Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/df571e00-0021-324a-8fb9-5cf4efc237d7.roa
File:                     df571e00-0021-324a-8fb9-5cf4efc237d7.roa (raw, json)
Hash identifier:          ncT0KJ+CJqGLxEiMzWwzOZfA1pewuSwptLkbJI93e0U=
Subject key identifier:   9B:1D:68:57:2E:DA:37:A9:AA:2D:13:6D:4B:B8:F7:42:5F:73:98:95
Certificate issuer:       /CN=31cdafa2-3aa9-4253-a242-08ace2acaef2
Certificate serial:       010D0C9F4328584E9384FCB3AF9D0766159A6680
Authority key identifier: 61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/df571e00-0021-324a-8fb9-5cf4efc237d7.roa
Signing time:             Tue 21 Jul 2026 21:00:12 +0000
ROA not before:           Tue 21 Jul 2026 21:00:12 +0000
ROA not after:            Mon 19 Oct 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        2602:f702:222::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:84:fc:b3:af:9d:07:66:15:9a:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31cdafa2-3aa9-4253-a242-08ace2acaef2
        Validity
            Not Before: Jul 21 21:00:12 2026 GMT
            Not After : Oct 19 21:00:12 2026 GMT
        Subject: CN=9a3c31de-1938-4304-8f9e-076058dc965f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7b:d4:25:e5:39:e1:71:7d:c9:b7:00:b1:53:
                    39:1a:21:7b:d0:5f:ed:8e:23:e5:e4:32:9e:dd:dc:
                    8b:ef:de:ea:3d:ea:c9:ff:f1:98:a8:6b:3a:d9:3c:
                    2d:31:73:9f:5d:bf:e8:be:3c:76:a8:3a:fc:63:09:
                    8d:bd:b8:b5:5d:76:14:ae:ad:25:bd:40:fd:da:ae:
                    6c:ca:22:b4:43:3f:a9:f4:bd:57:e7:bc:12:69:3d:
                    49:9a:73:1b:0f:3f:e2:04:8b:f9:29:95:77:f4:3f:
                    14:89:7b:bc:aa:b5:ab:71:83:4d:02:b1:5d:52:1d:
                    dd:bc:cc:38:2d:a4:27:21:90:19:5d:a6:cf:34:64:
                    7a:ae:b9:51:9c:01:1a:be:5a:b8:c2:5d:ce:d5:f9:
                    70:ae:6a:ab:05:f0:a0:90:e6:d6:15:21:12:10:4a:
                    74:75:b4:9d:32:b4:d6:cb:77:fc:2d:a1:77:86:17:
                    b5:53:a9:fa:54:83:f1:c6:2c:14:a2:4b:9e:65:9a:
                    39:5d:32:5c:8d:8c:c1:9c:ba:9d:83:1f:11:6d:f9:
                    82:88:bc:dd:e5:60:1e:46:bf:d9:c6:cc:de:ad:94:
                    ee:62:4d:c1:db:5e:70:bb:e9:df:d3:ba:b3:ae:f2:
                    af:91:58:8f:5e:a5:d2:13:3f:aa:09:5f:13:08:9c:
                    06:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1D:68:57:2E:DA:37:A9:AA:2D:13:6D:4B:B8:F7:42:5F:73:98:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/df571e00-0021-324a-8fb9-5cf4efc237d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl

            X509v3 Authority Key Identifier:
