Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/91eb72de-a055-3c5a-8b92-71cfa5fdd45d.roa
File:                     91eb72de-a055-3c5a-8b92-71cfa5fdd45d.roa (raw, json)
Hash identifier:          /uSRlwhenmA6XCnzJ7f1fW1RQd81GKy85SOownujnqE=
Subject key identifier:   4E:CA:36:B5:76:E2:7D:96:C3:90:2D:FF:1D:DD:00:30:A6:10:57:9D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8AC554C403E155E746473FC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/91eb72de-a055-3c5a-8b92-71cfa5fdd45d.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        2603:c026:c000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:54:c4:03:e1:55:e7:46:47:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=dd0634bc-0c70-4906-8a8e-97ea400fd7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:6d:37:b4:34:ed:0e:60:11:dd:a0:4b:46:
                    b4:1b:2b:c2:5f:a3:d6:82:0c:f8:97:cb:7b:56:82:
                    3b:dd:70:6c:55:65:ea:13:ea:95:f7:c7:e7:6e:c5:
                    7e:20:89:27:9a:6d:30:89:79:eb:1b:2a:c7:1c:e1:
                    72:1f:21:a3:87:f2:70:f8:ca:66:9d:bb:f8:3e:7b:
                    67:8b:41:bc:38:14:ab:78:14:50:65:cd:2b:75:21:
                    03:b8:f0:2e:3b:47:fd:6b:ec:6e:74:f1:c1:69:c5:
                    2d:69:ba:c8:5f:7a:d1:af:68:58:95:b6:69:2b:89:
                    55:a6:71:b9:39:a4:b2:d7:c7:29:bb:75:c7:f1:89:
                    a0:89:fa:e0:9d:ca:ac:66:50:1b:1f:7e:a2:88:32:
                    08:a0:12:62:8d:e2:3b:22:17:e7:8b:ec:7d:6b:d4:
                    33:c5:8f:89:6e:5d:9c:9a:c0:ed:da:43:2b:cd:65:
                    57:d7:9e:4d:23:bb:ed:81:e1:67:91:66:8f:d5:4a:
                    cf:f9:50:46:53:c1:fd:05:8a:ca:25:61:74:04:04:
                    c6:bf:40:42:5a:dc:38:89:3b:d2:c4:6e:e1:41:cc:
                    75:21:ce:1f:49:4e:1f:b4:e6:e5:ca:e6:9c:ec:2d:
                    37:f8:43:e7:a8:7d:d8:53:30:e5:7d:67:0c:90:95:
                    b6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CA:36:B5:76:E2:7D:96:C3:90:2D:FF:1D:DD:00:30:A6:10:57:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/91eb72de-a055-3c5a-8b92-71cfa5fdd45d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c026:c000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:8a:fc:c1:01:09:c2:b3:2c:67:24:76:05:41:96:36:2e:88:
         cb:73:50:42:a7:a9:2d:72:13:38:a7:17:09:1a:b3:1e:35:25:
         f3:d1:96:02:ae:0e:58:ce:57:9f:90:69:0e:5a:7b:3a:6f:4c:
         7c:15:f6:f6:0d:31:69:57:97:b6:4e:7f:9a:e4:08:3f:35:ad:
         e0:52:53:b9:8f:7a:b3:96:d0:ac:1a:53:82:fd:ec:37:5f:3e:
         96:82:fb:01:11:bf:92:bb:d1:da:a2:2a:fd:7c:94:d3:22:fb:
         21:e7:2b:c1:94:43:20:96:46:62:06:0b:42:bf:14:78:4f:2b:
         cd:b9:64:c9:f2:87:2b:ab:d1:f6:6d:45:fd:0a:66:75:c4:4b:
         cb:2f:e7:5f:3f:3c:4d:b9:89:9b:a2:d3:b2:f8:38:d3:c9:25:
         a1:ee:94:87:bc:a7:f9:c7:84:ed:79:d0:90:37:f2:af:38:3b:
         a3:5b:fb:df:5e:71:35:ad:de:3d:d0:0d:90:e8:a3:8d:79:1e:
         76:d1:5a:80:7c:d2:b6:13:20:ba:f8:c9:3c:9a:29:88:b1:c8:
         e0:3a:21:d9:e8:5a:47:e4:c6:57:97:c5:85:09:e9:43:1b:cf:
         9d:b3:2d:0d:bc:41:20:cf:4d:de:7b:bd:65:ab:17:9c:f1:ae:
         b7:49:b2:ea
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2KxVTEA+FV50ZHP8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk
ZGQwNjM0YmMtMGM3MC00OTA2LThhOGUtOTdlYTQwMGZkN2I5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPRtN7Q07Q5gEd2gS0a0GyvCX6PWggz4l8t7
VoI73XBsVWXqE+qV98fnbsV+IIknmm0wiXnrGyrHHOFyHyGjh/Jw+Mpmnbv4Pntn
i0G8OBSreBRQZc0rdSEDuPAuO0f9a+xudPHBacUtabrIX3rRr2hYlbZpK4lVpnG5
OaSy18cpu3XH8YmgifrgncqsZlAbH36iiDIIoBJijeI7Ihfni+x9a9QzxY+Jbl2c
msDt2kMrzWVX155NI7vtgeFnkWaP1UrP+VBGU8H9BYrKJWF0BATGv0BCWtw4iTvS
xG7hQcx1Ic4fSU4ftOblyuac7C03+EPnqH3YUzDlfWcMkJW2pQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE7KNrV24n2Ww5At/x3dADCmEFedMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTFlYjcyZGUtYTA1NS0z
YzVhLThiOTItNzFjZmE1ZmRkNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAJsAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAqYr8wQEJwrMsZyR2BUGWNi6Iy3NQQqepLXITOKcXCRqzHjUl89GW
Aq4OWM5Xn5BpDlp7Om9MfBX29g0xaVeXtk5/muQIPzWt4FJTuY96s5bQrBpTgv3s
N18+loL7ARG/krvR2qIq/XyU0yL7IecrwZRDIJZGYgYLQr8UeE8rzblkyfKHK6vR
9m1F/QpmdcRLyy/nXz88TbmJm6LTsvg408kloe6Uh7yn+ceE7XnQkDfyrzg7o1v7
315xNa3ePdANkOijjXkedtFagHzSthMguvjJPJopiLHI4Doh2ehaR+TGV5fFhQnp
QxvPnbMtDbxBIM9N3nu9ZasXnPGut0my6g==
-----END CERTIFICATE-----
Generated at Wed May 13 06:29:10 2026 by rpki-client