Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399/fa0912f7-fc91-3bff-ab7e-c63e23814963.roa
File:                     fa0912f7-fc91-3bff-ab7e-c63e23814963.roa (raw, json)
Hash identifier:          xak5nMxXk+00NYSk2Qq/F9nC1YTAEJ1FdnH00YEj298=
Subject key identifier:   BE:6A:16:1F:4D:2B:76:E3:40:EF:7B:F3:ED:41:41:52:F4:1D:55:7E
Certificate issuer:       /CN=2328a8c9-308b-4876-95dd-0dc937d46399
Certificate serial:       010D0C9F4328584E534F4A1AAC149E61F302DB20
Authority key identifier: AA:E8:6A:02:F0:41:05:8C:5D:47:A3:68:ED:92:2D:01:B4:76:F3:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399/fa0912f7-fc91-3bff-ab7e-c63e23814963.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     402385
IP address blocks:        2602:f3fe::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399/2328a8c9-308b-4876-95dd-0dc937d46399.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399/2328a8c9-308b-4876-95dd-0dc937d46399.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:4a:1a:ac:14:9e:61:f3:02:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2328a8c9-308b-4876-95dd-0dc937d46399
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=624f14a1-ed00-48ce-872a-0cca8b40a5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d0:bd:a7:73:99:ea:f5:cb:0d:6a:52:ea:12:
                    44:88:46:51:de:e7:c6:ef:30:0a:f3:ee:e5:c5:24:
                    8f:88:71:de:bf:49:c3:d9:c0:6f:a6:3f:3a:6e:ac:
                    1d:79:4c:7e:75:b3:c0:59:1f:e1:c0:2e:df:ec:7a:
                    5f:a8:f8:f0:e1:ab:88:fe:63:24:21:9e:61:e4:fb:
                    1c:e2:c1:31:a6:d6:7a:0e:f6:f4:6b:2a:14:d8:9d:
                    bc:1e:22:5d:1d:88:58:e9:c7:2f:2d:6f:31:a1:a9:
                    64:1a:31:2e:38:6d:c0:59:bd:41:2f:a4:2c:3d:56:
                    c4:9f:c4:35:75:34:e6:1b:39:69:93:b4:df:b0:d9:
                    c0:a2:c4:9c:56:bf:44:37:8b:26:b3:82:a5:5b:94:
                    be:b4:55:b6:53:04:99:63:a2:d3:4e:e1:90:73:0e:
                    4a:b0:45:67:5f:e3:fe:55:1c:ad:b8:91:4d:f8:2d:
                    64:96:29:bb:1f:6a:bd:50:e9:87:90:2c:d9:25:2e:
                    0a:98:66:0a:52:bb:15:dc:27:25:5e:38:2e:a6:f0:
                    c5:74:66:83:20:55:9e:71:8c:61:e4:59:59:9f:89:
                    ab:f6:5d:6a:64:d2:1d:ce:24:48:75:94:ad:db:82:
                    fd:43:fe:d2:65:e7:31:2b:d5:cc:a7:c6:7e:bf:9b:
                    ce:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6A:16:1F:4D:2B:76:E3:40:EF:7B:F3:ED:41:41:52:F4:1D:55:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399/fa0912f7-fc91-3bff-ab7e-c63e23814963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399/2328a8c9-308b-4876-95dd-0dc937d46399.crl

            X509v3 Authority Key Identifier:
