Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9665e6c9-eb8b-31be-94a2-08aeb45006a3.roa
File:                     9665e6c9-eb8b-31be-94a2-08aeb45006a3.roa (raw, json)
Hash identifier:          SvX95RDlAp/iZKELaCOpK21bLBFf15k2Rf52jItPbL8=
Subject key identifier:   26:A0:1F:05:15:1B:E3:15:72:77:39:6B:C8:D9:1C:94:0E:FD:97:2E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F0242159D7A03E42D42001480
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9665e6c9-eb8b-31be-94a2-08aeb45006a3.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     31898
IP address blocks:        2603:c023:c000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:15:9d:7a:03:e4:2d:42:00:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=6738feb6-c29c-47b7-ad6c-ac272b26642c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:dc:71:da:38:9e:13:c7:d7:ce:e3:67:4a:03:
                    d1:fb:df:4d:cb:ff:af:80:69:a2:b3:45:af:c8:55:
                    ad:88:0a:28:f4:f5:b2:b3:5e:eb:aa:c4:b9:0a:47:
                    9d:88:d3:cd:54:3e:38:85:72:de:ed:06:ff:05:ba:
                    3b:84:1c:02:88:c4:27:f5:06:3b:e4:c8:3b:13:b1:
                    71:56:04:0b:a8:32:73:24:e6:6e:02:e7:b4:07:45:
                    58:63:f6:53:dc:b7:76:03:9f:62:23:d5:9a:e6:8b:
                    05:04:37:65:2c:99:4e:1f:54:69:0b:f3:09:b2:ba:
                    ea:7a:60:51:4b:72:17:f4:a7:e3:92:01:02:e3:62:
                    14:9f:e9:50:84:52:99:d4:94:b9:fd:20:99:6a:82:
                    7f:a6:0f:b1:97:e3:ca:4a:24:20:0d:c2:7e:42:67:
                    82:3b:db:9f:a9:2f:3d:c5:70:bd:d5:43:84:28:95:
                    65:ad:6f:37:6a:76:f6:9c:ac:a1:38:39:b2:1a:af:
                    5f:9e:ea:ac:0d:85:97:93:29:d1:d8:db:de:13:79:
                    ac:bb:51:d4:a4:73:f3:d9:a3:a5:83:c7:45:a8:42:
                    3c:f2:f8:c1:02:eb:c5:f1:2e:e3:27:2a:23:df:bb:
                    b4:1b:60:b4:6a:73:a3:4a:28:ed:c7:61:fb:78:a7:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A0:1F:05:15:1B:E3:15:72:77:39:6B:C8:D9:1C:94:0E:FD:97:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9665e6c9-eb8b-31be-94a2-08aeb45006a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c023:c000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a3:03:b4:0f:df:4f:ae:3b:f3:7c:41:90:65:54:83:ef:8c:
         ee:c3:7d:a6:c1:55:12:df:5c:6d:53:c1:01:07:29:e4:5f:89:
         ff:4d:00:af:78:2f:4d:1f:bd:bb:1a:2b:c1:f2:80:8b:06:a4:
         31:3b:50:5a:24:67:05:9d:6f:84:74:5f:ba:b5:8a:54:95:23:
         e2:cc:25:2f:3d:b8:f2:15:e3:1f:b4:e5:07:9c:ee:5f:63:87:
         55:7a:c9:95:47:34:36:ae:72:49:44:a7:9c:61:5c:af:b3:2f:
         29:aa:f1:b8:e2:e9:03:5a:4c:bf:57:8b:35:5d:56:5c:20:28:
         5a:f3:60:6c:b5:41:26:40:cb:01:bf:69:2a:7f:6b:82:e6:9c:
         c4:6d:d4:7f:dc:4c:96:3f:de:d3:83:3c:a4:32:1d:49:df:bd:
         6b:8e:10:71:75:2d:46:19:e1:44:3c:41:35:07:2d:dc:d3:62:
         c8:47:d4:1d:94:cc:e0:05:48:29:89:db:58:15:9e:26:77:fe:
         1b:8e:b5:fa:85:a9:93:88:bf:72:ac:62:37:4e:8a:5e:32:5d:
         53:de:bd:ca:a2:bb:65:79:cd:8b:24:e4:c7:d2:97:ae:3d:99:
         ae:90:8d:f1:bb:10:6e:ef:ed:5c:be:2e:6c:88:33:f0:52:5e:
         1d:9c:4f:3e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8CQhWdegPkLUIAFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk
NjczOGZlYjYtYzI5Yy00N2I3LWFkNmMtYWMyNzJiMjY2NDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdxx2jieE8fXzuNnSgPR+99Ny/+vgGmis0Wv
yFWtiAoo9PWys17rqsS5CkediNPNVD44hXLe7Qb/Bbo7hBwCiMQn9QY75Mg7E7Fx
VgQLqDJzJOZuAue0B0VYY/ZT3Ld2A59iI9Wa5osFBDdlLJlOH1RpC/MJsrrqemBR
S3IX9KfjkgEC42IUn+lQhFKZ1JS5/SCZaoJ/pg+xl+PKSiQgDcJ+QmeCO9ufqS89
xXC91UOEKJVlrW83anb2nKyhODmyGq9fnuqsDYWXkynR2NveE3msu1HUpHPz2aOl
g8dFqEI88vjBAuvF8S7jJyoj37u0G2C0anOjSijtx2H7eKfV7wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCagHwUVG+MVcnc5a8jZHJQO/ZcuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTY2NWU2YzktZWI4Yi0z
MWJlLTk0YTItMDhhZWI0NTAwNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAI8Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANqMDtA/fT64783xBkGVUg++M7sN9psFVEt9cbVPBAQcp5F+J/00A
r3gvTR+9uxorwfKAiwakMTtQWiRnBZ1vhHRfurWKVJUj4swlLz248hXjH7TlB5zu
X2OHVXrJlUc0Nq5ySUSnnGFcr7MvKarxuOLpA1pMv1eLNV1WXCAoWvNgbLVBJkDL
Ab9pKn9rguacxG3Uf9xMlj/e04M8pDIdSd+9a44QcXUtRhnhRDxBNQct3NNiyEfU
HZTM4AVIKYnbWBWeJnf+G461+oWpk4i/cqxiN06KXjJdU969yqK7ZXnNiyTkx9KX
rj2ZrpCN8bsQbu/tXL4ubIgz8FJeHZxPPg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:12:05 2026 by rpki-client