Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c48d79d-4720-38b0-b252-9c4907ec56c8.roa
File:                     2c48d79d-4720-38b0-b252-9c4907ec56c8.roa (raw, json)
Hash identifier:          MJwYQaqhip7TzoZeVy7w1uI0RPlyJ5li+ZbAfCjrIns=
Subject key identifier:   8F:4A:A9:ED:3A:CE:3A:0D:B2:22:2B:54:D1:BE:94:E1:2C:9E:C5:F8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D9A2011AB29AC997B0B7A81D0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c48d79d-4720-38b0-b252-9c4907ec56c8.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     31898
IP address blocks:        2603:c002:9400::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:11:ab:29:ac:99:7b:0b:7a:81:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=d4c24846-ad55-41d6-a28f-64c6234d0586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:f4:8a:50:83:3d:cb:cf:14:57:c3:78:51:
                    6d:c8:0e:45:74:f2:6d:07:9a:05:4e:74:94:b4:d2:
                    7a:35:16:3b:46:97:c0:4b:33:39:0d:d7:c4:e9:61:
                    25:33:05:fe:b2:47:63:c5:99:0c:92:36:6d:20:47:
                    bd:b0:ea:3b:5f:18:37:9d:0e:3e:8c:45:2b:8c:fd:
                    57:46:bf:ae:79:de:c6:2e:7d:1f:7d:c1:a7:10:fb:
                    94:aa:0b:75:45:1a:ed:c8:bd:f8:90:a2:db:3e:b1:
                    a8:84:54:1d:58:5d:ce:45:92:c4:55:bd:6f:76:be:
                    3c:15:22:8d:40:83:5e:f3:ba:53:b6:4f:19:85:bf:
                    d0:94:32:4c:87:d9:2b:3d:30:c4:57:a8:90:0f:f7:
                    64:64:bb:c6:82:f7:91:58:ec:cf:7b:a9:12:5f:e5:
                    fc:b9:8a:01:ee:bc:40:9d:a6:49:b7:a5:42:f0:88:
                    a8:2d:43:bb:88:04:db:a1:93:bc:92:b9:6d:94:d4:
                    0c:1d:0d:4a:86:18:28:4e:90:64:90:8b:8d:ee:3a:
                    d9:94:8d:84:6f:85:d1:a3:5e:13:71:ec:c6:6b:de:
                    2d:0a:2e:d3:41:1e:40:6a:92:b9:3c:07:e5:ae:65:
                    e1:d4:59:d5:c6:39:d8:d0:60:64:dd:f9:b5:82:31:
                    a3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4A:A9:ED:3A:CE:3A:0D:B2:22:2B:54:D1:BE:94:E1:2C:9E:C5:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c48d79d-4720-38b0-b252-9c4907ec56c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:9400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f5:67:b8:cc:be:51:5e:02:7f:cf:04:f5:74:88:2a:57:8f:
         ad:d9:2a:f3:63:b1:17:70:7f:1b:cd:0e:22:33:e7:4f:f1:14:
         36:18:7f:9b:dc:d9:2c:14:c2:16:31:d7:df:08:4f:c9:32:00:
         fa:40:49:4a:fd:58:03:ac:41:f3:1b:bd:0f:a6:cd:64:cb:6f:
         60:4e:9e:0f:9f:43:5f:c4:92:8a:2f:b8:34:83:dc:2e:af:47:
         5c:8b:4c:54:64:b7:34:ee:ae:e6:2b:2a:f7:ec:73:5b:12:f6:
         ab:94:12:b1:ee:b8:2f:a4:f8:cc:cf:92:28:44:c6:29:70:ce:
         b6:fa:b9:c7:a4:8c:9e:97:26:54:1e:64:c2:c6:9a:45:af:04:
         55:4d:0b:7e:41:1d:5d:43:f5:f6:b1:53:8a:4c:b8:43:98:32:
         48:19:53:05:b0:66:ec:34:7a:34:30:a2:50:ea:f5:53:af:10:
         63:ca:df:75:d5:00:de:1c:4f:12:f0:6f:bd:99:70:07:b8:c5:
         2f:e1:2a:6b:ec:73:45:a5:42:62:00:43:fb:be:fa:9c:51:aa:
         b7:ee:ee:17:2e:b3:4c:d7:ec:aa:4c:95:91:2c:5c:13:7e:6f:
         1c:8c:ea:bf:39:65:d0:b6:d4:74:16:ee:a5:82:d5:95:bd:66:
         a6:19:4c:6a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2aIBGrKayZewt6gdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
ZDRjMjQ4NDYtYWQ1NS00MWQ2LWEyOGYtNjRjNjIzNGQwNTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8v0ilCDPcvPFFfDeFFtyA5FdPJtB5oFTnSU
tNJ6NRY7RpfASzM5DdfE6WElMwX+skdjxZkMkjZtIEe9sOo7Xxg3nQ4+jEUrjP1X
Rr+ued7GLn0ffcGnEPuUqgt1RRrtyL34kKLbPrGohFQdWF3ORZLEVb1vdr48FSKN
QINe87pTtk8Zhb/QlDJMh9krPTDEV6iQD/dkZLvGgveRWOzPe6kSX+X8uYoB7rxA
naZJt6VC8IioLUO7iATboZO8krltlNQMHQ1KhhgoTpBkkIuN7jrZlI2Eb4XRo14T
cezGa94tCi7TQR5AapK5PAflrmXh1FnVxjnY0GBk3fm1gjGjCwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFI9Kqe06zjoNsiIrVNG+lOEsnsX4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmM0OGQ3OWQtNDcyMC0z
OGIwLWIyNTItOWM0OTA3ZWM1NmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAApQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAc/VnuMy+UV4Cf88E9XSIKlePrdkq82OxF3B/G80OIjPnT/EUNhh/
m9zZLBTCFjHX3whPyTIA+kBJSv1YA6xB8xu9D6bNZMtvYE6eD59DX8SSii+4NIPc
Lq9HXItMVGS3NO6u5isq9+xzWxL2q5QSse64L6T4zM+SKETGKXDOtvq5x6SMnpcm
VB5kwsaaRa8EVU0LfkEdXUP19rFTiky4Q5gySBlTBbBm7DR6NDCiUOr1U68QY8rf
ddUA3hxPEvBvvZlwB7jFL+Eqa+xzRaVCYgBD+776nFGqt+7uFy6zTNfsqkyVkSxc
E35vHIzqvzll0LbUdBbupYLVlb1mphlMag==
-----END CERTIFICATE-----
Generated at Wed May 13 06:46:23 2026 by rpki-client