Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3efc001-0ff7-3668-8850-0fa0180cede1.roa
File:                     f3efc001-0ff7-3668-8850-0fa0180cede1.roa (raw, json)
Hash identifier:          KrQlw7twz6pdZbcZrQGENBcoJV85jRt74E3rtpHVin4=
Subject key identifier:   F9:8C:8A:1B:56:47:9D:09:AA:A9:1A:3D:D1:DF:2F:94:52:A6:75:5B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F498B4DD3F6C979589F14F0C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3efc001-0ff7-3668-8850-0fa0180cede1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0c4::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:4d:d3:f6:c9:79:58:9f:14:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5a261643-d5ba-44b5-ab5a-64465d0c286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:0f:69:b5:5f:d4:74:2d:b1:ff:2f:98:32:
                    6a:96:01:29:8c:b8:96:15:94:40:42:4a:44:06:e8:
                    d7:f4:c2:57:cd:a7:04:20:ab:81:0a:45:fe:7a:02:
                    3a:78:85:33:69:eb:7c:12:4c:e0:8d:31:af:fb:70:
                    cf:3c:36:53:ad:53:6f:b7:0e:e9:c4:68:ec:8f:ff:
                    62:99:5f:d4:1b:e8:22:c7:ac:52:08:1b:95:73:08:
                    6e:7f:6c:ce:71:c2:ab:ed:2d:1f:94:0e:5c:ef:ef:
                    1b:90:0b:66:bf:66:7e:9a:3f:9d:50:37:33:c0:db:
                    10:a5:eb:d2:bc:d7:62:f6:20:52:78:c3:07:94:20:
                    ca:44:19:b6:25:87:4e:39:84:ff:4c:ab:8e:ae:b3:
                    32:5e:0c:97:c9:a3:00:9f:e9:c0:43:d0:d6:41:b7:
                    89:df:ce:b0:44:87:ac:46:48:30:5d:35:07:ab:05:
                    0c:b3:97:d0:ae:21:3f:6c:05:cb:27:17:5a:05:c3:
                    9d:1b:40:cc:35:7b:bb:7e:f9:00:a1:5a:5e:a4:2e:
                    8b:c6:17:ec:1b:b7:50:c0:72:96:ee:be:4d:e2:ec:
                    44:1e:6c:05:1d:15:46:48:21:96:51:18:41:82:b3:
                    8f:b0:39:ed:07:4e:b3:01:de:59:07:8d:49:1f:9d:
                    56:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8C:8A:1B:56:47:9D:09:AA:A9:1A:3D:D1:DF:2F:94:52:A6:75:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3efc001-0ff7-3668-8850-0fa0180cede1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0c4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:62:de:10:07:a0:cd:65:bd:94:43:d5:8d:ec:f6:0f:e2:91:
         4c:40:ee:cd:30:c6:9c:aa:6a:85:3f:37:65:c8:56:64:3c:1d:
         c7:46:a5:b0:67:3c:02:ad:bc:f3:dc:87:00:4e:28:fb:93:45:
         92:70:6a:d3:7d:02:2e:9d:70:6c:f0:d0:41:74:5b:4a:42:f4:
         78:a2:e9:e8:0c:88:5c:21:43:fd:e5:7c:5e:89:1c:ad:5d:13:
         1e:d7:f7:ce:28:b1:f1:9f:37:ec:fe:93:88:ac:a2:d6:f8:a5:
         61:37:f3:e8:74:5e:d7:36:dd:39:62:33:93:b3:02:1d:e6:30:
         35:a1:39:af:d7:d9:95:85:49:ff:05:fe:ae:33:40:5d:b5:77:
         e3:5f:1f:89:05:f9:d0:a9:94:5d:e3:1c:00:4f:1f:9d:63:52:
         d1:8d:33:7d:3b:80:fb:c1:0a:be:c8:86:d0:56:7b:9b:df:bc:
         86:e7:7c:bf:c4:7a:56:0b:5a:b5:83:9f:8f:6b:c7:2e:8f:f7:
         b4:29:08:02:59:c5:09:5f:64:c5:43:10:bd:d1:6e:52:35:63:
         ab:b3:ca:6b:57:ad:36:69:98:fd:ca:9b:ed:e3:4b:40:b8:d1:
         71:e2:ed:94:37:fe:7a:3e:cf:a7:b8:6f:27:df:58:67:10:33:
         a5:4a:9e:bb
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Ji03T9sl5WJ8U8MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWEyNjE2NDMtZDViYS00NGI1LWFiNWEtNjQ0NjVkMGMyODZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbwPabVf1HQtsf8vmDJqlgEpjLiWFZRAQkpE
BujX9MJXzacEIKuBCkX+egI6eIUzaet8EkzgjTGv+3DPPDZTrVNvtw7pxGjsj/9i
mV/UG+gix6xSCBuVcwhuf2zOccKr7S0flA5c7+8bkAtmv2Z+mj+dUDczwNsQpevS
vNdi9iBSeMMHlCDKRBm2JYdOOYT/TKuOrrMyXgyXyaMAn+nAQ9DWQbeJ386wRIes
RkgwXTUHqwUMs5fQriE/bAXLJxdaBcOdG0DMNXu7fvkAoVpepC6LxhfsG7dQwHKW
7r5N4uxEHmwFHRVGSCGWURhBgrOPsDntB06zAd5ZB41JH51WvwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPmMihtWR50JqqkaPdHfL5RSpnVbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjNlZmMwMDEtMGZmNy0z
NjY4LTg4NTAtMGZhMDE4MGNlZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAxAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVmLeEAegzWW9lEPVjez2D+KRTEDuzTDGnKpqhT83ZchWZDwdx0al
sGc8Aq2889yHAE4o+5NFknBq030CLp1wbPDQQXRbSkL0eKLp6AyIXCFD/eV8Xokc
rV0THtf3ziix8Z837P6TiKyi1vilYTfz6HRe1zbdOWIzk7MCHeYwNaE5r9fZlYVJ
/wX+rjNAXbV3418fiQX50KmUXeMcAE8fnWNS0Y0zfTuA+8EKvsiG0FZ7m9+8hud8
v8R6VgtatYOfj2vHLo/3tCkIAlnFCV9kxUMQvdFuUjVjq7PKa1etNmmY/cqb7eNL
QLjRceLtlDf+ej7Pp7hvJ99YZxAzpUqeuw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:25:24 2026 by rpki-client