Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f38f0482-ffe5-3df1-b6ce-8b1d28435946.roa
File:                     f38f0482-ffe5-3df1-b6ce-8b1d28435946.roa (raw, json)
Hash identifier:          YMTFReo8dGejDbf4IId2DRDIqnVX8LRUsdSEAeOcy9w=
Subject key identifier:   1D:64:EB:AA:A1:00:E5:86:79:E7:25:22:12:08:2B:10:96:F0:9D:6F
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584E3E5F40492240A96FA71A0E40
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f38f0482-ffe5-3df1-b6ce-8b1d28435946.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     399275
IP address blocks:        2602:fcc0:7777::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:40:49:22:40:a9:6f:a7:1a:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=3d305e20-f61e-485c-96a9-d427f717e4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:9e:83:d7:13:95:5a:c5:6e:8d:04:50:1b:
                    6e:b4:83:aa:ef:45:e7:8d:2b:5f:c7:be:c8:91:39:
                    9d:07:e8:77:b6:16:a2:7d:c8:e4:63:16:a4:e5:7a:
                    c6:61:86:de:cd:0c:36:9a:c9:f1:e8:93:0c:81:39:
                    dd:04:fa:ef:bd:88:83:2d:38:67:e3:cb:f8:e7:b9:
                    83:7c:27:f0:c1:15:6d:d3:5d:a5:64:4c:c0:6e:88:
                    89:94:74:87:f8:f9:18:25:34:a6:f5:8d:5b:6c:2a:
                    13:80:6c:dd:0f:78:6e:0b:17:cd:5c:ac:cc:03:45:
                    30:71:7c:72:dd:cb:c4:84:c9:84:e5:f6:f3:f7:4d:
                    2e:e2:f9:2e:24:d5:aa:f2:03:1e:94:77:e0:e2:a8:
                    99:d9:21:19:4c:46:8a:55:80:39:f6:86:62:2b:47:
                    4d:75:c4:51:01:1e:3d:33:15:2c:7b:32:70:b5:cc:
                    82:ad:3a:01:d2:67:5a:5c:4e:75:ca:bb:29:7b:82:
                    f1:a1:21:54:18:97:37:58:71:fe:8a:60:80:3a:86:
                    ca:0c:de:03:89:89:88:5b:ac:a7:56:50:07:e4:93:
                    49:2f:8f:13:43:f0:cc:f9:bf:b2:d4:b0:1f:4a:da:
                    53:f0:85:1b:6a:df:c9:54:cf:5a:63:8d:80:f9:18:
                    4d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:64:EB:AA:A1:00:E5:86:79:E7:25:22:12:08:2B:10:96:F0:9D:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f38f0482-ffe5-3df1-b6ce-8b1d28435946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:7777::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:42:9e:9d:a7:5c:f6:c3:09:f8:b3:01:aa:0d:9b:6d:3c:74:
         c2:68:f8:6c:e0:d5:04:88:29:33:7c:34:17:9d:26:67:fa:ba:
         0e:5b:78:db:5e:53:70:ab:ef:14:41:1b:05:1c:ff:62:88:4b:
         a2:a4:6a:7b:2f:ec:87:13:2e:48:0d:24:60:69:dc:40:9e:c0:
         e1:7c:10:99:fd:81:be:09:26:e1:6a:d2:83:d6:4f:30:5a:0a:
         a8:ff:63:5d:a3:ee:28:73:df:e1:25:cd:cf:0d:c9:52:ec:34:
         b9:65:89:cf:87:e8:2e:72:ed:64:63:31:9c:d6:d6:cd:c8:4f:
         10:ca:df:3f:b3:74:2f:cd:5e:ad:ea:6e:70:32:46:86:a0:b2:
         19:ac:b9:69:00:10:37:23:4d:05:4f:cf:71:8e:c1:b1:74:b4:
         6b:b9:c4:f4:92:17:32:32:13:99:ea:7d:f8:eb:3f:dd:eb:13:
         c8:42:91:03:fb:1e:52:26:02:fd:11:ce:5f:85:9c:b4:8d:e0:
         0c:d3:36:ee:37:92:0b:a1:99:de:37:39:33:8a:d3:ea:6a:b1:
         0a:a1:d8:48:0f:01:9a:1f:3c:ae:1a:ab:1a:47:48:24:83:e9:
         8b:9d:c7:97:62:a0:83:27:79:82:c1:1a:43:0b:b1:9a:97:02:
         56:11:d1:23
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4+X0BJIkCpb6caDkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2
ZTc1MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
M2QzMDVlMjAtZjYxZS00ODVjLTk2YTktZDQyN2Y3MTdlNGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAeeg9cTlVrFbo0EUBtutIOq70XnjStfx77I
kTmdB+h3thaifcjkYxak5XrGYYbezQw2msnx6JMMgTndBPrvvYiDLThn48v457mD
fCfwwRVt012lZEzAboiJlHSH+PkYJTSm9Y1bbCoTgGzdD3huCxfNXKzMA0UwcXxy
3cvEhMmE5fbz900u4vkuJNWq8gMelHfg4qiZ2SEZTEaKVYA59oZiK0dNdcRRAR49
MxUsezJwtcyCrToB0mdaXE51yrspe4LxoSFUGJc3WHH+imCAOobKDN4DiYmIW6yn
VlAH5JNJL48TQ/DM+b+y1LAfStpT8IUbat/JVM9aY42A+RhNRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB1k66qhAOWGeeclIhIIKxCW8J1vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl
NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvZjM4ZjA0ODItZmZlNS0z
ZGYxLWI2Y2UtOGIxZDI4NDM1OTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky
OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4
NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj
OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wHd3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACxCnp2nXPbDCfizAaoNm208dMJo+Gzg1QSIKTN8NBedJmf6ug5b
eNteU3Cr7xRBGwUc/2KIS6Kkansv7IcTLkgNJGBp3ECewOF8EJn9gb4JJuFq0oPW
TzBaCqj/Y12j7ihz3+Elzc8NyVLsNLllic+H6C5y7WRjMZzW1s3ITxDK3z+zdC/N
Xq3qbnAyRoagshmsuWkAEDcjTQVPz3GOwbF0tGu5xPSSFzIyE5nqffjrP93rE8hC
kQP7HlImAv0Rzl+FnLSN4AzTNu43kguhmd43OTOK0+pqsQqh2EgPAZofPK4aqxpH
SCSD6Yudx5dioIMneYLBGkMLsZqXAlYR0SM=
-----END CERTIFICATE-----
Generated at Mon Jul 13 13:53:58 2026 by rpki-client