Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f21b148-0e96-38cd-b0c3-7037125b460a.roa
File:                     5f21b148-0e96-38cd-b0c3-7037125b460a.roa (raw, json)
Hash identifier:          G9RqmqvVqznm4VbcVENflXmkO4JHOplsvuGH005TdIc=
Subject key identifier:   C0:09:33:0C:25:AC:66:24:F4:FA:5B:1E:67:19:CA:35:ED:76:05:3E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F0D6CF8AD3BE5F0D70DD6A780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f21b148-0e96-38cd-b0c3-7037125b460a.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:a000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:f8:ad:3b:e5:f0:d7:0d:d6:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=516a51ca-5a8b-41ee-990b-655d7bc8c688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:c9:c9:b1:2b:3b:f8:53:82:12:f4:12:3a:
                    24:93:a3:b7:3b:4e:cf:16:4a:2b:09:a4:3b:32:5a:
                    7d:65:f4:f6:36:b8:67:e0:d4:57:1a:45:27:a3:17:
                    ab:34:35:a2:b7:cb:36:bb:06:46:2c:07:f0:6b:cf:
                    d1:a5:40:7a:f0:8d:84:71:50:45:51:46:55:bf:48:
                    e0:1b:69:89:4e:7f:63:ce:e2:36:60:91:ac:22:73:
                    38:9e:7f:da:5c:f9:8b:13:18:4b:e6:6a:18:db:11:
                    d0:47:57:9c:19:af:70:dc:e9:16:e2:17:40:2d:27:
                    69:2b:8c:80:b1:d5:7b:73:3a:ae:7e:c4:9d:88:fb:
                    7a:22:27:19:1a:5a:38:9b:f3:9f:26:43:e0:fb:74:
                    dd:17:a8:6b:fd:c4:0f:b9:81:7d:75:e1:12:b8:be:
                    cb:11:7d:fb:34:a5:04:6d:3e:88:d5:67:37:2b:53:
                    a6:4b:dd:19:70:4e:c1:e5:54:73:da:a2:a7:e1:ec:
                    e9:fa:22:60:db:d8:99:18:88:1b:61:28:90:9b:fe:
                    57:a7:f5:5f:79:e6:ea:91:f3:47:9c:1b:6f:1a:11:
                    52:8a:25:fb:fe:a3:91:37:a1:fc:cb:50:dc:c1:4c:
                    e5:98:6a:a6:b4:b0:cf:cb:f4:dc:ec:7a:2e:cf:0e:
                    d0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:09:33:0C:25:AC:66:24:F4:FA:5B:1E:67:19:CA:35:ED:76:05:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f21b148-0e96-38cd-b0c3-7037125b460a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:3a:b0:de:17:ab:5f:63:eb:e3:50:82:0f:89:8c:4f:3e:40:
         03:54:a8:3d:96:ce:70:5d:4c:df:a5:7e:a4:14:4b:da:0f:0d:
         67:c0:62:5f:02:20:0a:87:e1:a4:20:11:39:12:d4:f4:13:5f:
         77:32:d8:c7:f7:ab:67:ab:c5:fe:e1:83:17:35:97:60:b5:f1:
         35:70:2c:b8:b2:19:26:9e:cf:3c:92:64:f3:f8:8e:2b:1a:76:
         c4:ed:82:aa:f3:f2:82:f8:54:b2:d3:71:dd:a2:d2:7f:c8:f9:
         90:3a:dc:65:51:0b:7d:37:1b:96:e0:8d:c4:3a:92:31:95:fe:
         e4:ad:cc:8e:6f:85:49:6a:cd:44:77:2f:28:b2:06:48:6a:1f:
         1e:b5:b7:ba:8d:7e:64:da:26:6e:6e:b9:a8:af:48:ff:89:1c:
         bd:e2:39:f9:50:0c:6b:eb:79:e1:90:eb:3e:58:65:7c:f7:51:
         03:9e:ea:e5:67:c2:63:0a:9d:1e:e1:ea:16:79:8a:40:96:14:
         5c:58:a4:b5:71:f2:bd:d8:67:7f:ba:e4:01:a4:99:dc:1e:2e:
         d6:5f:7e:f2:8c:50:f5:5b:1d:f6:db:1a:1c:fa:59:03:a9:8e:
         2d:af:05:91:5c:76:46:4f:8f:07:c1:ee:dd:bf:a3:29:c4:80:
         92:03:19:95
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8NbPitO+Xw1w3Wp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
NTE2YTUxY2EtNWE4Yi00MWVlLTk5MGItNjU1ZDdiYzhjNjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkrJybErO/hTghL0Ejokk6O3O07PFkorCaQ7
Mlp9ZfT2Nrhn4NRXGkUnoxerNDWit8s2uwZGLAfwa8/RpUB68I2EcVBFUUZVv0jg
G2mJTn9jzuI2YJGsInM4nn/aXPmLExhL5moY2xHQR1ecGa9w3OkW4hdALSdpK4yA
sdV7czqufsSdiPt6IicZGlo4m/OfJkPg+3TdF6hr/cQPuYF9deESuL7LEX37NKUE
bT6I1Wc3K1OmS90ZcE7B5VRz2qKn4ezp+iJg29iZGIgbYSiQm/5Xp/VfeebqkfNH
nBtvGhFSiiX7/qORN6H8y1DcwUzlmGqmtLDPy/Tc7Houzw7QAQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMAJMwwlrGYk9PpbHmcZyjXtdgU+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWYyMWIxNDgtMGU5Ni0z
OGNkLWIwYzMtNzAzNzEyNWI0NjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAqAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPzqw3herX2Pr41CCD4mMTz5AA1SoPZbOcF1M36V+pBRL2g8NZ8Bi
XwIgCofhpCARORLU9BNfdzLYx/erZ6vF/uGDFzWXYLXxNXAsuLIZJp7PPJJk8/iO
Kxp2xO2CqvPygvhUstNx3aLSf8j5kDrcZVELfTcbluCNxDqSMZX+5K3Mjm+FSWrN
RHcvKLIGSGofHrW3uo1+ZNombm65qK9I/4kcveI5+VAMa+t54ZDrPlhlfPdRA57q
5WfCYwqdHuHqFnmKQJYUXFiktXHyvdhnf7rkAaSZ3B4u1l9+8oxQ9Vsd9tsaHPpZ
A6mOLa8FkVx2Rk+PB8Hu3b+jKcSAkgMZlQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:12:51 2026 by rpki-client