Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f1b6f64d-7e82-30f1-8ed5-c5aeea5227a6.roa
File:                     f1b6f64d-7e82-30f1-8ed5-c5aeea5227a6.roa (raw, json)
Hash identifier:          0BW6fVcXRnQpQ1nWiiLW5Rgqz78QaZNHCfEY643kCI4=
Subject key identifier:   A0:2A:FC:16:E3:9F:42:EB:D5:6B:7E:12:99:61:97:C2:11:3E:70:73
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D86954DD37C1CFABEC3364E00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f1b6f64d-7e82-30f1-8ed5-c5aeea5227a6.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        2603:c000:e00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:4d:d3:7c:1c:fa:be:c3:36:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=493df675-4c80-4ed8-bc47-19565c18e913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:ce:5e:cc:ef:36:65:78:ba:cd:18:72:7c:
                    e0:a6:bc:77:31:49:48:9c:41:de:80:ff:fa:56:54:
                    66:ff:b1:09:9d:bf:f2:2a:42:58:bc:e0:aa:a1:96:
                    72:2c:5f:fd:7a:35:54:d6:0c:e4:81:ee:d3:5e:13:
                    34:c9:ff:25:9d:28:22:29:b6:90:c6:22:37:eb:91:
                    45:ef:cf:0b:95:63:f9:12:f2:05:82:2b:91:3d:cc:
                    fd:e9:33:16:30:9d:dd:b0:cc:57:c6:e8:d8:29:18:
                    70:72:af:a1:4d:a7:06:93:57:bd:59:18:d1:d0:17:
                    44:8e:c6:cc:4f:f9:1f:ec:2a:b9:13:85:d5:ea:91:
                    d1:ff:ce:3b:46:d6:40:64:7c:d2:a2:04:76:7d:d0:
                    06:b5:93:ce:e8:21:93:76:2a:33:bd:9a:8b:ca:48:
                    a9:93:d3:3f:c2:65:b9:52:e9:f7:db:24:4b:4a:69:
                    27:7d:7a:43:86:00:ce:b6:01:91:b9:6c:28:08:6f:
                    26:e5:c9:42:45:78:04:05:35:f1:76:24:56:84:16:
                    10:fe:4d:75:ed:61:d3:5f:5d:65:18:ab:dd:9c:78:
                    dc:c5:e0:5a:6b:ea:c7:d5:0f:02:7d:cc:60:92:02:
                    9d:b7:97:e6:99:67:b8:1f:71:7e:f3:ca:3c:07:6f:
                    ef:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2A:FC:16:E3:9F:42:EB:D5:6B:7E:12:99:61:97:C2:11:3E:70:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f1b6f64d-7e82-30f1-8ed5-c5aeea5227a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9c:62:54:f2:7f:c5:a7:9d:9f:1b:c6:1b:5c:a3:80:43:37:
         4d:0b:8d:38:39:3e:92:fa:06:99:6f:a8:5a:5f:dd:66:b1:11:
         c2:27:b2:ff:db:3b:ac:44:f5:37:43:41:b1:b1:bf:f7:12:3d:
         e0:a1:00:e3:74:3d:e9:1f:d9:4f:f8:0e:7e:4d:5b:32:47:4f:
         05:dc:31:53:76:49:62:12:9b:fb:b8:c0:1a:7c:6b:6f:86:f2:
         70:8f:00:7c:00:09:37:77:68:d7:f7:86:ed:5f:a7:6b:cd:3f:
         3f:35:13:9d:30:98:dd:ef:02:f4:be:38:c6:53:9e:6a:8c:25:
         04:bf:e1:0c:b1:83:b9:5e:7e:96:e8:d7:0e:04:e3:2b:a5:73:
         51:5c:21:22:13:12:54:43:d3:93:9e:df:c2:a8:02:5b:dc:ef:
         c3:07:56:9b:1a:6f:28:55:e0:45:32:d6:0d:46:a4:83:bb:b2:
         18:37:af:8e:ec:e7:8d:c6:35:19:a5:fe:fb:f3:1f:9c:a5:46:
         59:d8:8d:eb:7b:56:c5:de:2a:f6:e6:12:8f:57:b5:79:5f:75:
         c6:c5:5a:cd:ff:6f:59:3e:c5:6f:81:bf:18:8c:60:c8:0f:95:
         c8:b1:74:fc:72:9b:7b:eb:fa:f7:a0:a2:f4:5a:6b:f0:49:b9:
         d5:f9:8a:72
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2GlU3TfBz6vsM2TgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk
NDkzZGY2NzUtNGM4MC00ZWQ4LWJjNDctMTk1NjVjMThlOTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hLOXszvNmV4us0Ycnzgprx3MUlInEHegP/6
VlRm/7EJnb/yKkJYvOCqoZZyLF/9ejVU1gzkge7TXhM0yf8lnSgiKbaQxiI365FF
788LlWP5EvIFgiuRPcz96TMWMJ3dsMxXxujYKRhwcq+hTacGk1e9WRjR0BdEjsbM
T/kf7Cq5E4XV6pHR/847RtZAZHzSogR2fdAGtZPO6CGTdiozvZqLykipk9M/wmW5
Uun32yRLSmknfXpDhgDOtgGRuWwoCG8m5clCRXgEBTXxdiRWhBYQ/k117WHTX11l
GKvdnHjcxeBaa+rH1Q8CfcxgkgKdt5fmmWe4H3F+88o8B2/vkwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKAq/Bbjn0Lr1Wt+Eplhl8IRPnBzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjFiNmY2NGQtN2U4Mi0z
MGYxLThlZDUtYzVhZWVhNTIyN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAA4w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAgpxiVPJ/xaednxvGG1yjgEM3TQuNODk+kvoGmW+oWl/dZrERwiey
/9s7rET1N0NBsbG/9xI94KEA43Q96R/ZT/gOfk1bMkdPBdwxU3ZJYhKb+7jAGnxr
b4bycI8AfAAJN3do1/eG7V+na80/PzUTnTCY3e8C9L44xlOeaowlBL/hDLGDuV5+
lujXDgTjK6VzUVwhIhMSVEPTk57fwqgCW9zvwwdWmxpvKFXgRTLWDUakg7uyGDev
juznjcY1GaX++/MfnKVGWdiN63tWxd4q9uYSj1e1eV91xsVazf9vWT7Fb4G/GIxg
yA+VyLF0/HKbe+v696Ci9Fpr8Em51fmKcg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:37:03 2026 by rpki-client