Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/807a32a8-b29c-3cd3-8f17-6c07f300b97c.roa
File:                     807a32a8-b29c-3cd3-8f17-6c07f300b97c.roa (raw, json)
Hash identifier:          XJrfpG9c1UaFfMZpijYHxr7UgsxArNAdL3GpDjorQIU=
Subject key identifier:   BB:B2:99:5A:56:38:C5:7A:14:8C:B0:CA:B5:77:35:D5:74:00:62:96
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D30D156BA3D80CD25AB2D7DC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/807a32a8-b29c-3cd3-8f17-6c07f300b97c.roa
Signing time:             Mon 16 Mar 2026 19:42:10 +0000
ROA not before:           Mon 16 Mar 2026 19:42:10 +0000
ROA not after:            Sun 14 Jun 2026 19:42:10 +0000
asID:                     54253
IP address blocks:        2603:c0b8:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:d1:56:ba:3d:80:cd:25:ab:2d:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Mar 16 19:42:10 2026 GMT
            Not After : Jun 14 19:42:10 2026 GMT
        Subject: CN=b1387e13-eb40-4a04-bc81-054d99699afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:34:e4:6e:70:5e:3a:79:6d:f5:31:67:5e:f4:
                    74:6e:1f:ad:dc:19:f3:05:e1:aa:2a:88:e7:83:0e:
                    65:6d:34:ae:f1:15:b1:63:8a:b8:74:d1:64:11:be:
                    40:88:73:a6:c8:15:93:dc:23:a3:b1:05:62:3f:f3:
                    08:9a:f5:ab:e3:b6:35:84:b4:ae:04:19:1d:b2:f8:
                    36:03:42:12:99:6f:60:a0:30:66:96:23:3f:5d:da:
                    ed:b0:7d:f8:e9:c3:be:9b:58:3a:94:31:f7:75:63:
                    18:99:d8:2b:7d:42:42:06:d0:24:aa:02:18:11:bf:
                    17:a3:24:95:bb:c6:a7:86:1f:5d:ea:3d:4f:fa:7a:
                    9d:26:67:55:c0:93:35:aa:82:37:b4:72:60:32:62:
                    2d:b6:d3:59:dc:c1:97:ee:c7:2f:60:26:2a:4d:0d:
                    22:99:68:65:64:a4:83:fe:37:7c:22:2d:70:18:bd:
                    bd:72:4c:71:97:d9:d8:b3:cc:0e:fe:07:68:3a:79:
                    e6:01:18:4b:55:d5:5e:bf:be:44:30:38:f7:07:f8:
                    d1:8e:10:b8:07:ee:f7:9c:f9:8b:64:04:e2:4d:18:
                    ae:42:94:9c:0a:ec:3e:bd:ec:14:26:d7:0c:d0:7d:
                    a5:c5:e1:dc:d1:98:40:e9:97:37:ef:b0:b2:df:6d:
                    67:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B2:99:5A:56:38:C5:7A:14:8C:B0:CA:B5:77:35:D5:74:00:62:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/807a32a8-b29c-3cd3-8f17-6c07f300b97c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0b8:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3d:93:4e:cb:34:0b:83:11:ef:22:93:c0:80:82:69:06:69:
         85:57:7a:55:7e:0a:aa:4f:19:78:07:c4:fb:07:02:43:84:83:
         b4:4e:c1:ab:b6:68:88:bd:5c:77:de:5e:00:92:3d:83:77:b3:
         56:93:77:8f:74:cf:41:93:ae:3a:06:b0:4c:74:dd:50:e8:68:
         ae:2a:4b:d2:c0:fe:c1:b5:ea:85:f9:92:d8:01:16:4a:4c:5e:
         be:be:e6:28:3a:df:2d:93:37:b2:0c:93:82:5b:e1:78:3e:53:
         3c:b6:0c:90:96:9e:0f:8f:04:44:c4:50:0f:ff:d8:d5:e4:21:
         62:8f:47:4d:c9:88:4e:2d:8f:d1:d0:aa:ca:35:01:a7:1d:05:
         b2:16:72:3e:bb:01:bc:59:25:d0:0b:6d:96:62:22:a1:38:f6:
         9c:c2:04:67:32:bf:6b:a6:7d:41:2f:10:01:17:0b:03:5b:e4:
         8a:d2:c9:03:91:c6:db:d6:f9:3d:0e:a4:18:1a:44:f4:07:b0:
         b2:01:29:f7:b5:29:76:26:0f:39:56:19:90:14:63:96:e2:bc:
         0f:6a:8d:59:54:cd:4c:84:16:34:52:3e:a5:06:d2:b0:2e:3d:
         fe:d2:95:ee:c0:94:42:60:9d:a1:9a:26:07:34:b6:91:89:d1:
         15:94:17:13
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0w0Va6PYDNJastfcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDMxNjE5NDIxMFoXDTI2MDYxNDE5NDIxMFowLzEtMCsGA1UEAxMk
YjEzODdlMTMtZWI0MC00YTA0LWJjODEtMDU0ZDk5Njk5YWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTTkbnBeOnlt9TFnXvR0bh+t3BnzBeGqKojn
gw5lbTSu8RWxY4q4dNFkEb5AiHOmyBWT3COjsQViP/MImvWr47Y1hLSuBBkdsvg2
A0ISmW9goDBmliM/XdrtsH346cO+m1g6lDH3dWMYmdgrfUJCBtAkqgIYEb8XoySV
u8anhh9d6j1P+nqdJmdVwJM1qoI3tHJgMmItttNZ3MGX7scvYCYqTQ0imWhlZKSD
/jd8Ii1wGL29ckxxl9nYs8wO/gdoOnnmARhLVdVev75EMDj3B/jRjhC4B+73nPmL
ZATiTRiuQpScCuw+vewUJtcM0H2lxeHc0ZhA6Zc377Cy321nowIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLuymVpWOMV6FIywyrV3NdV0AGKWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODA3YTMyYTgtYjI5Yy0z
Y2QzLThmMTctNmMwN2YzMDBiOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAuAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABz2TTss0C4MR7yKTwICCaQZphVd6VX4Kqk8ZeAfE+wcCQ4SDtE7B
q7ZoiL1cd95eAJI9g3ezVpN3j3TPQZOuOgawTHTdUOhoripL0sD+wbXqhfmS2AEW
Skxevr7mKDrfLZM3sgyTglvheD5TPLYMkJaeD48ERMRQD//Y1eQhYo9HTcmITi2P
0dCqyjUBpx0FshZyPrsBvFkl0AttlmIioTj2nMIEZzK/a6Z9QS8QARcLA1vkitLJ
A5HG29b5PQ6kGBpE9AewsgEp97UpdiYPOVYZkBRjluK8D2qNWVTNTIQWNFI+pQbS
sC49/tKV7sCUQmCdoZomBzS2kYnRFZQXEw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:08:57 2026 by rpki-client