Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/3ff1842d-e3d8-352f-8f90-b10af609da70.roa
File:                     3ff1842d-e3d8-352f-8f90-b10af609da70.roa (raw, json)
Hash identifier:          urbvFTBeTwR0OAkWLxHZB8VvrzxCw7EAIg4TtxPHN7Y=
Subject key identifier:   90:88:9C:AF:02:AD:3E:2B:20:7E:D9:47:EF:CE:5A:45:E3:11:63:CE
Certificate issuer:       /CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
Certificate serial:       010D0C9F4328584EE38CB2771571043B8E201DA0
Authority key identifier: B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/3ff1842d-e3d8-352f-8f90-b10af609da70.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     6517
IP address blocks:        2602:f5b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:b2:77:15:71:04:3b:8e:20:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=aff176b7-54a3-418b-9e5c-60592242a8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b5:53:18:e6:db:fc:2d:d8:82:08:cb:c0:68:
                    62:a7:3a:42:64:71:11:d2:59:77:20:05:cd:bd:27:
                    65:9e:aa:6b:3c:0f:54:60:e1:e5:61:95:37:7b:6a:
                    92:12:7a:d9:32:f4:4b:18:75:30:a4:50:39:25:1c:
                    a7:ab:5e:ca:99:9d:e6:2a:f0:8e:ae:97:92:87:70:
                    3a:f9:3f:13:98:a0:df:a7:34:d3:02:68:97:79:5c:
                    73:ed:84:f1:a5:a7:b2:c8:da:f9:ed:00:2e:df:5b:
                    b5:3b:3a:2c:5a:93:61:52:56:32:04:b1:8e:c2:d8:
                    e3:5c:0d:a1:28:e0:db:d9:23:24:8e:7b:57:16:be:
                    3b:17:b9:d4:b3:6d:09:23:e9:0a:46:c9:84:9a:21:
                    80:51:cc:db:2f:2b:e7:98:53:d9:da:43:cd:30:64:
                    e8:6f:65:da:7f:fc:99:e4:6c:a6:9a:d8:67:3a:ca:
                    06:b2:f6:32:47:54:2b:11:78:fd:40:0b:bf:62:71:
                    1a:f4:8d:02:a3:61:2b:64:b3:8a:dc:7f:a0:aa:4a:
                    75:a4:42:d4:a7:41:e0:eb:a2:10:b7:b5:54:b3:8f:
                    55:00:eb:4f:b5:bd:db:d0:46:fd:a2:65:cc:ee:03:
                    f5:d2:31:95:95:49:f9:05:13:a5:20:83:6e:d6:6f:
                    81:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:88:9C:AF:02:AD:3E:2B:20:7E:D9:47:EF:CE:5A:45:E3:11:63:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/3ff1842d-e3d8-352f-8f90-b10af609da70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl

            X509v3 Authority Key Identifier:
                keyid:B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:57:28:84:ba:84:29:9e:41:4c:28:71:a8:d0:f2:42:4b:68:
         20:af:08:1b:fc:9f:48:39:aa:db:5c:81:d8:f4:7d:b6:29:60:
         c4:cc:16:74:68:aa:f8:f2:ae:8c:9f:81:f1:aa:a4:10:4b:f1:
         f4:ed:68:74:64:35:ef:e1:2c:1f:95:51:5f:c4:f9:04:ef:1a:
         c5:75:15:af:42:4c:06:04:cd:b7:98:cb:d2:ed:c8:2e:22:9b:
         fe:23:3f:f1:7b:21:af:4a:ce:45:af:78:d4:6e:bf:24:3e:93:
         ad:a2:f8:a1:bf:47:c2:26:30:f8:15:62:df:c1:b2:9d:e8:74:
         74:d6:d1:45:c2:e4:c6:18:7f:b2:44:a4:27:eb:52:38:38:72:
         02:9e:ef:5a:72:89:3c:62:18:2b:2a:6b:b1:6a:c9:09:5c:f0:
         9b:20:35:46:30:70:10:7d:46:18:5c:e0:57:5c:7a:6e:36:97:
         74:82:36:a9:92:a6:58:a1:5d:c9:56:cb:7a:76:d9:25:1e:e7:
         6b:df:1f:23:05:02:d8:79:22:94:a9:c9:19:eb:34:29:35:af:
         fe:72:e2:ff:37:6f:ab:8f:1e:ca:29:d8:ba:ac:b5:55:9d:24:
         64:c7:cf:75:d4:49:c6:33:c4:db:49:6b:b7:74:cf:5b:c7:00:
         bb:c3:28:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7jjLJ3FXEEO44gHaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2E4MWUzOTEtMmY5Zi00M2FjLWE3M2UtZTAxOGUyNzlj
MmQ0MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk
YWZmMTc2YjctNTRhMy00MThiLTllNWMtNjA1OTIyNDJhOGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrVTGObb/C3YggjLwGhipzpCZHER0ll3IAXN
vSdlnqprPA9UYOHlYZU3e2qSEnrZMvRLGHUwpFA5JRynq17KmZ3mKvCOrpeSh3A6
+T8TmKDfpzTTAmiXeVxz7YTxpaeyyNr57QAu31u1OzosWpNhUlYyBLGOwtjjXA2h
KODb2SMkjntXFr47F7nUs20JI+kKRsmEmiGAUczbLyvnmFPZ2kPNMGTob2Xaf/yZ
5GymmthnOsoGsvYyR1QrEXj9QAu/YnEa9I0Co2ErZLOK3H+gqkp1pELUp0Hg66IQ
t7VUs49VAOtPtb3b0Eb9omXM7gP10jGVlUn5BROlIINu1m+BOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJCInK8CrT4rIH7ZR+/OWkXjEWPOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YTgx
ZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4ZTI3OWMyZDQvM2ZmMTg0MmQtZTNkOC0z
NTJmLThmOTAtYjEwYWY2MDlkYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2E4MWUzOTEtMmY5Zi00M2FjLWE3
M2UtZTAxOGUyNzljMmQ0LzdhODFlMzkxLTJmOWYtNDNhYy1hNzNlLWUwMThlMjc5
YzJkNC5jcmwwHwYDVR0jBBgwFoAUs7QcrwOOl+lOWy/V0e9YnCntD0wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC83YTgxZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4
ZTI3OWMyZDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL1sAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFNXKIS6hCmeQUwocajQ8kJLaCCvCBv8n0g5qttcgdj0fbYpYMTM
FnRoqvjyroyfgfGqpBBL8fTtaHRkNe/hLB+VUV/E+QTvGsV1Fa9CTAYEzbeYy9Lt
yC4im/4jP/F7Ia9KzkWveNRuvyQ+k62i+KG/R8ImMPgVYt/Bsp3odHTW0UXC5MYY
f7JEpCfrUjg4cgKe71pyiTxiGCsqa7FqyQlc8JsgNUYwcBB9Rhhc4Fdcem42l3SC
NqmSplihXclWy3p22SUe52vfHyMFAth5IpSpyRnrNCk1r/5y4v83b6uPHsop2Lqs
tVWdJGTHz3XUScYzxNtJa7d0z1vHALvDKJM=
-----END CERTIFICATE-----
Generated at Thu Aug 27 16:54:43 2026 by rpki-client