Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b8ae5732-d7fc-3290-9abb-e5c24f97d441.roa
File:                     b8ae5732-d7fc-3290-9abb-e5c24f97d441.roa (raw, json)
Hash identifier:          UeoRlNB2v+AuKeIO2WSTkhm/IYXZUGqv7scZApBiaoc=
Subject key identifier:   4D:F6:36:FC:D5:78:9E:5A:DE:FC:5E:90:27:61:7F:96:70:14:C7:0D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F498702F512FEB4D4DCCACB80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b8ae5732-d7fc-3290-9abb-e5c24f97d441.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0f4:2500::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:02:f5:12:fe:b4:d4:dc:ca:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=533c6635-0660-46e8-b054-7db8ead45232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d8:2d:54:29:65:e6:05:61:85:79:7d:30:39:
                    61:43:db:1a:a7:6a:72:81:f2:f7:d9:11:ee:f6:9b:
                    d4:88:cf:fc:18:0c:29:39:d2:c3:8d:ec:91:9b:93:
                    45:8c:73:0a:03:33:04:8d:f1:45:1e:2f:9e:9d:17:
                    fb:55:8c:e6:5a:c4:8b:05:9b:61:34:d1:e0:9e:2f:
                    79:9a:c7:9d:35:d2:a1:3e:b9:a6:12:03:7d:78:db:
                    e6:b0:7a:2a:17:a9:c2:4c:e5:1a:a0:39:6a:97:e7:
                    cd:4f:42:05:a5:1f:d8:32:f3:53:50:1f:40:97:3f:
                    2d:bc:80:f7:2b:30:f4:53:46:d9:f4:8a:ac:9e:d6:
                    2a:d8:d8:61:21:21:9d:50:eb:1b:50:54:e6:f1:32:
                    a2:9b:ec:b4:e8:0a:0b:39:85:4a:d6:8f:dc:1e:6d:
                    0d:09:00:dd:b9:94:fd:df:c7:89:c8:22:60:3e:e8:
                    1f:07:4b:71:6b:5f:7d:79:02:9a:1e:9a:98:d7:f3:
                    97:f5:e9:e5:72:fc:98:b2:4a:8a:de:15:e8:88:ba:
                    4e:ef:c8:dd:2e:9e:db:75:9b:c0:a8:bb:af:b4:52:
                    80:f0:0d:9c:38:79:17:1d:5f:2f:aa:a9:a6:d6:1e:
                    a2:4a:24:01:de:0d:f5:1f:22:ca:5e:b7:80:b8:f0:
                    68:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F6:36:FC:D5:78:9E:5A:DE:FC:5E:90:27:61:7F:96:70:14:C7:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b8ae5732-d7fc-3290-9abb-e5c24f97d441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f4:2500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ec:a5:6d:76:bf:47:8d:4a:9f:a8:72:5d:84:7c:59:a3:19:
         0b:5f:d9:7e:fb:70:4f:48:9a:4a:fc:35:5e:b2:87:ea:2e:b6:
         76:b5:95:3d:c6:f1:7b:05:23:09:67:5a:4b:84:3b:82:97:ec:
         91:1b:d1:4e:92:40:cb:5a:f2:70:f9:39:79:97:6d:b3:9a:c7:
         d3:23:c9:a3:c0:47:72:c8:94:33:24:76:13:ae:f0:b6:88:c7:
         11:8b:6d:f1:7f:4a:c3:2d:49:1e:db:1f:1e:f1:35:19:b9:a0:
         a9:55:b2:fb:91:f0:e0:7d:cd:ba:d3:85:75:69:89:30:2c:08:
         92:a0:3d:d3:1f:a9:51:19:e2:5b:bf:ce:79:45:8d:da:cf:f5:
         50:7f:4d:21:74:db:6d:09:3d:bf:f9:be:79:45:13:9d:5b:34:
         c3:3f:bd:f0:1d:f5:70:02:bb:c9:79:06:0f:80:ce:c5:0e:3a:
         9b:21:74:b0:b8:83:99:7f:b0:1f:03:88:20:1b:75:ab:d6:d9:
         7b:0a:b9:86:fa:31:24:e7:74:7a:b1:02:02:df:dd:53:ef:ba:
         24:df:3f:31:68:cc:8c:6d:10:43:cd:5f:e6:dd:e9:c9:87:98:
         54:1d:f6:0f:97:a1:9f:6e:32:a1:80:16:7a:1b:a1:38:b1:d3:
         d0:92:0f:19
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JhwL1Ev601NzKy4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTMzYzY2MzUtMDY2MC00NmU4LWIwNTQtN2RiOGVhZDQ1MjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNgtVCll5gVhhXl9MDlhQ9sap2pygfL32RHu
9pvUiM/8GAwpOdLDjeyRm5NFjHMKAzMEjfFFHi+enRf7VYzmWsSLBZthNNHgni95
msedNdKhPrmmEgN9eNvmsHoqF6nCTOUaoDlql+fNT0IFpR/YMvNTUB9Alz8tvID3
KzD0U0bZ9IqsntYq2NhhISGdUOsbUFTm8TKim+y06AoLOYVK1o/cHm0NCQDduZT9
38eJyCJgPugfB0txa199eQKaHpqY1/OX9enlcvyYskqK3hXoiLpO78jdLp7bdZvA
qLuvtFKA8A2cOHkXHV8vqqmm1h6iSiQB3g31HyLKXreAuPBoWQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE32NvzVeJ5a3vxekCdhf5ZwFMcNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjhhZTU3MzItZDdmYy0z
MjkwLTlhYmItZTVjMjRmOTdkNDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPA9CUw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAjuylbXa/R41Kn6hyXYR8WaMZC1/ZfvtwT0iaSvw1XrKH6i62drWV
PcbxewUjCWdaS4Q7gpfskRvRTpJAy1rycPk5eZdts5rH0yPJo8BHcsiUMyR2E67w
tojHEYtt8X9Kwy1JHtsfHvE1GbmgqVWy+5Hw4H3NutOFdWmJMCwIkqA90x+pURni
W7/OeUWN2s/1UH9NIXTbbQk9v/m+eUUTnVs0wz+98B31cAK7yXkGD4DOxQ46myF0
sLiDmX+wHwOIIBt1q9bZewq5hvoxJOd0erECAt/dU++6JN8/MWjMjG0QQ81f5t3p
yYeYVB32D5ehn24yoYAWehuhOLHT0JIPGQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 15:20:04 2026 by rpki-client