Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d199e314-be00-3952-98fc-0afdd5a3b955.roa
File:                     d199e314-be00-3952-98fc-0afdd5a3b955.roa (raw, json)
Hash identifier:          jTcvzvbKMp2fXgRneh19WZjTf5LssaP4XKMErVODnpw=
Subject key identifier:   89:4B:CD:12:81:63:A6:11:29:22:0D:05:9E:D5:D5:91:2F:93:D3:27
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8D8FE4C7844DAF72C46DB800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d199e314-be00-3952-98fc-0afdd5a3b955.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     31898
IP address blocks:        2603:c000:2800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:e4:c7:84:4d:af:72:c4:6d:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=c37da198-c2b1-4a40-a6b6-83b89f58ebaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:96:7e:89:42:65:ab:6e:cb:bb:56:54:4a:
                    b9:22:1a:4d:ba:32:85:ee:3a:cb:13:0a:d9:58:d0:
                    95:aa:2f:ed:fc:4e:bb:d9:06:ce:5c:f0:04:24:49:
                    ee:aa:71:40:43:29:53:52:40:b7:93:4e:14:bc:09:
                    aa:9d:38:08:93:92:1b:68:a8:a0:94:8c:8e:36:7c:
                    e0:09:41:19:b4:2f:b3:25:8d:90:16:89:3d:6d:fa:
                    99:9d:64:87:e2:5f:65:8c:e6:66:5d:1c:91:69:bd:
                    55:bc:21:6d:0a:b6:7d:ab:c0:fc:f6:ec:d1:17:23:
                    ca:e2:90:a0:c4:b8:8b:11:38:56:cf:ea:45:05:91:
                    b0:d1:13:9b:22:e0:42:e8:e1:20:dc:d8:d2:6c:7b:
                    74:9e:f8:21:5b:6d:f1:49:e8:60:89:5a:bf:df:12:
                    28:e5:52:f2:11:29:bb:6c:11:dd:75:73:16:60:43:
                    fe:54:d1:c9:80:a5:cc:49:c1:c7:64:64:20:3a:da:
                    eb:65:f2:b4:4f:9e:f9:2d:cf:76:05:32:10:71:ba:
                    1b:5f:b2:4e:9d:30:90:8b:d0:e0:e2:de:a2:b0:a6:
                    33:b3:38:9b:ed:1a:0f:f4:55:36:86:ba:e3:8f:87:
                    67:c7:aa:13:4a:89:76:6c:52:c1:40:92:2c:0e:5f:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4B:CD:12:81:63:A6:11:29:22:0D:05:9E:D5:D5:91:2F:93:D3:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d199e314-be00-3952-98fc-0afdd5a3b955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:59:55:a3:b1:7d:6b:f0:e7:b3:2d:74:7b:4e:83:1f:90:b0:
         7b:eb:19:ac:12:1d:73:89:7c:4e:d5:a6:4f:cd:fd:04:48:55:
         77:42:9f:63:e4:59:48:cf:77:9e:22:f0:6c:10:1f:22:38:df:
         6f:f3:8d:d9:5f:7d:0c:08:ca:9f:9b:ee:d3:35:6e:98:1f:61:
         20:33:1a:fe:71:de:a2:79:c1:59:40:9e:3c:49:54:64:af:58:
         b5:c2:8d:69:45:be:53:cc:a6:79:57:65:12:fe:5a:a2:db:9b:
         4c:d8:eb:fc:e9:95:6a:f3:cc:02:b3:41:27:17:62:db:ee:f7:
         de:a0:5d:56:ff:0f:d3:c2:16:9f:9d:8a:f4:f5:c4:9f:f6:2f:
         44:eb:56:6b:f2:a2:7e:5f:e5:9a:a1:6d:82:e4:48:9e:a3:c2:
         05:69:04:f9:30:ca:22:cb:05:a5:59:19:eb:f0:fb:24:cf:e6:
         2e:45:60:61:1f:d1:ba:33:43:bc:cb:4f:7f:4f:2a:62:a2:f0:
         76:82:a4:97:f3:6f:49:7a:7e:50:69:29:6f:03:b5:36:61:24:
         76:40:26:c1:90:71:25:f3:00:9a:94:9b:19:3d:09:96:95:d8:
         d2:ea:e5:76:3f:cb:30:f3:11:7e:0c:de:b9:da:d4:27:03:3a:
         92:ea:48:2e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2Nj+THhE2vcsRtuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk
YzM3ZGExOTgtYzJiMS00YTQwLWE2YjYtODNiODlmNThlYmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxduWfolCZatuy7tWVEq5IhpNujKF7jrLEwrZ
WNCVqi/t/E672QbOXPAEJEnuqnFAQylTUkC3k04UvAmqnTgIk5IbaKiglIyONnzg
CUEZtC+zJY2QFok9bfqZnWSH4l9ljOZmXRyRab1VvCFtCrZ9q8D89uzRFyPK4pCg
xLiLEThWz+pFBZGw0RObIuBC6OEg3NjSbHt0nvghW23xSehgiVq/3xIo5VLyESm7
bBHddXMWYEP+VNHJgKXMScHHZGQgOtrrZfK0T575Lc92BTIQcbobX7JOnTCQi9Dg
4t6isKYzszib7RoP9FU2hrrjj4dnx6oTSol2bFLBQJIsDl+RBQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIlLzRKBY6YRKSINBZ7V1ZEvk9MnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDE5OWUzMTQtYmUwMC0z
OTUyLTk4ZmMtMGFmZGQ1YTNiOTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAACgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAn1lVo7F9a/Dnsy10e06DH5Cwe+sZrBIdc4l8TtWmT839BEhVd0Kf
Y+RZSM93niLwbBAfIjjfb/ON2V99DAjKn5vu0zVumB9hIDMa/nHeonnBWUCePElU
ZK9YtcKNaUW+U8ymeVdlEv5aotubTNjr/OmVavPMArNBJxdi2+733qBdVv8P08IW
n52K9PXEn/YvROtWa/Kifl/lmqFtguRInqPCBWkE+TDKIssFpVkZ6/D7JM/mLkVg
YR/RujNDvMtPf08qYqLwdoKkl/NvSXp+UGkpbwO1NmEkdkAmwZBxJfMAmpSbGT0J
lpXY0urldj/LMPMRfgzeudrUJwM6kupILg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:45:10 2026 by rpki-client