Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b71957dd-4e7a-370b-b434-dc175ee2d8a4.roa
File:                     b71957dd-4e7a-370b-b434-dc175ee2d8a4.roa (raw, json)
Hash identifier:          jWUv1sKOI/2ydJQ/ryIPkL8VCra5897glQOsCUxCPLg=
Subject key identifier:   7B:45:64:EF:9F:58:CC:62:0D:61:47:B9:CA:C8:C3:FB:52:38:A5:08
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F480D66225B9D1BCD92EF2B80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b71957dd-4e7a-370b-b434-dc175ee2d8a4.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c001:7400::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:66:22:5b:9d:1b:cd:92:ef:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=a159c570-ba1a-445f-8a79-3c2552dd81aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:91:a6:a3:ae:ff:17:2b:78:27:b5:73:38:f3:
                    41:8f:28:ec:2c:ad:c2:7a:ba:e9:b6:0c:5d:d4:8c:
                    fe:1e:85:27:3b:8c:40:ab:2d:0a:fc:2a:16:b7:25:
                    ee:17:83:1e:3d:ae:a8:f2:3e:0f:18:82:f3:6e:85:
                    90:8e:09:5a:0b:00:5b:62:5a:c3:cb:d2:5d:59:11:
                    80:fb:d4:52:d9:85:9d:16:fd:bf:d5:53:3f:f4:95:
                    cb:11:59:c5:61:b0:88:b0:de:c1:0d:96:34:86:c5:
                    37:c5:34:5e:41:ba:a7:1f:38:dd:0f:54:85:26:f0:
                    97:3f:f6:06:d7:08:ea:98:e1:00:e7:ad:bd:0c:c9:
                    17:8a:53:37:f7:3e:63:32:8a:ba:15:00:57:0d:97:
                    b9:b6:99:4f:bd:7a:2a:ae:d0:34:27:16:fb:5c:b8:
                    a4:7b:79:34:46:55:39:f1:bc:55:c3:55:2c:78:c1:
                    33:85:22:25:9b:44:03:26:7d:f3:81:75:4a:7f:71:
                    2b:c3:61:37:ac:54:33:d7:39:7f:6a:6b:b0:60:17:
                    cf:8d:6d:bf:5e:5a:f7:98:6f:9e:7a:44:ee:08:7c:
                    99:52:1f:62:92:20:6c:1d:15:ff:8b:6e:75:22:83:
                    76:11:20:4f:cc:0b:c8:cf:95:42:0a:be:3f:80:a2:
                    ea:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:45:64:EF:9F:58:CC:62:0D:61:47:B9:CA:C8:C3:FB:52:38:A5:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b71957dd-4e7a-370b-b434-dc175ee2d8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:7400::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:de:c7:6f:7f:83:39:32:87:aa:ff:f5:be:2e:8d:68:35:32:
         62:b6:ae:25:fb:27:03:a0:ba:a9:b9:f6:79:aa:4d:d3:aa:1e:
         64:4c:7b:29:4e:ef:b9:e6:94:5f:bd:6f:d3:84:c8:31:59:76:
         5a:88:43:25:69:36:02:88:cf:93:25:68:5a:4f:29:03:52:23:
         7c:29:6e:34:ee:df:59:40:b4:26:62:b2:5d:76:6a:a7:f8:a6:
         f6:d0:13:d1:dc:27:6a:54:f8:64:be:a5:d6:93:88:8c:4d:05:
         5e:9f:a2:23:ea:4a:37:45:ba:09:60:7e:78:5d:bd:66:17:55:
         e6:34:14:60:b8:9f:2a:1d:f9:62:e9:09:6f:f9:bb:14:73:cd:
         ff:5c:0a:9a:87:7e:d5:b2:49:a2:79:39:13:e3:23:1a:9d:5e:
         2c:ff:57:81:8b:45:dd:82:65:55:16:5f:18:32:0c:0e:05:20:
         5e:7d:ac:08:4c:30:ef:25:c0:97:05:71:60:dc:8b:60:a4:d4:
         a6:80:77:17:b6:07:d0:bc:be:e5:0c:48:06:c6:83:4b:9c:56:
         1e:0c:77:f4:5e:ac:13:80:ad:e5:e0:56:72:fa:bc:a4:9b:aa:
         87:75:34:47:6c:69:73:2a:94:d6:0f:2c:ee:b9:d3:3c:98:37:
         4c:2d:de:de
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9IDWYiW50bzZLvK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk
YTE1OWM1NzAtYmExYS00NDVmLThhNzktM2MyNTUyZGQ4MWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZGmo67/Fyt4J7VzOPNBjyjsLK3Cerrptgxd
1Iz+HoUnO4xAqy0K/CoWtyXuF4MePa6o8j4PGILzboWQjglaCwBbYlrDy9JdWRGA
+9RS2YWdFv2/1VM/9JXLEVnFYbCIsN7BDZY0hsU3xTReQbqnHzjdD1SFJvCXP/YG
1wjqmOEA5629DMkXilM39z5jMoq6FQBXDZe5tplPvXoqrtA0Jxb7XLike3k0RlU5
8bxVw1UseMEzhSIlm0QDJn3zgXVKf3Erw2E3rFQz1zl/amuwYBfPjW2/Xlr3mG+e
ekTuCHyZUh9ikiBsHRX/i251IoN2ESBPzAvIz5VCCr4/gKLqewIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHtFZO+fWMxiDWFHucrIw/tSOKUIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjcxOTU3ZGQtNGU3YS0z
NzBiLWI0MzQtZGMxNzVlZTJkOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAAXQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAg97Hb3+DOTKHqv/1vi6NaDUyYrauJfsnA6C6qbn2eapN06oeZEx7
KU7vueaUX71v04TIMVl2WohDJWk2AojPkyVoWk8pA1IjfCluNO7fWUC0JmKyXXZq
p/im9tAT0dwnalT4ZL6l1pOIjE0FXp+iI+pKN0W6CWB+eF29ZhdV5jQUYLifKh35
YukJb/m7FHPN/1wKmod+1bJJonk5E+MjGp1eLP9XgYtF3YJlVRZfGDIMDgUgXn2s
CEww7yXAlwVxYNyLYKTUpoB3F7YH0Ly+5QxIBsaDS5xWHgx39F6sE4Ct5eBWcvq8
pJuqh3U0R2xpcyqU1g8s7rnTPJg3TC3e3g==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:54:36 2026 by rpki-client