Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2b0fda30-8e48-3914-b896-f47e52babbe5.roa
File:                     2b0fda30-8e48-3914-b896-f47e52babbe5.roa (raw, json)
Hash identifier:          hzc5rAGYXTlk/TzdK4cAU+qS5v2S9r0T8+Shs+PDnV4=
Subject key identifier:   B1:7D:33:FF:88:19:74:0B:4C:D8:BD:DD:43:C2:57:1D:20:61:5E:50
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584C5EC6D6BC9AD6A51F58CBA3C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2b0fda30-8e48-3914-b896-f47e52babbe5.roa
Signing time:             Wed 31 Dec 2025 14:00:38 +0000
ROA not before:           Wed 31 Dec 2025 14:00:38 +0000
ROA not after:            Tue 31 Mar 2026 13:00:38 +0000
asID:                     20115
IP address blocks:        2603:90f5:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5e:c6:d6:bc:9a:d6:a5:1f:58:cb:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 31 14:00:38 2025 GMT
            Not After : Mar 31 13:00:38 2026 GMT
        Subject: CN=03ba3fd9-fda4-49f0-a0f3-2f88b30c3560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a1:68:06:35:2b:fe:63:49:d3:e3:6e:62:16:
                    2f:cb:1a:8d:51:18:d5:a7:38:4e:4a:b5:f3:1c:0f:
                    86:be:a6:22:53:c4:e6:af:fc:ec:e0:32:73:ae:c0:
                    a0:d2:72:a7:f5:a7:a4:1d:a0:0b:6a:dc:b3:e2:c9:
                    49:fd:5b:ae:1c:9b:3f:b5:6f:34:9d:d9:cb:e6:e4:
                    89:82:00:0e:99:12:f8:bf:e3:ef:b2:ea:99:9d:88:
                    8d:99:9b:bd:d4:44:7c:24:d6:32:bf:32:78:57:df:
                    26:b7:15:93:0c:39:3a:25:ff:d5:69:e0:dd:ef:3b:
                    3e:2b:f9:87:bb:4b:c8:d9:2e:f5:59:ad:de:b6:51:
                    b5:3e:10:0a:ce:b5:75:18:ab:ac:0e:af:a6:37:19:
                    e6:64:66:c5:d9:d6:af:2c:1b:16:36:5c:02:21:57:
                    69:c6:6d:08:5d:0d:4a:53:79:83:c9:1c:33:08:b8:
                    37:7c:d6:d6:c4:3d:f7:cc:5f:3e:21:95:08:35:8d:
                    13:41:7e:dd:d2:48:1a:ad:02:37:f0:92:e6:80:83:
                    df:f1:60:06:4f:fb:8e:1c:fe:e2:83:fe:26:d9:1d:
                    af:8c:9d:9e:47:e2:f8:79:1c:6b:54:ca:74:d3:90:
                    a6:ae:e5:5d:65:32:d5:16:f5:23:3e:ad:96:07:56:
                    52:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7D:33:FF:88:19:74:0B:4C:D8:BD:DD:43:C2:57:1D:20:61:5E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2b0fda30-8e48-3914-b896-f47e52babbe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f5:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:2a:2b:81:7b:34:fd:f6:ae:05:ff:42:85:f8:cc:f6:94:93:
         2d:e7:a2:9c:95:54:42:a6:2c:39:ad:ee:56:69:37:b7:e6:28:
         33:45:fd:17:36:b4:e2:d3:df:40:1b:5e:e3:07:e6:e7:a0:21:
         fd:e0:61:b2:89:d4:0b:3b:b1:7e:76:f1:b3:53:ed:28:14:62:
         15:49:68:87:e7:b8:5f:c3:04:f3:a1:ae:a4:34:c9:89:3b:b7:
         a3:2f:af:35:88:21:93:ab:21:c0:fa:a6:44:d5:d4:47:e9:da:
         3f:d6:8f:ed:35:d7:86:e7:19:ed:ec:b7:df:7d:30:17:7c:0f:
         f9:e1:ee:18:27:2a:5b:24:03:4a:fd:95:1f:68:94:82:24:f8:
         96:79:31:d7:b3:5b:b7:a6:53:d0:dc:15:d2:40:da:58:f8:cb:
         b1:4f:44:e1:14:de:1c:2b:a7:a7:43:75:60:7e:5e:d9:a5:b6:
         66:f6:f3:e7:1d:05:96:a8:c3:14:65:6f:75:3d:66:b4:47:95:
         62:18:52:29:b6:47:29:21:37:4f:a2:3d:66:63:d8:35:2d:da:
         96:4d:4d:7f:37:cf:5e:76:7c:65:bc:5e:8d:c9:19:08:de:f5:
         70:01:3a:f9:23:d5:cb:bf:ee:52:0e:6b:eb:a3:8a:eb:32:5d:
         a8:09:78:81
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExexta8mtalH1jLo8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk
MDNiYTNmZDktZmRhNC00OWYwLWEwZjMtMmY4OGIzMGMzNTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qFoBjUr/mNJ0+NuYhYvyxqNURjVpzhOSrXz
HA+GvqYiU8Tmr/zs4DJzrsCg0nKn9aekHaALatyz4slJ/VuuHJs/tW80ndnL5uSJ
ggAOmRL4v+PvsuqZnYiNmZu91ER8JNYyvzJ4V98mtxWTDDk6Jf/VaeDd7zs+K/mH
u0vI2S71Wa3etlG1PhAKzrV1GKusDq+mNxnmZGbF2davLBsWNlwCIVdpxm0IXQ1K
U3mDyRwzCLg3fNbWxD33zF8+IZUINY0TQX7d0kgarQI38JLmgIPf8WAGT/uOHP7i
g/4m2R2vjJ2eR+L4eRxrVMp005CmruVdZTLVFvUjPq2WB1ZSVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLF9M/+IGXQLTNi93UPCVx0gYV5QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMmIwZmRhMzAtOGU0OC0z
OTE0LWI4OTYtZjQ3ZTUyYmFiYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgOQ9QAM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGsqK4F7NP32rgX/QoX4zPaUky3nopyVVEKmLDmt7lZpN7fmKDNF
/Rc2tOLT30AbXuMH5uegIf3gYbKJ1As7sX528bNT7SgUYhVJaIfnuF/DBPOhrqQ0
yYk7t6MvrzWIIZOrIcD6pkTV1Efp2j/Wj+0114bnGe3st999MBd8D/nh7hgnKlsk
A0r9lR9olIIk+JZ5MdezW7emU9DcFdJA2lj4y7FPROEU3hwrp6dDdWB+Xtmltmb2
8+cdBZaowxRlb3U9ZrRHlWIYUim2RykhN0+iPWZj2DUt2pZNTX83z152fGW8Xo3J
GQje9XABOvkj1cu/7lIOa+ujiusyXagJeIE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:43 2026 by rpki-client