Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19a55f49-646c-368e-b98c-504fe0767937.roa
File:                     19a55f49-646c-368e-b98c-504fe0767937.roa (raw, json)
Hash identifier:          c71vIqp12tmc+0tYBbyvOQGpMWrXlQVRl+FgXj2cq24=
Subject key identifier:   61:9D:16:93:48:71:AC:39:1A:C1:89:D4:2A:61:D3:FE:1A:1A:06:F1
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D871D9A62893CC2A4F23A9D80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19a55f49-646c-368e-b98c-504fe0767937.roa
Signing time:             Thu 16 Apr 2026 17:35:21 +0000
ROA not before:           Thu 16 Apr 2026 17:35:21 +0000
ROA not after:            Wed 15 Jul 2026 17:35:21 +0000
asID:                     54253
IP address blocks:        2603:c058:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:1d:9a:62:89:3c:c2:a4:f2:3a:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 16 17:35:21 2026 GMT
            Not After : Jul 15 17:35:21 2026 GMT
        Subject: CN=19c04efd-0b0b-42be-b423-3fdb5af93ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:22:29:69:34:59:69:f8:7a:76:3e:d5:f8:30:
                    69:00:47:c5:d4:6e:ab:f9:b9:ce:be:57:c2:32:9e:
                    3c:96:2d:10:e2:a2:81:cf:c7:2f:41:62:f9:66:50:
                    3a:ce:5f:f5:99:93:74:ef:a8:71:4c:d9:7f:f1:99:
                    00:7a:5f:91:ef:b3:d0:77:0e:eb:0c:c1:81:ef:77:
                    a7:08:22:8a:ff:8a:60:bc:e5:05:72:96:4b:c2:6e:
                    61:2b:f7:8f:e7:8f:ea:0f:88:af:3e:10:62:db:0e:
                    a6:4b:1c:fb:c6:19:8c:29:3f:4e:6d:f8:ee:cf:27:
                    fb:14:74:b0:eb:eb:08:39:9a:45:af:d6:8d:48:75:
                    f8:b0:b8:c2:e6:34:be:1a:1a:23:2b:ce:fa:03:b5:
                    e3:cf:9e:27:d6:54:d1:96:00:16:da:6c:ce:56:77:
                    33:55:71:ec:6b:6f:3e:03:b7:8a:23:e4:e4:67:b1:
                    8a:79:39:8a:1a:19:37:e6:60:6f:6f:22:fc:0e:ef:
                    3a:49:86:b4:1b:10:4b:2e:b2:d9:bd:07:d9:96:d6:
                    a4:5f:25:95:5a:cf:66:20:2a:75:7a:4b:2f:ed:44:
                    bb:e4:34:45:00:f2:2e:7c:fb:fb:5b:58:1b:ec:a7:
                    3c:5b:f3:e4:eb:d1:8d:dc:fa:49:a9:9d:02:65:76:
                    72:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9D:16:93:48:71:AC:39:1A:C1:89:D4:2A:61:D3:FE:1A:1A:06:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19a55f49-646c-368e-b98c-504fe0767937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c058:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:24:6d:fa:2b:22:f6:49:b7:b8:9b:99:86:7d:4f:c7:36:0d:
         25:da:d5:c2:ec:d4:1e:ba:f0:40:f0:09:bd:76:ce:47:0f:8b:
         a5:6b:64:c3:cb:6c:df:04:1a:08:c1:9e:d2:8e:df:ed:d7:77:
         38:98:c8:e0:9d:4b:d2:24:85:24:53:fa:a4:c0:0e:84:9d:e7:
         30:e4:fa:f6:61:66:0f:05:64:44:a4:14:f2:d9:56:fe:0a:56:
         b0:cc:e3:47:d6:0e:dc:17:ec:5a:0e:0c:58:fd:3c:58:13:08:
         4d:40:43:24:e2:a8:d1:c0:c6:39:63:57:dd:b4:03:0f:94:33:
         85:e5:5a:0f:d3:27:06:9c:62:e1:bc:35:78:93:1e:91:44:f8:
         1d:cf:95:fb:d1:46:ff:94:4a:89:26:c1:f0:33:fe:eb:b6:09:
         7d:d9:bd:02:2f:b5:5e:90:d6:37:2f:43:fa:05:13:80:b5:b7:
         f8:9f:40:19:92:aa:a8:14:b9:4d:23:b8:18:dc:35:4f:45:50:
         ad:02:d8:65:f8:7f:0f:a7:ec:e6:e5:23:d7:18:ef:97:12:73:
         ab:0e:c5:cb:0b:ae:2f:35:33:0e:23:9a:46:81:cd:0f:88:d0:
         64:44:70:cf:74:f6:93:da:ab:68:75:e3:b2:e6:e9:29:90:e5:
         1e:77:70:2e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2HHZpiiTzCpPI6nYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQxNjE3MzUyMVoXDTI2MDcxNTE3MzUyMVowLzEtMCsGA1UEAxMk
MTljMDRlZmQtMGIwYi00MmJlLWI0MjMtM2ZkYjVhZjkzZmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSIpaTRZafh6dj7V+DBpAEfF1G6r+bnOvlfC
Mp48li0Q4qKBz8cvQWL5ZlA6zl/1mZN076hxTNl/8ZkAel+R77PQdw7rDMGB73en
CCKK/4pgvOUFcpZLwm5hK/eP54/qD4ivPhBi2w6mSxz7xhmMKT9Obfjuzyf7FHSw
6+sIOZpFr9aNSHX4sLjC5jS+GhojK876A7Xjz54n1lTRlgAW2mzOVnczVXHsa28+
A7eKI+TkZ7GKeTmKGhk35mBvbyL8Du86SYa0GxBLLrLZvQfZltakXyWVWs9mICp1
eksv7US75DRFAPIufPv7W1gb7Kc8W/Pk69GN3PpJqZ0CZXZyVwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGGdFpNIcaw5GsGJ1Cph0/4aGgbxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTlhNTVmNDktNjQ2Yy0z
NjhlLWI5OGMtNTA0ZmUwNzY3OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAWAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAICRt+isi9km3uJuZhn1PxzYNJdrVwuzUHrrwQPAJvXbORw+LpWtk
w8ts3wQaCMGe0o7f7dd3OJjI4J1L0iSFJFP6pMAOhJ3nMOT69mFmDwVkRKQU8tlW
/gpWsMzjR9YO3BfsWg4MWP08WBMITUBDJOKo0cDGOWNX3bQDD5QzheVaD9MnBpxi
4bw1eJMekUT4Hc+V+9FG/5RKiSbB8DP+67YJfdm9Ai+1XpDWNy9D+gUTgLW3+J9A
GZKqqBS5TSO4GNw1T0VQrQLYZfh/D6fs5uUj1xjvlxJzqw7FywuuLzUzDiOaRoHN
D4jQZERwz3T2k9qraHXjsubpKZDlHndwLg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:27:56 2026 by rpki-client