Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/f8e88763-a876-374e-8caf-7813f09c28ce.roa
File:                     f8e88763-a876-374e-8caf-7813f09c28ce.roa (raw, json)
Hash identifier:          F0SDpgSUy8glgGseP8nctsBRgc/dXxxdwI9zPgjuIe8=
Subject key identifier:   67:BE:59:84:F6:8C:CE:F8:BE:BF:D8:84:FA:A5:8B:51:FE:61:48:D0
Certificate issuer:       /CN=63dfa533-829d-4752-9f73-458a9e42bd9e
Certificate serial:       010D0C9F4328584E66DA0EB69D00B22D5EF15840
Authority key identifier: 8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/f8e88763-a876-374e-8caf-7813f09c28ce.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     212123
IP address blocks:        2602:fe2e:fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:0e:b6:9d:00:b2:2d:5e:f1:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dfa533-829d-4752-9f73-458a9e42bd9e
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=a2e3cae9-62a0-4ef2-a271-124108f7f927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:aa:1f:83:ea:ca:03:39:64:f1:a3:77:97:ee:
                    b9:4c:1c:22:64:8d:84:fe:13:65:53:be:75:08:c4:
                    15:29:5a:4c:14:c0:76:db:53:cd:43:7a:44:9f:78:
                    17:2f:86:6a:61:71:da:f9:f0:9c:db:a4:8a:67:a6:
                    4b:e7:e0:41:a8:e2:48:c8:ca:43:0e:82:e1:62:12:
                    ac:ad:04:7c:42:0e:8f:bf:5c:43:6c:9c:50:28:94:
                    3c:3b:2a:26:b9:82:cb:28:50:bc:d2:6a:ad:42:0f:
                    13:6c:2d:c9:72:a6:46:c5:8f:ff:c2:80:40:b2:b2:
                    23:c2:ed:6f:f5:29:a5:61:da:b1:c5:1e:46:3d:b1:
                    3c:14:ad:08:b7:6b:c2:65:e7:97:4e:ff:a5:e4:e1:
                    30:18:45:1b:5c:f4:b4:c6:f0:1d:22:b4:f5:67:16:
                    b4:6e:f9:70:97:93:e2:91:2f:22:09:05:f5:5c:3d:
                    46:a6:d2:f7:e9:f2:02:a5:a4:09:7d:27:1f:51:da:
                    13:25:ec:d5:34:20:07:17:9f:17:14:ea:25:dc:7b:
                    87:27:cb:4a:25:18:3b:cc:90:23:cf:1d:f5:06:f4:
                    63:b5:5d:0e:dd:1f:85:2a:c1:cb:05:a3:44:b9:6d:
                    30:9d:b1:47:42:2f:a3:cd:40:9e:92:d3:58:19:83:
                    79:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BE:59:84:F6:8C:CE:F8:BE:BF:D8:84:FA:A5:8B:51:FE:61:48:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/f8e88763-a876-374e-8caf-7813f09c28ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe2e:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:40:fc:9f:25:49:e2:f2:26:bc:63:cd:ce:7a:f3:a5:f8:8f:
         e0:08:8b:cc:7a:06:f9:f8:59:b5:a1:0c:85:c5:79:94:a9:e4:
         11:74:67:12:04:52:d3:33:01:f5:97:fb:17:8d:54:93:57:df:
         69:e6:65:ef:61:2b:a7:d0:12:fc:70:a8:d1:2d:a4:e1:e3:d3:
         3d:63:c1:bd:5b:42:80:13:87:9f:c1:5f:96:a4:c1:b6:63:85:
         53:be:c9:b1:aa:34:4a:5c:80:ab:80:a7:c5:64:35:71:e7:0e:
         6d:d8:4b:28:5c:2f:a5:ea:ee:de:7f:29:d0:6f:f0:c3:c4:42:
         7e:a1:6d:df:33:6b:f6:3b:a9:7d:b6:d2:f7:41:6c:69:90:9c:
         ca:e9:5b:52:eb:b4:42:66:ba:25:82:bd:8e:94:c9:c7:87:76:
         e9:de:f8:6a:de:8c:b1:aa:26:01:4a:7a:b3:10:40:83:64:4e:
         7d:95:bb:8f:e8:45:d5:a7:64:da:da:3e:de:0f:06:90:1b:96:
         2f:0e:e0:75:c9:a4:fc:17:aa:43:0b:dc:42:21:67:d3:32:22:
         be:2d:95:d2:b3:2f:e8:84:5c:8d:b2:d6:a9:a8:26:04:ae:72:
         23:52:23:56:fa:17:14:1a:91:4f:9e:59:e2:43:10:46:e4:a0:
         01:8e:47:c5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5m2g62nQCyLV7xWEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjNkZmE1MzMtODI5ZC00NzUyLTlmNzMtNDU4YTllNDJi
ZDllMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
YTJlM2NhZTktNjJhMC00ZWYyLWEyNzEtMTI0MTA4ZjdmOTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqofg+rKAzlk8aN3l+65TBwiZI2E/hNlU751
CMQVKVpMFMB221PNQ3pEn3gXL4ZqYXHa+fCc26SKZ6ZL5+BBqOJIyMpDDoLhYhKs
rQR8Qg6Pv1xDbJxQKJQ8OyomuYLLKFC80mqtQg8TbC3JcqZGxY//woBAsrIjwu1v
9SmlYdqxxR5GPbE8FK0It2vCZeeXTv+l5OEwGEUbXPS0xvAdIrT1Zxa0bvlwl5Pi
kS8iCQX1XD1GptL36fICpaQJfScfUdoTJezVNCAHF58XFOol3HuHJ8tKJRg7zJAj
zx31BvRjtV0O3R+FKsHLBaNEuW0wnbFHQi+jzUCektNYGYN5OwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGe+WYT2jM74vr/YhPqli1H+YUjQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82M2Rm
YTUzMy04MjlkLTQ3NTItOWY3My00NThhOWU0MmJkOWUvZjhlODg3NjMtYTg3Ni0z
NzRlLThjYWYtNzgxM2YwOWMyOGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjNkZmE1MzMtODI5ZC00NzUyLTlm
NzMtNDU4YTllNDJiZDllLzYzZGZhNTMzLTgyOWQtNDc1Mi05ZjczLTQ1OGE5ZTQy
YmQ5ZS5jcmwwHwYDVR0jBBgwFoAUj4WaPPqYwBFnbTEZlB2VgyjiTN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82M2RmYTUzMy04MjlkLTQ3NTItOWY3My00NThh
OWU0MmJkOWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+Lg//
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABFA/J8lSeLyJrxjzc5686X4j+AIi8x6Bvn4WbWhDIXFeZSp5BF0
ZxIEUtMzAfWX+xeNVJNX32nmZe9hK6fQEvxwqNEtpOHj0z1jwb1bQoATh5/BX5ak
wbZjhVO+ybGqNEpcgKuAp8VkNXHnDm3YSyhcL6Xq7t5/KdBv8MPEQn6hbd8za/Y7
qX220vdBbGmQnMrpW1LrtEJmuiWCvY6UyceHdune+GrejLGqJgFKerMQQINkTn2V
u4/oRdWnZNraPt4PBpAbli8O4HXJpPwXqkML3EIhZ9MyIr4tldKzL+iEXI2y1qmo
JgSuciNSI1b6FxQakU+eWeJDEEbkoAGOR8U=
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:12:56 2026 by rpki-client