Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85fe43bd-3875-3b11-9d19-0ae045fb7c44.roa
File:                     85fe43bd-3875-3b11-9d19-0ae045fb7c44.roa (raw, json)
Hash identifier:          1SNTSUp3DCMypnB3GTjGmXTMFpVn0D1wItPMFIqklzQ=
Subject key identifier:   58:B6:1A:C3:1C:FB:E3:76:7F:1E:C5:F2:02:51:5F:16:39:D6:63:1C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D30D19338F672E1FCEA287EF0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85fe43bd-3875-3b11-9d19-0ae045fb7c44.roa
Signing time:             Mon 16 Mar 2026 19:42:39 +0000
ROA not before:           Mon 16 Mar 2026 19:42:39 +0000
ROA not after:            Sun 14 Jun 2026 19:42:39 +0000
asID:                     54253
IP address blocks:        2603:c0b8:1200::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:d1:93:38:f6:72:e1:fc:ea:28:7e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Mar 16 19:42:39 2026 GMT
            Not After : Jun 14 19:42:39 2026 GMT
        Subject: CN=8e67b68b-beb5-4b8e-81b2-513ff5fd4a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:31:6b:76:71:6b:7f:07:d6:2b:7c:37:07:
                    9f:2c:ed:bf:0c:7b:b3:17:45:14:52:6a:64:7a:14:
                    33:c5:9c:75:18:87:18:e4:f8:d7:c2:7e:06:31:e1:
                    fc:ff:d2:b0:45:3e:cb:83:de:15:17:43:10:b9:50:
                    92:39:9c:03:1a:30:1f:c1:c2:a8:9a:b5:ea:c5:01:
                    36:a7:b7:6f:19:93:16:47:2c:56:0b:b3:1a:92:c9:
                    a1:46:12:64:cf:c6:4d:11:24:29:2f:9d:5b:5a:e7:
                    2c:0d:71:52:8e:cf:00:66:d2:86:4c:e0:44:54:1b:
                    53:5e:0b:ee:53:47:19:ad:df:1a:04:7b:db:f5:ad:
                    de:0a:a3:e6:91:ce:6d:5c:51:65:14:f0:f4:6d:d9:
                    90:ef:6d:c4:ca:50:e7:47:e5:cd:96:26:b4:55:fe:
                    89:3f:18:5c:47:1f:0a:81:61:7f:35:f5:ad:34:e7:
                    48:af:bb:ca:a3:2f:5e:25:17:f1:c0:33:06:e7:da:
                    1b:52:45:eb:6f:1e:34:b9:8e:7a:9a:12:3a:d7:31:
                    48:91:c7:15:b2:db:e6:38:e1:95:12:0c:ba:79:41:
                    bc:f6:bf:5f:dd:9f:d3:4e:4b:4b:e9:78:7e:6d:2d:
                    ef:87:6e:7a:3e:4b:2c:76:3d:c0:13:ab:2d:45:78:
                    e0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B6:1A:C3:1C:FB:E3:76:7F:1E:C5:F2:02:51:5F:16:39:D6:63:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85fe43bd-3875-3b11-9d19-0ae045fb7c44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0b8:1200::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:69:e5:e6:b9:eb:ea:bd:8b:85:0d:06:c2:bf:09:2e:d5:dd:
         85:05:89:e0:23:e8:2d:a0:da:66:2b:fd:35:16:4e:de:e2:ac:
         37:7a:b7:3f:56:a1:1d:fb:d5:e5:c1:3d:05:85:fb:33:5f:1c:
         42:6f:62:d4:69:d5:ad:19:19:ce:15:87:9f:40:cc:f3:9f:71:
         bf:0f:6b:47:25:79:52:ad:b2:e6:b7:48:90:c7:12:90:31:a7:
         79:ec:12:38:90:45:4f:8d:32:f9:ef:90:a7:f4:23:49:68:d0:
         93:0e:8b:6e:f7:98:37:6b:a0:ba:48:48:c1:b7:dd:ee:80:bd:
         fa:4f:6f:e5:e5:83:b5:9a:3a:5a:98:34:27:6c:8f:70:16:60:
         99:13:40:83:ae:5c:97:b9:06:d3:95:e2:d0:a6:1d:81:cf:e8:
         97:38:58:3d:ab:92:6d:f0:4f:cc:c1:c7:99:f8:25:cc:ba:bb:
         2c:f5:aa:fe:da:60:ad:70:75:3c:b5:4b:e7:f0:19:37:f6:6e:
         6f:a1:31:27:36:65:36:ed:ea:d7:5f:11:84:de:29:97:82:b0:
         13:c7:17:b7:db:b9:f6:00:95:dd:00:66:68:e0:13:e7:9e:05:
         cd:cd:ee:45:4f:01:a5:17:83:a1:e5:c2:68:fe:49:40:5f:7c:
         2a:cb:4b:d5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0w0ZM49nLh/OoofvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDMxNjE5NDIzOVoXDTI2MDYxNDE5NDIzOVowLzEtMCsGA1UEAxMk
OGU2N2I2OGItYmViNS00YjhlLTgxYjItNTEzZmY1ZmQ0YTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlscxa3Zxa38H1it8NwefLO2/DHuzF0UUUmpk
ehQzxZx1GIcY5PjXwn4GMeH8/9KwRT7Lg94VF0MQuVCSOZwDGjAfwcKomrXqxQE2
p7dvGZMWRyxWC7MaksmhRhJkz8ZNESQpL51bWucsDXFSjs8AZtKGTOBEVBtTXgvu
U0cZrd8aBHvb9a3eCqPmkc5tXFFlFPD0bdmQ723EylDnR+XNlia0Vf6JPxhcRx8K
gWF/NfWtNOdIr7vKoy9eJRfxwDMG59obUkXrbx40uY56mhI61zFIkccVstvmOOGV
Egy6eUG89r9f3Z/TTktL6Xh+bS3vh256Pkssdj3AE6stRXjg2wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFi2GsMc++N2fx7F8gJRXxY51mMcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODVmZTQzYmQtMzg3NS0z
YjExLTlkMTktMGFlMDQ1ZmI3YzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAuBIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABWnl5rnr6r2LhQ0Gwr8JLtXdhQWJ4CPoLaDaZiv9NRZO3uKsN3q3
P1ahHfvV5cE9BYX7M18cQm9i1GnVrRkZzhWHn0DM859xvw9rRyV5Uq2y5rdIkMcS
kDGneewSOJBFT40y+e+Qp/QjSWjQkw6LbveYN2ugukhIwbfd7oC9+k9v5eWDtZo6
Wpg0J2yPcBZgmRNAg65cl7kG05Xi0KYdgc/olzhYPauSbfBPzMHHmfglzLq7LPWq
/tpgrXB1PLVL5/AZN/Zub6ExJzZlNu3q118RhN4pl4KwE8cXt9u59gCV3QBmaOAT
554Fzc3uRU8BpReDoeXCaP5JQF98KstL1Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:40:50 2026 by rpki-client