Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ef49e5f-8058-3307-97d2-23842756dbd9.roa
File:                     1ef49e5f-8058-3307-97d2-23842756dbd9.roa (raw, json)
Hash identifier:          1ekvt/l4s+xI+p4l5aWnmYZCRG0yKD8rDB6yGtUEhyk=
Subject key identifier:   7D:6D:F9:2F:C2:08:2F:97:14:47:79:44:73:01:F3:49:F8:4E:62:C8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F10379D3972B4697A5886E880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ef49e5f-8058-3307-97d2-23842756dbd9.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c012::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:9d:39:72:b4:69:7a:58:86:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=dc3d587f-9937-44b8-9f75-ca8e31a3fa88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:11:ed:90:09:19:55:ed:d8:d2:6f:83:0d:a2:
                    19:1a:e3:dc:2a:16:96:cc:8f:f7:c2:7d:14:46:88:
                    06:f3:89:ec:88:0f:8e:fe:26:5e:02:6a:b4:73:ad:
                    aa:47:7b:5c:f8:be:57:50:f6:65:d9:d0:3d:6b:ea:
                    75:a0:5c:36:01:ad:06:45:2f:ce:b9:4e:fe:f3:93:
                    10:6b:9b:3f:e8:66:b1:37:88:81:a5:bc:0e:5f:b3:
                    37:0e:3e:bf:75:a9:39:95:39:11:cb:42:67:a2:7c:
                    c3:f2:53:1b:3e:5c:a7:6e:d3:dc:26:a8:f7:eb:84:
                    8a:74:28:e8:d2:d1:8c:29:c9:08:87:f0:13:26:86:
                    43:73:64:31:b2:d7:4a:f1:ad:5e:86:b0:23:30:74:
                    34:28:9b:c4:ba:27:bf:f8:ff:28:2b:2d:07:8a:6c:
                    de:b4:1c:2e:17:3e:a4:e1:a3:c4:7e:70:bd:02:09:
                    93:b9:b8:8c:94:82:63:43:3c:d2:e5:3c:2f:ef:70:
                    c5:8f:88:23:88:85:64:5a:c0:29:34:56:5a:ce:17:
                    01:03:09:3d:74:b6:f2:4a:12:59:95:08:3d:9e:92:
                    2a:49:9e:d7:68:e9:fb:93:0c:fa:57:a5:b3:43:a2:
                    fa:0b:1c:63:bd:e5:41:b0:6b:28:bc:69:21:8b:b1:
                    55:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6D:F9:2F:C2:08:2F:97:14:47:79:44:73:01:F3:49:F8:4E:62:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ef49e5f-8058-3307-97d2-23842756dbd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c012::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:35:d8:49:d9:29:e8:fd:ee:fd:21:65:a6:05:39:e9:24:74:
         37:b8:bd:9f:c4:49:99:2a:13:9b:29:9f:94:c8:06:38:00:5f:
         19:38:d1:59:2b:00:99:65:63:6a:e2:91:c0:d9:b9:26:da:fb:
         2b:6e:5b:0a:44:1a:96:c2:1e:f5:f0:e7:6d:0b:e0:b7:2a:8e:
         48:e6:39:b8:29:36:6f:10:8d:1d:27:f4:34:fd:aa:09:6c:06:
         01:06:d5:8e:97:46:76:44:d3:ff:36:53:ae:b1:ed:74:2f:67:
         ba:59:b3:72:11:a7:ef:a9:7c:7a:a9:c4:9e:a9:ff:e1:f0:f3:
         90:fc:8d:77:35:51:af:e7:df:94:e4:2b:ef:d5:1f:6f:75:c3:
         1d:4d:83:9e:b6:df:1f:94:63:b4:e4:73:07:70:22:fd:dc:ff:
         c6:71:36:39:4e:1b:5d:52:9d:c9:54:14:a5:8c:8c:bd:7e:fb:
         1d:d4:ed:93:82:b5:29:eb:20:cd:dd:49:da:83:36:d0:0b:b6:
         e8:9f:74:9e:94:76:1f:94:0a:00:a2:2d:89:5b:49:70:3f:36:
         c0:2e:98:57:51:46:95:f1:49:00:cc:0e:df:78:3d:8a:0c:84:
         70:b1:25:8b:d7:92:98:2a:ac:90:83:63:2b:1b:ee:5b:cd:bc:
         39:f7:8a:d0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8QN505crRpeliG6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
ZGMzZDU4N2YtOTkzNy00NGI4LTlmNzUtY2E4ZTMxYTNmYTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BHtkAkZVe3Y0m+DDaIZGuPcKhaWzI/3wn0U
RogG84nsiA+O/iZeAmq0c62qR3tc+L5XUPZl2dA9a+p1oFw2Aa0GRS/OuU7+85MQ
a5s/6GaxN4iBpbwOX7M3Dj6/dak5lTkRy0JnonzD8lMbPlynbtPcJqj364SKdCjo
0tGMKckIh/ATJoZDc2QxstdK8a1ehrAjMHQ0KJvEuie/+P8oKy0HimzetBwuFz6k
4aPEfnC9AgmTubiMlIJjQzzS5Twv73DFj4gjiIVkWsApNFZazhcBAwk9dLbyShJZ
lQg9npIqSZ7XaOn7kwz6V6WzQ6L6CxxjveVBsGsovGkhi7FVLQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFH1t+S/CCC+XFEd5RHMB80n4TmLIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWVmNDllNWYtODA1OC0z
MzA3LTk3ZDItMjM4NDI3NTZkYmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAEgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEADTXYSdkp6P3u/SFlpgU56SR0N7i9n8RJmSoTmymflMgGOABfGTjR
WSsAmWVjauKRwNm5Jtr7K25bCkQalsIe9fDnbQvgtyqOSOY5uCk2bxCNHSf0NP2q
CWwGAQbVjpdGdkTT/zZTrrHtdC9nulmzchGn76l8eqnEnqn/4fDzkPyNdzVRr+ff
lOQr79Ufb3XDHU2DnrbfH5RjtORzB3Ai/dz/xnE2OU4bXVKdyVQUpYyMvX77HdTt
k4K1Kesgzd1J2oM20Au26J90npR2H5QKAKItiVtJcD82wC6YV1FGlfFJAMwO33g9
igyEcLEli9eSmCqskINjKxvuW828OfeK0A==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:43:26 2026 by rpki-client