Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8142772-a75d-3ac1-b237-a9aac0d45d2f.roa
File:                     e8142772-a75d-3ac1-b237-a9aac0d45d2f.roa (raw, json)
Hash identifier:          +UCD9FDLaUdCFDRYznR3qqOm4hFnhnOxncz7lU99g28=
Subject key identifier:   1F:15:0A:DD:A9:E8:1F:AB:1A:F0:86:8A:3A:C3:3B:B6:51:1F:CB:18
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F498A0125BD70E1264120B500
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8142772-a75d-3ac1-b237-a9aac0d45d2f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0bc:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:01:25:bd:70:e1:26:41:20:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f0d6f268-bb15-4abc-ab9f-9fa60d0b76b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:83:3f:68:68:84:1b:60:ab:88:ed:45:18:bc:
                    cd:d7:84:16:fd:3b:cc:85:78:b7:aa:db:c9:28:5a:
                    89:44:34:bd:26:64:71:a9:1e:57:89:ff:01:ea:38:
                    a5:88:38:aa:f9:f0:40:e3:f9:43:d1:82:3c:36:62:
                    fc:d2:6a:1f:5b:ce:a5:bf:14:e1:f7:a3:14:a4:72:
                    41:52:60:82:54:e5:b4:01:e1:c4:24:c1:6f:93:31:
                    5d:a5:66:96:3a:dd:c2:81:e8:81:57:f0:99:cc:36:
                    14:e2:6b:cf:95:bc:58:92:82:ec:17:86:ad:8d:95:
                    36:86:b2:a7:0e:50:ab:8a:94:23:f7:0d:e7:4c:ce:
                    bb:5c:cc:f5:f4:6f:f8:9b:8c:b7:c0:9b:70:df:a6:
                    d6:cd:a2:4a:ec:9e:7d:59:a1:9a:de:46:4b:b6:5b:
                    65:ea:ea:55:8b:73:de:b6:87:53:12:a2:fa:03:64:
                    19:2f:29:98:d7:63:8e:68:5a:d2:bc:a4:e2:fe:3e:
                    1b:b5:60:9e:f2:7b:e3:60:a4:27:15:5c:d1:44:bd:
                    f8:42:5f:f8:ea:83:7a:0a:68:17:ed:fd:6e:53:2e:
                    20:21:ed:96:60:5c:a7:99:c6:03:7a:82:f5:4b:f3:
                    5f:83:de:69:3e:3e:c8:24:da:17:5e:9d:7e:b6:c8:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:15:0A:DD:A9:E8:1F:AB:1A:F0:86:8A:3A:C3:3B:B6:51:1F:CB:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8142772-a75d-3ac1-b237-a9aac0d45d2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0bc:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:96:3d:a6:63:a4:c7:e7:88:bc:6d:fe:f1:bf:92:48:08:fa:
         d4:fc:af:d1:28:5d:9c:85:db:d0:08:c9:85:e7:ef:c3:29:b5:
         be:e5:4e:99:19:1d:08:d1:7f:3f:be:9b:ba:56:94:9a:1d:b7:
         07:0d:69:56:30:25:e5:7f:c6:4f:a0:17:ce:b0:0a:3b:93:d3:
         fc:18:a1:0c:34:0e:31:03:30:41:71:df:75:0e:9d:b5:28:d5:
         83:32:ce:44:85:03:4d:26:c9:d3:ab:17:0d:ae:38:9c:e1:a3:
         e7:c5:14:31:9c:58:67:b0:ce:68:ec:b8:8d:c0:04:15:26:18:
         59:a1:96:fe:83:18:2e:cf:1a:08:01:27:19:7b:d5:37:af:bf:
         f3:8b:3f:7f:92:69:2a:86:74:52:b9:51:b8:44:7b:9c:85:a0:
         f8:c5:25:09:6f:53:43:ab:65:22:06:f2:11:e4:94:f4:61:d1:
         f7:9e:36:2b:c1:d2:ca:25:ef:ea:8b:04:e7:82:31:7a:58:d0:
         4d:26:d7:8d:71:7b:81:46:76:60:e4:35:b4:31:00:51:bf:5b:
         45:6d:aa:dc:90:5e:bd:14:bf:6b:95:0f:24:90:a1:d3:26:bc:
         51:1c:29:be:18:77:b3:0d:ff:5a:1d:04:65:0c:56:99:4b:a4:
         a7:e0:5c:88
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JigElvXDhJkEgtQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjBkNmYyNjgtYmIxNS00YWJjLWFiOWYtOWZhNjBkMGI3NmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oM/aGiEG2CriO1FGLzN14QW/TvMhXi3qtvJ
KFqJRDS9JmRxqR5Xif8B6jiliDiq+fBA4/lD0YI8NmL80mofW86lvxTh96MUpHJB
UmCCVOW0AeHEJMFvkzFdpWaWOt3CgeiBV/CZzDYU4mvPlbxYkoLsF4atjZU2hrKn
DlCripQj9w3nTM67XMz19G/4m4y3wJtw36bWzaJK7J59WaGa3kZLtltl6upVi3Pe
todTEqL6A2QZLymY12OOaFrSvKTi/j4btWCe8nvjYKQnFVzRRL34Ql/46oN6CmgX
7f1uUy4gIe2WYFynmcYDeoL1S/Nfg95pPj7IJNoXXp1+tsjTgwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFB8VCt2p6B+rGvCGijrDO7ZRH8sYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTgxNDI3NzItYTc1ZC0z
YWMxLWIyMzctYTlhYWMwZDQ1ZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAvAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQJY9pmOkx+eIvG3+8b+SSAj61Pyv0ShdnIXb0AjJhefvwym1vuVO
mRkdCNF/P76bulaUmh23Bw1pVjAl5X/GT6AXzrAKO5PT/BihDDQOMQMwQXHfdQ6d
tSjVgzLORIUDTSbJ06sXDa44nOGj58UUMZxYZ7DOaOy4jcAEFSYYWaGW/oMYLs8a
CAEnGXvVN6+/84s/f5JpKoZ0UrlRuER7nIWg+MUlCW9TQ6tlIgbyEeSU9GHR9542
K8HSyiXv6osE54IxeljQTSbXjXF7gUZ2YOQ1tDEAUb9bRW2q3JBevRS/a5UPJJCh
0ya8URwpvhh3sw3/Wh0EZQxWmUukp+BciA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:05:31 2026 by rpki-client