                keyid:AA:E8:6A:02:F0:41:05:8C:5D:47:A3:68:ED:92:2D:01:B4:76:F3:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3fe::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:b2:56:85:12:42:fa:be:dc:de:5a:a4:b6:19:2b:6d:19:f5:
         13:f6:c9:48:b9:d7:41:1f:5c:1f:be:2a:80:fc:27:65:69:ba:
         67:b0:8f:22:1c:d5:f3:d1:c0:50:80:04:ca:5d:ad:23:cd:7f:
         71:5a:4e:ca:27:bf:11:7d:53:16:e0:4b:98:a9:f9:82:b8:62:
         24:f0:f9:ea:3c:01:b0:14:3d:bf:33:cf:18:34:9d:ec:16:f7:
         2e:04:83:b6:14:c4:30:91:17:c3:4c:54:91:d1:7b:4e:26:f8:
         7b:e9:10:53:e6:3a:a6:e8:18:b2:26:44:aa:c1:a6:6e:92:54:
         6c:96:1d:5f:5b:2e:16:86:d3:22:5f:08:f2:66:82:97:0e:d4:
         b0:91:73:93:8e:c4:50:76:57:96:3a:80:a6:77:07:8f:9d:b7:
         97:ea:9f:e9:6c:ac:19:de:bd:07:e8:fe:6d:90:d7:06:e7:67:
         d2:a9:8e:13:0e:9e:a2:c4:a0:9b:ef:ac:75:97:a9:36:d7:8f:
         13:ce:28:60:95:0c:ce:30:4d:c4:70:13:23:6d:68:2b:e9:9e:
         6f:4b:46:87:4e:7f:02:34:2d:72:44:02:f3:8b:b6:61:32:5a:
         42:37:02:b5:d9:b2:6f:1b:0b:76:c8:41:fd:d1:41:c4:a6:c8:
         70:94:56:bb
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5TT0oarBSeYfMC2yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjMyOGE4YzktMzA4Yi00ODc2LTk1ZGQtMGRjOTM3ZDQ2
Mzk5MB4XDTI2MDYyODIxMDAxMVoXDTI2MDkyNjIxMDAxMVowLzEtMCsGA1UEAxMk
NjI0ZjE0YTEtZWQwMC00OGNlLTg3MmEtMGNjYThiNDBhNWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNC9p3OZ6vXLDWpS6hJEiEZR3ufG7zAK8+7l
xSSPiHHev0nD2cBvpj86bqwdeUx+dbPAWR/hwC7f7HpfqPjw4auI/mMkIZ5h5Psc
4sExptZ6Dvb0ayoU2J28HiJdHYhY6ccvLW8xoalkGjEuOG3AWb1BL6QsPVbEn8Q1
dTTmGzlpk7TfsNnAosScVr9EN4sms4KlW5S+tFW2UwSZY6LTTuGQcw5KsEVnX+P+
VRytuJFN+C1klim7H2q9UOmHkCzZJS4KmGYKUrsV3CclXjgupvDFdGaDIFWecYxh
5FlZn4mr9l1qZNIdziRIdZSt24L9Q/7SZecxK9XMp8Z+v5vOXQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFL5qFh9NK3bjQO978+1BQVL0HVV+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMzI4
YThjOS0zMDhiLTQ4NzYtOTVkZC0wZGM5MzdkNDYzOTkvZmEwOTEyZjctZmM5MS0z
YmZmLWFiN2UtYzYzZTIzODE0OTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMjMyOGE4YzktMzA4Yi00ODc2LTk1
ZGQtMGRjOTM3ZDQ2Mzk5LzIzMjhhOGM5LTMwOGItNDg3Ni05NWRkLTBkYzkzN2Q0
NjM5OS5jcmwwHwYDVR0jBBgwFoAUquhqAvBBBYxdR6No7ZItAbR28yAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMzI4YThjOS0zMDhiLTQ4NzYtOTVkZC0wZGM5
MzdkNDYzOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgLz/gAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAwrJWhRJC+r7c3lqkthkrbRn1E/bJSLnXQR9cH74qgPwnZWm6Z7CP
IhzV89HAUIAEyl2tI81/cVpOyie/EX1TFuBLmKn5grhiJPD56jwBsBQ9vzPPGDSd
7Bb3LgSDthTEMJEXw0xUkdF7Tib4e+kQU+Y6pugYsiZEqsGmbpJUbJYdX1suFobT
Il8I8maClw7UsJFzk47EUHZXljqApncHj523l+qf6WysGd69B+j+bZDXBudn0qmO
Ew6eosSgm++sdZepNtePE84oYJUMzjBNxHATI21oK+meb0tGh05/AjQtckQC84u2
YTJaQjcCtdmybxsLdshB/dFBxKbIcJRWuw==
-----END CERTIFICATE-----
Generated at Fri Jul 17 05:26:14 2026 by rpki-client