                keyid:61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f702:222::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:25:72:27:62:5a:a9:2f:36:52:42:1c:2c:b0:ed:cc:f4:48:
         7d:dc:d3:6d:ce:88:3d:79:9e:9d:45:17:aa:c7:81:0e:6c:a6:
         3a:00:04:53:06:be:02:b8:1d:72:09:32:e8:d6:1b:0b:08:03:
         62:f7:cd:e5:17:c2:c1:b9:56:40:a4:e8:ab:d8:0c:98:f4:0a:
         5b:ce:6f:1b:90:07:c2:1c:42:43:17:5e:62:6f:49:3f:dd:0b:
         e6:70:5b:20:db:2f:65:e6:42:cd:72:25:8c:12:f4:30:23:36:
         54:17:ce:49:9c:53:4d:e5:04:4d:7f:af:b1:d3:a5:fb:1a:bf:
         fa:47:b2:52:c0:f6:89:b2:ce:fe:80:d6:5e:3c:a7:f8:07:15:
         c2:d2:ae:1a:18:e8:4d:eb:b7:a1:77:da:b7:3b:8d:38:ee:cf:
         ad:f7:91:72:60:15:df:d3:a0:c3:63:05:c8:13:69:4f:42:fe:
         ec:e2:d0:48:ff:47:4e:f3:43:6c:5c:62:69:f4:48:3f:f7:8d:
         7d:28:9f:9c:67:a6:33:7f:0e:54:ef:eb:e6:ed:fd:28:bf:96:
         9f:de:18:44:d8:0f:0a:0d:7f:79:b0:d7:0d:85:44:ef:14:3a:
         1e:2c:32:80:30:c2:7b:16:62:86:f7:68:1c:32:65:1c:2f:22:
         d6:fb:2a:2a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6ThPyzr50HZhWaZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFjZGFmYTItM2FhOS00MjUzLWEyNDItMDhhY2UyYWNh
ZWYyMB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk
OWEzYzMxZGUtMTkzOC00MzA0LThmOWUtMDc2MDU4ZGM5NjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinvUJeU54XF9ybcAsVM5GiF70F/tjiPl5DKe
3dyL797qPerJ//GYqGs62TwtMXOfXb/ovjx2qDr8YwmNvbi1XXYUrq0lvUD92q5s
yiK0Qz+p9L1X57wSaT1JmnMbDz/iBIv5KZV39D8UiXu8qrWrcYNNArFdUh3dvMw4
LaQnIZAZXabPNGR6rrlRnAEavlq4wl3O1flwrmqrBfCgkObWFSESEEp0dbSdMrTW
y3f8LaF3hhe1U6n6VIPxxiwUokueZZo5XTJcjYzBnLqdgx8RbfmCiLzd5WAeRr/Z
xszerZTuYk3B215wu+nf07qzrvKvkViPXqXSEz+qCV8TCJwGPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJsdaFcu2jepqi0TbUu490Jfc5iVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMWNk
YWZhMi0zYWE5LTQyNTMtYTI0Mi0wOGFjZTJhY2FlZjIvZGY1NzFlMDAtMDAyMS0z
MjRhLThmYjktNWNmNGVmYzIzN2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzFjZGFmYTItM2FhOS00MjUzLWEy
NDItMDhhY2UyYWNhZWYyLzMxY2RhZmEyLTNhYTktNDI1My1hMjQyLTA4YWNlMmFj
YWVmMi5jcmwwHwYDVR0jBBgwFoAUYRIn1XuxZqzGfR2ohRo9l/9c+TQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMWNkYWZhMi0zYWE5LTQyNTMtYTI0Mi0wOGFj
ZTJhY2FlZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3AgIi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIslcidiWqkvNlJCHCyw7cz0SH3c023OiD15np1FF6rHgQ5spjoA
BFMGvgK4HXIJMujWGwsIA2L3zeUXwsG5VkCk6KvYDJj0ClvObxuQB8IcQkMXXmJv
ST/dC+ZwWyDbL2XmQs1yJYwS9DAjNlQXzkmcU03lBE1/r7HTpfsav/pHslLA9omy
zv6A1l48p/gHFcLSrhoY6E3rt6F32rc7jTjuz633kXJgFd/ToMNjBcgTaU9C/uzi
0Ej/R07zQ2xcYmn0SD/3jX0on5xnpjN/DlTv6+bt/Si/lp/eGETYDwoNf3mw1w2F
RO8UOh4sMoAwwnsWYob3aBwyZRwvItb7Kio=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:20:12 2026 by rpki-client