Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ddc5dbf4-251c-3f67-9631-8581671ccc89.roa
File:                     ddc5dbf4-251c-3f67-9631-8581671ccc89.roa (raw, json)
Hash identifier:          5gWe2eVsC59s/+UK5sZZitw+JgybOxWa82bCXOdsC0U=
Subject key identifier:   CC:34:71:D9:C7:AC:4A:2A:3A:84:34:7B:97:16:08:31:7F:50:B3:44
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F119CFE75BE1B3C816917C200
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ddc5dbf4-251c-3f67-9631-8581671ccc89.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        2603:c000:700::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:fe:75:be:1b:3c:81:69:17:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=729f2834-53a6-4e38-b5af-7df08103fd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:41:77:f1:66:b8:df:6a:32:33:57:27:5a:
                    d3:0b:4a:7a:cb:12:35:0c:bc:c9:a0:f6:03:c2:3c:
                    12:1b:b2:73:a1:54:df:2d:5f:0b:34:ac:8b:fd:9e:
                    f1:2c:8d:95:7f:dd:ed:e8:63:a2:8e:78:a6:f1:b6:
                    d3:f9:60:48:33:d0:18:ae:b8:1c:e1:bd:e2:0a:30:
                    ea:78:21:67:53:75:7d:69:bb:a3:b3:09:99:fc:38:
                    32:80:86:2d:a3:30:34:da:a2:15:78:b9:19:d7:18:
                    36:d0:82:12:5b:71:30:16:a7:b7:fe:da:c1:a8:fb:
                    41:78:93:57:3c:01:c0:94:d1:8f:06:75:e6:76:37:
                    e6:c4:de:e9:42:a2:91:76:a1:03:cc:a3:0a:5d:7d:
                    48:1c:8f:ef:76:11:7e:c5:9d:65:27:14:43:c8:23:
                    a6:5d:33:26:90:15:f0:9d:2b:c8:d2:74:c8:47:06:
                    57:1c:02:26:69:f2:88:6a:a9:e0:52:b3:14:3d:6f:
                    95:9f:81:20:bf:37:6e:17:3f:13:76:1e:3b:43:84:
                    0d:55:03:6e:55:eb:da:dd:72:d7:d0:b6:0c:84:ff:
                    54:18:ad:16:8d:7b:16:77:e8:68:79:87:36:46:28:
                    54:23:f0:05:8b:be:ee:12:ae:57:16:17:ca:f6:9e:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:34:71:D9:C7:AC:4A:2A:3A:84:34:7B:97:16:08:31:7F:50:B3:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ddc5dbf4-251c-3f67-9631-8581671ccc89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:58:73:36:45:90:98:bf:db:d8:eb:89:e0:1d:0e:e5:10:2d:
         24:dd:37:c0:2e:39:09:ea:a8:79:84:6b:ac:4a:d1:e4:4b:20:
         88:ae:15:fa:55:53:58:74:ff:30:a6:77:7d:68:5b:51:c4:18:
         f0:3a:37:6b:2b:d0:9b:b3:6c:6f:19:8c:12:b5:c0:98:40:bb:
         73:63:3a:d8:40:f4:b7:16:51:98:44:92:8f:a3:4b:0e:29:de:
         ca:c4:ff:60:f5:98:ab:8b:f0:ab:44:8f:75:41:81:fa:a7:a9:
         9d:79:ce:3d:f8:73:b9:ae:4f:8e:b8:b4:9a:cb:e0:63:39:22:
         74:e4:67:6b:c7:ef:3d:a3:4d:c0:8a:16:9e:f1:89:b2:ca:c6:
         8a:4e:de:51:42:fe:db:50:46:8a:ee:f3:ce:c8:4f:89:ff:2c:
         68:e8:fb:bd:37:95:f3:78:7e:61:1e:0d:8c:bc:b0:79:24:dc:
         55:2e:eb:d6:cc:02:09:32:a1:79:5f:d5:80:89:17:36:13:e4:
         b9:a4:86:9d:af:01:21:0e:07:fc:b3:9d:9d:7d:19:79:bf:bc:
         a3:74:02:db:a3:d5:0f:22:59:c9:85:a9:35:16:08:1f:db:2b:
         44:8c:3b:16:9f:1b:1c:ab:04:74:a5:f5:2d:e6:c7:7d:2b:48:
         c3:14:da:8e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8RnP51vhs8gWkXwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzI5ZjI4MzQtNTNhNi00ZTM4LWI1YWYtN2RmMDgxMDNmZDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVxBd/FmuN9qMjNXJ1rTC0p6yxI1DLzJoPYD
wjwSG7JzoVTfLV8LNKyL/Z7xLI2Vf93t6GOijnim8bbT+WBIM9AYrrgc4b3iCjDq
eCFnU3V9abujswmZ/DgygIYtozA02qIVeLkZ1xg20IISW3EwFqe3/trBqPtBeJNX
PAHAlNGPBnXmdjfmxN7pQqKRdqEDzKMKXX1IHI/vdhF+xZ1lJxRDyCOmXTMmkBXw
nSvI0nTIRwZXHAImafKIaqngUrMUPW+Vn4EgvzduFz8Tdh47Q4QNVQNuVeva3XLX
0LYMhP9UGK0WjXsWd+hoeYc2RihUI/AFi77uEq5XFhfK9p7A2wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMw0cdnHrEoqOoQ0e5cWCDF/ULNEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGRjNWRiZjQtMjUxYy0z
ZjY3LTk2MzEtODU4MTY3MWNjYzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAAcw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANFhzNkWQmL/b2OuJ4B0O5RAtJN03wC45CeqoeYRrrErR5EsgiK4V
+lVTWHT/MKZ3fWhbUcQY8Do3ayvQm7NsbxmMErXAmEC7c2M62ED0txZRmESSj6NL
DineysT/YPWYq4vwq0SPdUGB+qepnXnOPfhzua5Pjri0msvgYzkidORna8fvPaNN
wIoWnvGJssrGik7eUUL+21BGiu7zzshPif8saOj7vTeV83h+YR4NjLyweSTcVS7r
1swCCTKheV/VgIkXNhPkuaSGna8BIQ4H/LOdnX0Zeb+8o3QC26PVDyJZyYWpNRYI
H9srRIw7Fp8bHKsEdKX1LebHfStIwxTajg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:55:53 2026 by rpki-client