Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f56b1df8-6c8a-3295-b959-1bcc2203ce16.roa
File:                     f56b1df8-6c8a-3295-b959-1bcc2203ce16.roa (raw, json)
Hash identifier:          uVjd2saxoZGf2NTZ3a7v89Yr5BlphBE51xO7Tlvz5MQ=
Subject key identifier:   83:9E:42:13:0F:87:8B:85:ED:4A:26:48:D8:30:F6:20:F0:21:0A:E8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D948AAE40F6B7DD2979F4B4C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f56b1df8-6c8a-3295-b959-1bcc2203ce16.roa
Signing time:             Tue 21 Apr 2026 13:00:31 +0000
ROA not before:           Tue 21 Apr 2026 13:00:31 +0000
ROA not after:            Mon 20 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        2603:c01a:c000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:8a:ae:40:f6:b7:dd:29:79:f4:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 21 13:00:31 2026 GMT
            Not After : Jul 20 13:00:31 2026 GMT
        Subject: CN=aa5c2d02-d9f9-45fc-9b75-4385d696dd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:d4:09:a2:2d:fa:24:2d:5e:40:76:69:ed:
                    a5:3a:7d:14:89:37:4f:ee:22:f4:be:e2:90:d1:e0:
                    5d:61:fb:41:35:56:ba:19:53:0b:1c:3f:d4:c5:13:
                    b2:b6:ec:f9:89:a3:5f:63:a4:8d:3e:98:34:17:e8:
                    13:64:e6:78:04:a2:f9:fb:97:6a:90:f3:56:dc:2d:
                    68:b0:56:b5:14:22:db:13:a9:e2:74:e7:76:43:ec:
                    04:44:d1:83:e6:bd:04:7e:13:3d:9c:31:b9:bd:18:
                    41:a2:d1:c8:88:12:52:12:45:9f:a9:fb:f0:81:ed:
                    bf:dd:6c:0e:d7:36:16:02:fc:74:cd:fb:b3:9a:6a:
                    cb:83:f8:53:02:70:21:d0:50:fe:c0:be:7e:cd:e8:
                    a6:da:54:28:60:38:70:fe:c2:d5:28:58:1b:17:9c:
                    ba:bc:f9:5d:56:14:49:a1:5b:d0:cb:4d:a6:9b:f4:
                    9c:da:b4:03:4e:48:6a:f9:9c:86:16:e6:b2:44:ba:
                    1a:47:cf:30:01:79:1f:b9:cd:02:53:d4:12:f7:cb:
                    20:7a:07:05:0e:aa:7e:bb:37:30:47:d7:71:b0:ae:
                    19:81:9b:54:bc:f1:17:de:bc:c1:3b:90:8c:35:6d:
                    8a:88:f2:82:00:1e:5b:a1:14:8d:21:54:8c:51:10:
                    55:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9E:42:13:0F:87:8B:85:ED:4A:26:48:D8:30:F6:20:F0:21:0A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f56b1df8-6c8a-3295-b959-1bcc2203ce16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c01a:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:07:89:2f:94:12:32:88:03:b9:71:01:46:68:47:90:87:4e:
         86:b7:54:8e:9d:bb:f1:fd:fa:2f:b0:04:d7:65:9c:56:7a:2b:
         3b:2b:fd:00:c7:d2:0b:74:77:7c:d7:c1:68:1f:94:c2:80:7c:
         fc:01:fe:07:fd:4e:97:a5:0e:51:f5:1d:0a:b7:66:da:1b:e9:
         7e:3f:d5:75:6f:95:ca:87:4b:e4:e6:68:f7:f4:a7:f2:c3:db:
         00:c2:c9:25:f5:84:4e:64:7f:44:a4:94:c2:55:12:e7:e7:ad:
         cd:5c:df:13:46:44:b3:d2:6d:c6:0f:10:35:53:06:e8:4f:7c:
         10:3d:f8:c0:d8:31:e3:fc:5b:26:16:7f:f2:e5:bc:74:bc:47:
         ce:f9:18:5b:9f:7c:6f:72:52:fe:c7:ce:4f:3f:6f:f9:95:3a:
         67:0b:71:8c:53:5a:d0:f5:a0:05:47:ed:2e:81:63:1e:53:42:
         30:1a:86:58:7a:b5:09:b7:f8:fe:68:38:ba:21:85:df:98:1f:
         4b:89:e4:44:95:12:45:50:6d:05:ee:52:dc:f6:cf:50:4a:53:
         12:65:5d:71:10:c6:b7:61:0f:40:88:48:a1:a1:55:72:c0:b5:
         f7:ff:cb:aa:ed:ed:45:f0:e8:36:54:98:45:28:b3:83:33:07:
         3b:00:24:b4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2Uiq5A9rfdKXn0tMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQyMTEzMDAzMVoXDTI2MDcyMDEzMDAzMVowLzEtMCsGA1UEAxMk
YWE1YzJkMDItZDlmOS00NWZjLTliNzUtNDM4NWQ2OTZkZDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMnUCaIt+iQtXkB2ae2lOn0UiTdP7iL0vuKQ
0eBdYftBNVa6GVMLHD/UxROytuz5iaNfY6SNPpg0F+gTZOZ4BKL5+5dqkPNW3C1o
sFa1FCLbE6nidOd2Q+wERNGD5r0EfhM9nDG5vRhBotHIiBJSEkWfqfvwge2/3WwO
1zYWAvx0zfuzmmrLg/hTAnAh0FD+wL5+zeim2lQoYDhw/sLVKFgbF5y6vPldVhRJ
oVvQy02mm/Sc2rQDTkhq+ZyGFuayRLoaR88wAXkfuc0CU9QS98sgegcFDqp+uzcw
R9dxsK4ZgZtUvPEX3rzBO5CMNW2KiPKCAB5boRSNIVSMURBVEQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIOeQhMPh4uF7UomSNgw9iDwIQroMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjU2YjFkZjgtNmM4YS0z
Mjk1LWI5NTktMWJjYzIyMDNjZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAGsAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABQeJL5QSMogDuXEBRmhHkIdOhrdUjp278f36L7AE12WcVnorOyv9
AMfSC3R3fNfBaB+UwoB8/AH+B/1Ol6UOUfUdCrdm2hvpfj/VdW+VyodL5OZo9/Sn
8sPbAMLJJfWETmR/RKSUwlUS5+etzVzfE0ZEs9Jtxg8QNVMG6E98ED34wNgx4/xb
JhZ/8uW8dLxHzvkYW598b3JS/sfOTz9v+ZU6ZwtxjFNa0PWgBUftLoFjHlNCMBqG
WHq1Cbf4/mg4uiGF35gfS4nkRJUSRVBtBe5S3PbPUEpTEmVdcRDGt2EPQIhIoaFV
csC19//Lqu3tRfDoNlSYRSizgzMHOwAktA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:55:46 2026 by rpki-client