:64:63:ef:44:96:b6:0c:d6:29:5b:0e:
                    f4:6e:6d:d2:8c:57:4d:81:c8:28:2f:a0:19:ef:37:
                    75:83:54:6e:67:fb:4a:d0:ed:f2:1b:a0:23:12:ca:
                    71:1f:d8:21:d5:bd:88:e4:b6:0a:54:e1:a8:41:88:
                    b9:d0:2d:0f:a1:6d:ae:8c:f5:9e:77:5a:15:26:d2:
                    cc:9b:76:91:07:53:84:2b:8b:43:32:3a:79:1d:95:
                    06:76:d2:3a:07:5f:37:a7:74:ee:9c:6d:87:9d:81:
                    fa:07:ae:a9:b8:e9:1b:78:89:38:cd:ac:9c:90:7f:
                    7d:44:a4:83:8a:25:fe:0b:7c:9a:26:a0:39:a5:94:
                    09:57:a6:06:3a:50:c4:37:0e:b2:87:d0:43:17:aa:
                    99:8d:62:a7:b6:50:08:4e:09:a0:4b:40:c5:4a:52:
                    e9:a2:1a:c6:91:96:03:33:25:e4:a8:9b:98:5c:76:
                    82:81:eb:74:7b:7f:a5:1a:41:0c:af:7b:2d:74:ec:
                    8b:1c:dd:70:f5:89:7b:a2:b8:e9:19:ef:0c:b3:36:
                    16:a4:95:0f:07:a2:6b:f9:76:47:91:95:5a:7a:86:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6A:4E:AC:A8:D5:C8:89:9D:75:BE:06:6A:63:8E:73:D4:77:B1:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/2bceddd6-98ab-3038-bfc6-2984ea72ba6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl

            X509v3 Authority Key Identifier:
                keyid:AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffa6:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:5e:61:3e:0e:8f:4b:de:81:c3:9c:78:e6:8d:92:82:be:2a:
         c3:b7:8e:eb:61:f4:63:97:a2:8b:eb:06:6b:54:62:85:5e:4d:
         e8:9e:89:c0:d2:c5:80:39:8b:4c:d5:80:8b:45:3f:95:1b:cf:
         66:59:23:cf:47:98:52:bb:03:55:55:c3:54:53:5f:70:eb:35:
         c3:b5:22:7a:01:ba:71:f2:18:38:64:b8:cc:1c:3a:c0:c6:67:
         cb:8e:25:d2:8d:1e:7c:93:3b:10:d4:39:61:15:59:9d:1f:33:
         d8:e2:67:d3:31:3d:8b:c2:89:e1:c5:50:13:11:5c:62:4b:ba:
         d9:8f:37:1f:70:b7:48:f7:5e:89:32:da:3d:c9:4f:96:21:1f:
         82:18:e9:fd:5c:e7:4f:11:2d:7d:ec:a3:f2:e4:fb:b3:15:46:
         f6:1d:bc:c5:2e:36:8a:af:53:95:5c:42:99:cb:f0:28:9d:ca:
         2a:2e:8b:bf:a9:5c:cd:22:62:8c:39:34:ef:b0:84:a8:e1:ff:
         3a:e9:b4:c4:aa:cb:b6:fd:b8:c7:0e:c4:a8:ee:df:fe:61:cf:
         14:2c:9d:91:4e:16:59:bb:88:d1:53:23:b0:39:91:b4:0e:b3:
         b8:fd:a5:0a:0d:38:c5:a6:bc:e3:af:3a:40:30:f4:fe:32:f0:
         be:4b:cd:6c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7xmu2lPKgJJE0N0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjY0ZTRjNTEtZjdiNS00NTNlLWE3YjAtODA4MWE2NDA0
NjYyMB4XDTI2MDgyNDEzNTAyOVoXDTI2MTEyMjE0NTAyOVowLzEtMCsGA1UEAxMk
ZmZhMTEyMDMtZDkwZS00YTcyLWJiMGUtZGJkNmUyZDYyZGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjon9d3NhfF3LHgCcmmRRb1hzF63fUvdQKFb
K9V7UAQJZGPvRJa2DNYpWw70bm3SjFdNgcgoL6AZ7zd1g1RuZ/tK0O3yG6AjEspx
H9gh1b2I5LYKVOGoQYi50C0PoW2ujPWed1oVJtLMm3aRB1OEK4tDMjp5HZUGdtI6
B183p3TunG2HnYH6B66puOkbeIk4zayckH99RKSDiiX+C3yaJqA5pZQJV6YGOlDE
Nw6yh9BDF6qZjWKntlAITgmgS0DFSlLpohrGkZYDMyXkqJuYXHaCget0e3+lGkEM
r3stdOyLHN1w9Yl7orjpGe8MszYWpJUPB6Jr+XZHkZVaeoZl/QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFNqTqyo1ciJnXW+BmpjjnPUd7EmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82NjRl
NGM1MS1mN2I1LTQ1M2UtYTdiMC04MDgxYTY0MDQ2NjIvMmJjZWRkZDYtOThhYi0z
MDM4LWJmYzYtMjk4NGVhNzJiYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjY0ZTRjNTEtZjdiNS00NTNlLWE3
YjAtODA4MWE2NDA0NjYyLzY2NGU0YzUxLWY3YjUtNDUzZS1hN2IwLTgwODFhNjQw
NDY2Mi5jcmwwHwYDVR0jBBgwFoAUrgVKm7uplPBwrIMbVQW0XQXjxHQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi82NjRlNGM1MS1mN2I1LTQ1M2UtYTdiMC04MDgx
YTY0MDQ2NjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL/pgcw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcl5hPg6PS96Bw5x45o2Sgr4qw7eO62H0Y5eii+sGa1RihV5N6J6J
wNLFgDmLTNWAi0U/lRvPZlkjz0eYUrsDVVXDVFNfcOs1w7UiegG6cfIYOGS4zBw6
wMZny44l0o0efJM7ENQ5YRVZnR8z2OJn0zE9i8KJ4cVQExFcYku62Y83H3C3SPde
iTLaPclPliEfghjp/VznTxEtfeyj8uT7sxVG9h28xS42iq9TlVxCmcvwKJ3KKi6L
v6lczSJijDk077CEqOH/Oum0xKrLtv24xw7EqO7f/mHPFCydkU4WWbuI0VMjsDmR
tA6zuP2lCg04xaa84686QDD0/jLwvkvNbA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:09:20 2026 by rpki-client