Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/f393c755-1aa5-3164-81e7-6f8c412d59a2.roa
File:                     f393c755-1aa5-3164-81e7-6f8c412d59a2.roa (raw, json)
Hash identifier:          Q1WcI5tsWpUUPowKq85hXG10+0Tzi4Hr5crn3WQqU94=
Subject key identifier:   13:3C:10:6B:21:08:92:FD:59:AB:D5:1C:CC:2E:88:3E:BC:52:2C:17
Certificate issuer:       /CN=5cf06829-25a9-43c5-8a21-38599a1fb23f
Certificate serial:       010D0C9F4328584E9EAFE7B21B472B0AFFE14300
Authority key identifier: 1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/f393c755-1aa5-3164-81e7-6f8c412d59a2.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     397376
IP address blocks:        2602:fdff::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e7:b2:1b:47:2b:0a:ff:e1:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf06829-25a9-43c5-8a21-38599a1fb23f
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=fc42d476-ed32-49ba-bfec-abbfae2e24b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4a:5f:0a:68:7e:52:74:35:f7:22:63:5b:81:
                    72:37:58:40:a6:85:34:da:9e:f9:53:05:08:37:62:
                    10:b4:e8:da:fe:34:89:d6:91:aa:42:41:ee:5e:1b:
                    96:36:49:14:a7:cf:c0:b8:3b:a7:86:db:ab:bb:72:
                    11:38:5c:84:e1:68:8f:18:04:6c:d1:27:70:e8:c6:
                    fc:d3:1e:f4:09:e5:8c:b7:5b:c5:5c:b1:f5:0f:a8:
                    19:8d:7e:d7:81:9f:41:fe:01:f9:a2:d5:32:34:06:
                    49:01:da:8f:47:8d:58:f7:b0:ee:ff:12:53:52:09:
                    de:ce:12:1e:4b:2e:ec:32:93:f1:1c:e3:e5:43:3d:
                    f0:17:67:e3:4f:f6:5e:db:e1:c4:b8:67:98:44:d9:
                    25:17:92:88:05:80:1e:c7:70:3c:3c:91:f6:de:fa:
                    9f:6c:af:a8:20:b5:df:77:f4:d4:ee:8e:5a:f7:1f:
                    11:e4:a9:3e:e2:bc:32:3b:38:4f:af:58:4a:ad:dc:
                    8f:2c:65:7a:0a:6d:f7:20:99:71:e6:8c:e1:19:a0:
                    3d:35:c4:c8:63:6b:06:65:15:53:97:cb:e6:55:32:
                    a7:7a:bb:88:76:d6:d8:e0:1f:18:41:d3:2c:67:60:
                    3c:f1:dd:87:64:d9:20:87:99:09:cf:b6:a6:8c:7c:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3C:10:6B:21:08:92:FD:59:AB:D5:1C:CC:2E:88:3E:BC:52:2C:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/f393c755-1aa5-3164-81e7-6f8c412d59a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl

            X509v3 Authority Key Identifier:
                keyid:1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdff::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:5d:cb:97:1f:10:e2:50:01:2e:23:2f:b8:94:cd:9e:6a:
         56:23:ba:4c:2c:0b:75:da:fc:96:3c:66:73:c5:0a:cb:45:fc:
         49:d0:13:f1:db:b7:41:d8:77:51:c0:91:db:b2:33:6a:9e:37:
         51:24:ed:85:79:f5:25:9c:cb:e4:cf:fb:18:54:9f:02:a9:75:
         e6:23:16:79:ac:ec:c0:21:c1:e8:a5:c3:41:21:68:37:32:e1:
         b4:09:8e:42:e3:67:c2:20:90:70:fd:41:49:dc:eb:7a:f1:0c:
         04:60:26:36:5f:bb:f5:23:7e:1a:20:9f:b2:9c:8d:67:4c:e7:
         87:8c:53:54:43:7e:d9:1d:e4:d6:a7:4b:93:ef:52:0f:2e:54:
         fd:b5:5c:6d:d5:a4:e5:7d:a9:68:9c:eb:85:6a:da:af:fe:f9:
         2f:97:fd:b7:15:0c:64:e6:ea:61:d1:91:f1:7c:c9:b6:9e:40:
         ad:cf:08:c4:03:0a:2d:7a:30:91:99:ad:a3:c1:74:3c:40:11:
         74:79:86:77:6f:29:5e:06:53:59:b2:32:83:3c:4a:71:7c:70:
         5e:a3:10:ec:37:c2:6e:60:75:ca:45:df:ef:0f:2a:84:03:f2:
         1e:36:b5:87:83:de:79:6f:72:8a:bd:af:38:b3:e5:18:cb:93:
         12:3f:ea:c5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6er+eyG0crCv/hQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNmMDY4MjktMjVhOS00M2M1LThhMjEtMzg1OTlhMWZi
MjNmMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk
ZmM0MmQ0NzYtZWQzMi00OWJhLWJmZWMtYWJiZmFlMmUyNGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkpfCmh+UnQ19yJjW4FyN1hApoU02p75UwUI
N2IQtOja/jSJ1pGqQkHuXhuWNkkUp8/AuDunhturu3IROFyE4WiPGARs0Sdw6Mb8
0x70CeWMt1vFXLH1D6gZjX7XgZ9B/gH5otUyNAZJAdqPR41Y97Du/xJTUgnezhIe
Sy7sMpPxHOPlQz3wF2fjT/Ze2+HEuGeYRNklF5KIBYAex3A8PJH23vqfbK+oILXf
d/TU7o5a9x8R5Kk+4rwyOzhPr1hKrdyPLGV6Cm33IJlx5ozhGaA9NcTIY2sGZRVT
l8vmVTKneruIdtbY4B8YQdMsZ2A88d2HZNkgh5kJz7amjHwLAwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBM8EGshCJL9WavVHMwuiD68UiwXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81Y2Yw
NjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5OWExZmIyM2YvZjM5M2M3NTUtMWFhNS0z
MTY0LTgxZTctNmY4YzQxMmQ1OWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWNmMDY4MjktMjVhOS00M2M1LThh
MjEtMzg1OTlhMWZiMjNmLzVjZjA2ODI5LTI1YTktNDNjNS04YTIxLTM4NTk5YTFm
YjIzZi5jcmwwHwYDVR0jBBgwFoAUH9np46Ez8Srh0OVGuPMg26EbbcAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81Y2YwNjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5
OWExZmIyM2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL9/zBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBN+F3Llx8Q4lABLiMvuJTNnmpWI7pMLAt12vyWPGZzxQrLRfxJ0BPx
27dB2HdRwJHbsjNqnjdRJO2FefUlnMvkz/sYVJ8CqXXmIxZ5rOzAIcHopcNBIWg3
MuG0CY5C42fCIJBw/UFJ3Ot68QwEYCY2X7v1I34aIJ+ynI1nTOeHjFNUQ37ZHeTW
p0uT71IPLlT9tVxt1aTlfalonOuFatqv/vkvl/23FQxk5uph0ZHxfMm2nkCtzwjE
AwotejCRma2jwXQ8QBF0eYZ3byleBlNZsjKDPEpxfHBeoxDsN8JuYHXKRd/vDyqE
A/IeNrWHg955b3KKva84s+UYy5MSP+rF
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:40:13 2026 by rpki-client