Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/edc8c593-26f6-3eb5-bf34-48891f4158a1.roa
File:                     edc8c593-26f6-3eb5-bf34-48891f4158a1.roa (raw, json)
Hash identifier:          epLSyuRl7q7eBh7zKNc5mk1vB7A4KBOrJhKhHhVeaLw=
Subject key identifier:   E1:87:77:B6:9D:B1:09:69:84:36:2D:4A:D0:8D:D0:AF:E5:6A:0B:71
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F093D185C9D915D8D5B94C700
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/edc8c593-26f6-3eb5-bf34-48891f4158a1.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        2603:c000:1d00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:18:5c:9d:91:5d:8d:5b:94:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=3bc3bfb6-c174-41c6-bc15-539f00cb4396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f7:ce:1b:ca:d0:50:10:a8:f6:e0:f5:ac:85:
                    d8:f2:5a:8a:b6:2b:b0:d7:79:c3:a9:a6:6a:99:ee:
                    34:09:a6:ec:05:e8:1c:9a:cb:79:d7:2c:23:86:b1:
                    f6:86:fc:5c:9d:2c:b5:b5:ad:43:93:25:33:f8:6d:
                    65:d3:e0:82:90:fa:68:78:7a:10:03:08:ac:44:b9:
                    d8:81:42:35:00:98:f1:53:04:01:58:3d:86:aa:5d:
                    2e:11:db:3b:8b:7a:99:42:bd:b6:5c:f3:5a:9e:cf:
                    96:06:12:2f:15:f6:0a:a7:8a:fa:ff:c4:4a:9a:e5:
                    ca:3a:74:0e:4e:f5:41:ca:25:89:36:e5:70:d0:a0:
                    8e:f6:60:03:24:88:b5:20:db:80:c5:61:8e:92:8f:
                    5b:0d:39:e1:fc:f2:06:7e:c6:d5:44:7c:8f:0b:fc:
                    73:9d:1e:bc:4a:84:7e:c6:65:69:b8:88:34:6f:85:
                    e8:11:bf:41:22:38:a1:2d:de:c4:4e:f7:ea:bc:fc:
                    0c:d6:8b:4d:89:48:4a:d2:a7:7c:e9:30:69:ee:35:
                    67:eb:0a:63:2e:ff:8d:17:f4:5d:d2:31:a6:7c:79:
                    9d:98:a9:bf:e7:95:ca:24:77:39:bf:7a:04:aa:ac:
                    96:87:37:20:7d:72:a8:75:43:ea:a1:f2:cc:f2:5a:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:87:77:B6:9D:B1:09:69:84:36:2D:4A:D0:8D:D0:AF:E5:6A:0B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/edc8c593-26f6-3eb5-bf34-48891f4158a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:1d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:71:e1:cf:b7:b1:28:d5:b8:61:9e:50:70:7b:3a:50:26:76:
         9f:40:97:4c:23:3b:8c:72:0e:c8:7e:8d:62:46:93:9a:e3:c6:
         b2:ff:79:8b:ef:05:e3:a2:d2:6d:b3:69:2e:77:10:1d:35:20:
         4f:de:46:62:db:a2:43:40:1b:4b:b1:16:3a:6a:a0:03:60:02:
         0c:40:37:63:50:a9:9f:94:42:24:a7:d6:2c:f8:96:0d:ee:2f:
         bc:c8:d5:c2:f6:ba:4d:e9:78:cd:35:17:a4:c8:5c:8a:b6:ae:
         de:83:51:d0:e4:12:a5:eb:21:9b:35:ae:b5:43:e9:4e:55:7c:
         f1:30:63:5f:af:0d:dc:c1:65:f7:bb:a5:37:d0:4e:c8:88:ad:
         61:48:18:96:9c:45:ed:2a:f2:b3:da:99:db:ff:5f:62:64:cd:
         6e:a4:ce:4e:d2:50:e8:60:75:2f:9f:70:e6:7a:2c:4f:bc:73:
         e5:33:85:f6:df:25:62:18:7b:e2:f4:44:52:22:e3:f6:be:bd:
         0b:44:4a:be:53:ce:ac:b2:b6:c3:28:a7:6b:1b:fc:5e:50:cd:
         cc:78:2e:84:e8:b9:ab:17:78:95:ce:ed:5e:d0:e4:c7:fb:1f:
         c4:40:ce:20:41:08:f3:9e:f8:ab:26:75:56:28:1e:d8:0c:47:
         2d:d9:c7:df
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8JPRhcnZFdjVuUxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
M2JjM2JmYjYtYzE3NC00MWM2LWJjMTUtNTM5ZjAwY2I0Mzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ffOG8rQUBCo9uD1rIXY8lqKtiuw13nDqaZq
me40CabsBegcmst51ywjhrH2hvxcnSy1ta1DkyUz+G1l0+CCkPpoeHoQAwisRLnY
gUI1AJjxUwQBWD2Gql0uEds7i3qZQr22XPNans+WBhIvFfYKp4r6/8RKmuXKOnQO
TvVByiWJNuVw0KCO9mADJIi1INuAxWGOko9bDTnh/PIGfsbVRHyPC/xznR68SoR+
xmVpuIg0b4XoEb9BIjihLd7ETvfqvPwM1otNiUhK0qd86TBp7jVn6wpjLv+NF/Rd
0jGmfHmdmKm/55XKJHc5v3oEqqyWhzcgfXKodUPqofLM8lorWQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOGHd7adsQlphDYtStCN0K/lagtxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWRjOGM1OTMtMjZmNi0z
ZWI1LWJmMzQtNDg4OTFmNDE1OGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAB0w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJ3Hhz7exKNW4YZ5QcHs6UCZ2n0CXTCM7jHIOyH6NYkaTmuPGsv95
i+8F46LSbbNpLncQHTUgT95GYtuiQ0AbS7EWOmqgA2ACDEA3Y1Cpn5RCJKfWLPiW
De4vvMjVwva6Tel4zTUXpMhcirau3oNR0OQSpeshmzWutUPpTlV88TBjX68N3MFl
97ulN9BOyIitYUgYlpxF7Srys9qZ2/9fYmTNbqTOTtJQ6GB1L59w5nosT7xz5TOF
9t8lYhh74vREUiLj9r69C0RKvlPOrLK2wyinaxv8XlDNzHguhOi5qxd4lc7tXtDk
x/sfxEDOIEEI8574qyZ1Vige2AxHLdnH3w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:05:28 2026 by rpki-client