Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fc23a6c7-0448-3e6c-aa02-1c69f06beefd.roa
File:                     fc23a6c7-0448-3e6c-aa02-1c69f06beefd.roa (raw, json)
Hash identifier:          kBkDSsdp6Jn+zOdlRQsdd1O7yhGpg3Se0dw/8+23OhA=
Subject key identifier:   46:0A:08:B7:F9:B4:3B:7F:D4:E9:7D:0B:8A:59:48:36:69:B7:83:C1
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D9325691A857E9C62E23DDE00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fc23a6c7-0448-3e6c-aa02-1c69f06beefd.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        2603:c02f:c000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:69:1a:85:7e:9c:62:e2:3d:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=7ca5d7cd-5353-46ff-b060-a4e14abcc24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:c8:9c:4a:d7:bc:1f:66:e0:4d:83:fe:ee:
                    84:38:f5:95:09:90:eb:7b:c0:fe:21:75:10:82:06:
                    5a:9d:0a:6c:f8:27:1f:2e:1f:f3:fb:2a:68:4c:98:
                    bf:80:d7:a0:c5:33:08:54:65:ae:ed:e7:b7:e6:90:
                    e8:b5:0a:95:43:08:25:67:02:63:c8:4d:fe:59:1b:
                    c2:08:44:00:33:9b:a2:ae:9b:95:cd:41:60:03:ff:
                    22:63:06:c8:dc:2d:1a:11:24:3a:c1:71:c0:54:03:
                    b8:b4:6a:87:66:c2:39:de:be:31:91:d6:e7:7c:b2:
                    54:12:e5:3a:d6:11:71:cf:67:d9:d4:30:f9:5d:68:
                    15:93:0a:e2:b7:73:26:d4:50:39:e6:84:1b:dd:ac:
                    61:ad:01:2a:ed:d0:df:ab:f8:5b:b4:fa:c6:bf:65:
                    28:cd:2f:3c:5b:77:9d:6c:54:ab:ce:d7:0a:15:78:
                    08:03:7f:59:24:d4:02:4e:5a:10:a9:6d:6d:c9:1b:
                    bb:34:37:94:8a:4e:b8:91:48:1a:bd:0a:75:8c:22:
                    7c:2b:56:4a:dc:60:8c:a6:78:29:5c:9f:3c:4d:0a:
                    c9:76:06:75:35:94:25:56:5a:03:93:d2:f5:04:63:
                    27:09:51:60:b1:f0:15:13:3d:fb:32:93:75:7b:d4:
                    65:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0A:08:B7:F9:B4:3B:7F:D4:E9:7D:0B:8A:59:48:36:69:B7:83:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fc23a6c7-0448-3e6c-aa02-1c69f06beefd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c02f:c000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:85:d5:1a:40:33:af:8f:ca:77:f4:6b:e9:fd:81:fc:2d:a2:
         77:e3:b7:3e:6f:1c:e1:ae:72:be:38:16:51:ff:f3:13:f1:e8:
         b3:33:c5:51:4c:c4:30:72:c3:ec:de:dc:ad:da:5a:d9:da:40:
         69:f1:68:f3:ca:a6:ed:ca:89:12:29:01:fb:62:f9:79:3f:90:
         c5:16:5d:45:50:de:3d:bc:6d:cc:11:47:a7:e4:7f:e7:8c:7a:
         d0:21:cb:91:68:3a:89:a3:b0:dd:97:fa:89:b9:dc:11:23:f7:
         3d:03:58:96:48:d7:89:8a:60:81:02:0a:2c:84:ba:fd:07:62:
         8b:27:c9:4a:2d:17:4b:6d:d0:a3:cf:7f:66:44:3e:cb:e3:f6:
         29:1b:00:aa:52:36:ee:7c:dd:8b:ea:50:c4:d9:7f:14:0d:93:
         08:c3:79:db:67:ae:83:5c:e3:97:3c:46:53:49:b3:2d:c8:60:
         ee:6f:2f:35:8b:0a:53:00:be:03:2d:fd:51:06:0c:62:8d:0b:
         7b:85:83:97:4b:59:d8:f4:f4:81:52:c5:5f:50:fa:e9:82:03:
         03:5c:54:53:e3:bd:d8:e7:ff:8b:0b:2d:00:e7:53:c1:57:78:
         58:17:ba:41:0e:30:81:a3:22:ea:28:ad:ca:cb:23:fa:b7:73:
         c6:bf:da:27
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2TJWkahX6cYuI93gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk
N2NhNWQ3Y2QtNTM1My00NmZmLWIwNjAtYTRlMTRhYmNjMjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5fInErXvB9m4E2D/u6EOPWVCZDre8D+IXUQ
ggZanQps+CcfLh/z+ypoTJi/gNegxTMIVGWu7ee35pDotQqVQwglZwJjyE3+WRvC
CEQAM5uirpuVzUFgA/8iYwbI3C0aESQ6wXHAVAO4tGqHZsI53r4xkdbnfLJUEuU6
1hFxz2fZ1DD5XWgVkwrit3Mm1FA55oQb3axhrQEq7dDfq/hbtPrGv2UozS88W3ed
bFSrztcKFXgIA39ZJNQCTloQqW1tyRu7NDeUik64kUgavQp1jCJ8K1ZK3GCMpngp
XJ88TQrJdgZ1NZQlVloDk9L1BGMnCVFgsfAVEz37MpN1e9RlMwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEYKCLf5tDt/1Ol9C4pZSDZpt4PBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmMyM2E2YzctMDQ0OC0z
ZTZjLWFhMDItMWM2OWYwNmJlZWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAL8Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHIXVGkAzr4/Kd/Rr6f2B/C2id+O3Pm8c4a5yvjgWUf/zE/HoszPF
UUzEMHLD7N7crdpa2dpAafFo88qm7cqJEikB+2L5eT+QxRZdRVDePbxtzBFHp+R/
54x60CHLkWg6iaOw3Zf6ibncESP3PQNYlkjXiYpggQIKLIS6/QdiiyfJSi0XS23Q
o89/ZkQ+y+P2KRsAqlI27nzdi+pQxNl/FA2TCMN522eug1zjlzxGU0mzLchg7m8v
NYsKUwC+Ay39UQYMYo0Le4WDl0tZ2PT0gVLFX1D66YIDA1xUU+O92Of/iwstAOdT
wVd4WBe6QQ4wgaMi6iityssj+rdzxr/aJw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:11:04 2026 by rpki-client