Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa
File:                     ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa (raw, json)
Hash identifier:          aXDQKs1Zdv9DM6PmuN/Xf31jzslvlhW5rvj3qYV0qPc=
Subject key identifier:   5A:92:38:D4:15:92:33:A6:C6:EB:DB:09:6D:00:63:41:B9:20:F8:84
Certificate issuer:       /CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b
Certificate serial:       010D0C9F4328584E7204CFA43B5F5038858DB7C0
Authority key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     398951
IP address blocks:        2602:f978::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:cf:a4:3b:5f:50:38:85:8d:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=b9d23cee-99b4-4402-93c7-9cb2477e9477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0d:4e:54:e2:b9:d7:c5:97:75:c6:42:81:8c:
                    eb:ad:07:b3:f3:1d:be:af:f3:ad:37:16:bd:e9:9e:
                    f5:4f:47:0a:5f:61:76:2b:1b:82:7d:80:a6:91:3c:
                    6f:93:0c:1c:31:8d:f8:8b:29:0e:cd:92:dc:88:b0:
                    36:b0:41:fb:82:19:c1:ce:3b:95:8b:35:f6:90:46:
                    a7:22:ad:e9:e5:43:6f:a1:6f:ef:21:e6:7b:05:c7:
                    60:41:80:f0:13:e7:b4:db:23:4f:64:fb:41:34:87:
                    d8:14:31:0f:ba:69:87:bc:69:64:12:d9:ab:fc:b2:
                    bc:5e:0d:2d:b4:29:1c:39:33:66:36:50:e3:29:c3:
                    53:66:cc:01:c4:57:c3:43:70:c6:6e:ab:df:d2:d2:
                    81:93:67:07:41:75:c5:9d:69:5c:9f:1f:47:0a:b9:
                    ca:3c:da:77:5a:5b:02:5a:5f:33:0b:c7:51:96:fb:
                    b1:10:c2:63:a4:15:de:c1:fa:d4:fe:00:d2:75:82:
                    b0:a1:66:c5:90:4e:ad:65:58:1d:7f:66:b0:25:a0:
                    fc:34:a2:bd:07:35:0c:0d:47:86:4e:2b:ba:c6:fa:
                    83:c3:07:cd:d0:4e:0b:54:dd:33:ac:c3:88:d7:28:
                    da:a0:ef:d2:b7:e4:b8:60:19:bf:d6:2a:0b:c2:6c:
                    81:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:92:38:D4:15:92:33:A6:C6:EB:DB:09:6D:00:63:41:B9:20:F8:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f978::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:a1:5c:0c:f0:6d:06:ea:40:72:bb:bf:e8:19:ed:99:86:78:
         3c:5a:85:b9:72:f0:8b:86:79:be:47:e2:b5:0f:18:5f:ae:a0:
         10:dc:9f:ed:f0:8d:0a:b8:f5:f4:a4:5e:cf:0c:2d:2e:54:9d:
         81:f7:70:72:00:a7:bc:ca:d3:a0:12:e5:8d:73:e3:c4:91:39:
         e7:35:35:37:ab:b3:83:02:ad:54:cf:ca:6c:10:ed:ab:36:09:
         6d:e0:97:1a:08:5f:0e:dc:82:44:c5:0d:4f:bf:1e:45:aa:f2:
         1d:76:ad:e6:aa:3a:9a:44:d7:b4:2c:b8:1f:a3:fa:09:cc:28:
         93:9e:59:03:96:f9:a2:41:8b:5f:54:b1:7b:98:ad:0e:e8:fe:
         7a:f6:c1:da:cb:78:08:5f:01:57:c6:71:66:08:08:31:71:d1:
         67:a9:7f:1f:86:c1:e1:00:56:5a:8a:58:25:89:21:43:7f:3c:
         20:d6:4f:fa:41:7c:6b:a9:11:45:86:4c:0e:75:b0:05:49:56:
         25:ab:42:cc:a9:87:ae:25:de:98:07:15:1f:d1:ef:37:c4:6d:
         fc:36:f9:73:6c:88:d6:e5:6d:97:80:f4:6d:6a:6a:a5:30:2d:
         6b:c4:99:20:29:c1:6a:eb:80:07:80:ef:fc:49:59:3b:ff:b2:
         38:79:29:63
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5yBM+kO19QOIWNt8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZmNWNkOGEtZjkwMy00MTc2LTk3YTctNjY3MWU0OWIx
YzliMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk
YjlkMjNjZWUtOTliNC00NDAyLTkzYzctOWNiMjQ3N2U5NDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw1OVOK518WXdcZCgYzrrQez8x2+r/OtNxa9
6Z71T0cKX2F2KxuCfYCmkTxvkwwcMY34iykOzZLciLA2sEH7ghnBzjuVizX2kEan
Iq3p5UNvoW/vIeZ7BcdgQYDwE+e02yNPZPtBNIfYFDEPummHvGlkEtmr/LK8Xg0t
tCkcOTNmNlDjKcNTZswBxFfDQ3DGbqvf0tKBk2cHQXXFnWlcnx9HCrnKPNp3WlsC
Wl8zC8dRlvuxEMJjpBXewfrU/gDSdYKwoWbFkE6tZVgdf2awJaD8NKK9BzUMDUeG
Tiu6xvqDwwfN0E4LVN0zrMOI1yjaoO/St+S4YBm/1ioLwmyBKwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFqSONQVkjOmxuvbCW0AY0G5IPiEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmY1
Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5YjFjOWIvY2NmNzBmY2MtNDBjZC0z
NTRiLTk1ZDAtNWZmODBmOWU1ZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZmNWNkOGEtZjkwMy00MTc2LTk3
YTctNjY3MWU0OWIxYzliLzg2ZjVjZDhhLWY5MDMtNDE3Ni05N2E3LTY2NzFlNDli
MWM5Yi5jcmwwHwYDVR0jBBgwFoAUajTL2XXyS8rb791JQFJ7g8nK5UEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02Njcx
ZTQ5YjFjOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5eAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAw6FcDPBtBupAcru/6BntmYZ4PFqFuXLwi4Z5vkfitQ8YX66gENyf
7fCNCrj19KRezwwtLlSdgfdwcgCnvMrToBLljXPjxJE55zU1N6uzgwKtVM/KbBDt
qzYJbeCXGghfDtyCRMUNT78eRaryHXat5qo6mkTXtCy4H6P6Ccwok55ZA5b5okGL
X1Sxe5itDuj+evbB2st4CF8BV8ZxZggIMXHRZ6l/H4bB4QBWWopYJYkhQ388INZP
+kF8a6kRRYZMDnWwBUlWJatCzKmHriXemAcVH9HvN8Rt/Db5c2yI1uVtl4D0bWpq
pTAta8SZICnBauuAB4Dv/ElZO/+yOHkpYw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:21:14 2026 by rpki-client