Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ac14f940-198a-383d-af12-3575e742fba8.roa
File:                     ac14f940-198a-383d-af12-3575e742fba8.roa (raw, json)
Hash identifier:          5RfZFGvv4nqr0VYKimvorj49kl8yQCIjVpQmQ8Z5Du4=
Subject key identifier:   C8:44:CD:4E:72:F4:A8:A6:E9:DB:1A:20:46:D2:D7:F8:DE:79:1F:99
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F024217DF566A8B5FC10045C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ac14f940-198a-383d-af12-3575e742fba8.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     31898
IP address blocks:        2603:c001:1e00::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:17:df:56:6a:8b:5f:c1:00:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=dbf73f71-6185-4ec9-9a45-70b9724c79c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ab:6b:e2:cb:dd:d7:aa:87:54:dc:70:b8:98:
                    91:0d:e7:19:cd:e1:80:fc:55:50:48:66:74:46:61:
                    2e:73:88:fa:58:08:26:16:a4:62:dd:34:74:72:53:
                    b8:60:fa:54:c4:49:9b:c1:35:2e:8f:c1:9d:34:e1:
                    6b:ec:80:01:e5:de:2b:ca:b1:c0:0d:e8:2f:5b:65:
                    0a:f4:ed:17:19:49:ea:a4:37:a9:26:0f:cf:47:4c:
                    a4:55:4d:83:e5:3c:b5:88:f2:36:97:5a:ad:d1:1c:
                    56:27:b7:90:ed:73:76:73:28:07:f8:db:89:df:d8:
                    c7:91:8a:0d:2a:87:95:a1:65:ac:bb:1b:42:07:96:
                    0c:59:8f:fd:d9:29:ae:ae:9c:df:37:9c:1d:51:9e:
                    cb:31:74:c3:f1:35:40:62:25:55:c3:e7:f5:74:48:
                    2b:d8:09:b3:49:0f:b2:4a:f0:89:b5:bd:c8:05:7b:
                    26:70:c4:07:97:d3:63:5a:43:19:34:bd:0b:b9:a2:
                    d1:6c:0a:fd:73:47:38:1a:ce:30:7a:72:c1:e8:93:
                    45:a5:f8:88:bc:f1:ba:4d:ba:d6:42:c6:8b:89:25:
                    6e:86:ea:24:63:96:e3:4a:7e:27:47:9a:3d:c7:88:
                    68:86:19:17:4e:b8:82:a1:9b:8d:79:aa:62:7c:e9:
                    ee:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:44:CD:4E:72:F4:A8:A6:E9:DB:1A:20:46:D2:D7:F8:DE:79:1F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ac14f940-198a-383d-af12-3575e742fba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:1e00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f4:ee:c7:51:f5:f2:28:94:75:c1:83:fc:5a:1e:78:06:89:
         c0:9e:e5:94:fd:0d:97:a9:40:30:cc:7e:33:3a:0f:7f:4b:0b:
         1f:18:ff:d9:42:a6:74:b0:03:33:3c:7a:4c:31:29:11:68:34:
         45:25:7e:5f:ed:9f:dd:9c:88:f3:07:d7:4c:54:56:16:9b:f4:
         eb:cc:5a:d4:a9:a8:f6:08:72:72:20:76:18:13:5e:a0:06:f3:
         5e:41:a9:dd:6b:78:63:fe:db:28:74:23:e3:be:33:09:d3:be:
         da:db:15:21:7c:7d:2f:d5:1b:24:fd:b6:7a:c4:1f:cd:83:c3:
         36:c9:2c:9c:68:e2:8c:b0:fd:b5:0b:5b:ee:3f:5f:96:a9:b6:
         0f:ef:cf:a9:d2:fb:d7:d1:4d:ef:45:ee:ec:1c:3f:3d:12:6f:
         df:29:15:ef:00:a8:d4:7c:51:97:fb:e0:3f:bb:9a:63:1c:2c:
         68:c8:72:35:50:87:50:7b:65:33:13:ad:1a:0b:c6:54:21:11:
         03:fd:95:c2:6b:d9:51:5e:dc:a6:f8:2f:79:bf:6b:68:07:3e:
         62:d7:1a:91:34:58:65:01:13:2b:cf:50:ea:d6:d5:b2:96:5c:
         f2:91:a7:ca:13:f5:e2:60:6f:94:72:a6:da:4f:e7:2b:e0:c0:
         2a:ab:a0:be
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8CQhffVmqLX8EARcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk
ZGJmNzNmNzEtNjE4NS00ZWM5LTlhNDUtNzBiOTcyNGM3OWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjatr4svd16qHVNxwuJiRDecZzeGA/FVQSGZ0
RmEuc4j6WAgmFqRi3TR0clO4YPpUxEmbwTUuj8GdNOFr7IAB5d4ryrHADegvW2UK
9O0XGUnqpDepJg/PR0ykVU2D5Ty1iPI2l1qt0RxWJ7eQ7XN2cygH+NuJ39jHkYoN
KoeVoWWsuxtCB5YMWY/92SmurpzfN5wdUZ7LMXTD8TVAYiVVw+f1dEgr2AmzSQ+y
SvCJtb3IBXsmcMQHl9NjWkMZNL0LuaLRbAr9c0c4Gs4wenLB6JNFpfiIvPG6TbrW
QsaLiSVuhuokY5bjSn4nR5o9x4hohhkXTriCoZuNeapifOnuRwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMhEzU5y9Kim6dsaIEbS1/jeeR+ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWMxNGY5NDAtMTk4YS0z
ODNkLWFmMTItMzU3NWU3NDJmYmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAAR4w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAnPTux1H18iiUdcGD/FoeeAaJwJ7llP0Nl6lAMMx+MzoPf0sLHxj/
2UKmdLADMzx6TDEpEWg0RSV+X+2f3ZyI8wfXTFRWFpv068xa1Kmo9ghyciB2GBNe
oAbzXkGp3Wt4Y/7bKHQj474zCdO+2tsVIXx9L9UbJP22esQfzYPDNsksnGjijLD9
tQtb7j9flqm2D+/PqdL719FN70Xu7Bw/PRJv3ykV7wCo1HxRl/vgP7uaYxwsaMhy
NVCHUHtlMxOtGgvGVCERA/2VwmvZUV7cpvgveb9raAc+YtcakTRYZQETK89Q6tbV
spZc8pGnyhP14mBvlHKm2k/nK+DAKqugvg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:06:11 2026 by rpki-client