Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2981fd99-613b-37db-b745-71fff992c339.roa
File:                     2981fd99-613b-37db-b745-71fff992c339.roa (raw, json)
Hash identifier:          XcCtNUwr4jwMt85kLdIGW60FMNygmpB7twG74wH5Z1Y=
Subject key identifier:   3F:1F:34:35:68:CE:E1:56:FF:E4:87:3C:B7:7A:D2:C8:4D:15:58:1B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AFFE73E661E3A9D158ECC02A0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2981fd99-613b-37db-b745-71fff992c339.roa
Signing time:             Wed 27 Aug 2025 21:37:49 +0000
ROA not before:           Wed 27 Aug 2025 21:37:49 +0000
ROA not after:            Tue 25 Nov 2025 22:37:49 +0000
asID:                     31898
IP address blocks:        2600:2000:2110::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ff:e7:3e:66:1e:3a:9d:15:8e:cc:02:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 27 21:37:49 2025 GMT
            Not After : Nov 25 22:37:49 2025 GMT
        Subject: CN=e5bda48e-f011-47f3-9b89-212471ded598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:55:56:d9:4f:02:81:f8:dd:22:95:df:36:
                    8b:12:7e:16:45:0a:dd:03:44:00:e6:1d:9f:52:a4:
                    97:cc:ba:5c:c0:e3:3a:5c:bf:71:47:fb:e5:5c:a5:
                    be:e1:fe:57:b5:9d:48:5c:92:e0:8f:9d:9c:f5:a0:
                    d8:a5:0d:cc:43:b3:73:0d:d0:b9:c2:c7:29:14:7a:
                    fe:ca:35:de:01:fb:72:49:73:db:6f:a9:7b:83:d4:
                    6b:bf:c4:6a:e6:2b:10:60:a1:58:c8:2c:ab:da:e9:
                    66:79:7e:37:d9:f9:cf:14:4d:be:a1:6a:f6:e6:fa:
                    68:2e:bc:e4:48:5d:39:33:46:cc:4a:c7:ac:86:74:
                    d1:4f:2f:05:02:86:14:fb:d1:07:15:1e:b2:db:2d:
                    6b:f9:2c:d2:73:64:75:10:3b:e4:2f:67:f0:6e:e2:
                    cd:40:a1:bb:76:5e:a3:ec:38:35:16:18:af:5a:dd:
                    7c:1b:37:42:66:0b:67:e4:68:6a:4e:8c:a8:bd:f8:
                    ed:b6:ec:cf:d5:8f:60:0f:ff:32:2b:62:b3:1f:17:
                    d4:22:82:05:fc:65:f0:83:5b:3c:99:ac:2d:58:67:
                    60:db:28:a1:e8:14:5c:ee:d0:40:b4:7c:fa:ce:24:
                    37:ac:4c:3e:cf:6a:5a:22:74:c3:05:87:43:f6:44:
                    ad:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1F:34:35:68:CE:E1:56:FF:E4:87:3C:B7:7A:D2:C8:4D:15:58:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2981fd99-613b-37db-b745-71fff992c339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2000:2110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:35:d1:9d:c3:19:02:f3:26:b2:c7:e9:72:68:23:7d:3b:63:
         fc:66:69:40:e0:ac:fd:a9:47:83:a3:12:d0:97:87:97:17:58:
         35:0c:ab:88:c8:ac:12:28:c1:46:12:71:fd:83:92:43:c8:22:
         65:4f:5f:dd:94:fa:6c:f1:75:cd:a5:35:35:4a:1c:bf:3f:1a:
         3f:ea:53:e6:c6:f9:99:11:04:06:7d:41:08:76:8e:3e:34:d6:
         32:d1:22:2f:9c:e7:7a:9f:97:d8:b1:0b:07:e7:12:45:f6:a2:
         32:85:7c:dd:be:b0:45:b3:23:10:51:22:07:39:0a:2a:8e:05:
         b2:b2:34:fc:a8:14:e7:13:67:5a:93:44:79:ca:da:34:49:64:
         44:69:4f:2a:42:fa:d7:d0:7e:ab:f8:07:a6:f1:bb:32:24:05:
         e8:49:be:67:7a:86:b3:9b:53:38:a3:ff:94:58:28:01:26:8d:
         6a:68:83:cf:c1:cc:82:bd:29:1b:3c:52:63:62:07:2f:21:93:
         c1:05:75:08:29:fc:36:f9:cc:9d:4e:04:0b:76:4e:dd:42:d3:
         18:c5:5d:be:6e:96:80:ca:4f:9c:69:2e:cb:b2:63:e0:8d:4a:
         2f:ac:ed:6a:50:cf:80:d8:80:20:a5:7a:5f:0f:60:8a:c7:d3:
         33:a7:b7:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr/5z5mHjqdFY7MAqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDgyNzIxMzc0OVoXDTI1MTEyNTIyMzc0OVowLzEtMCsGA1UEAxMk
ZTViZGE0OGUtZjAxMS00N2YzLTliODktMjEyNDcxZGVkNTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6pVVtlPAoH43SKV3zaLEn4WRQrdA0QA5h2f
UqSXzLpcwOM6XL9xR/vlXKW+4f5XtZ1IXJLgj52c9aDYpQ3MQ7NzDdC5wscpFHr+
yjXeAftySXPbb6l7g9Rrv8Rq5isQYKFYyCyr2ulmeX432fnPFE2+oWr25vpoLrzk
SF05M0bMSseshnTRTy8FAoYU+9EHFR6y2y1r+SzSc2R1EDvkL2fwbuLNQKG7dl6j
7Dg1FhivWt18GzdCZgtn5GhqToyovfjttuzP1Y9gD/8yK2KzHxfUIoIF/GXwg1s8
mawtWGdg2yih6BRc7tBAtHz6ziQ3rEw+z2paInTDBYdD9kStHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD8fNDVozuFW/+SHPLd60shNFVgbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjk4MWZkOTktNjEzYi0z
N2RiLWI3NDUtNzFmZmY5OTJjMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAgACEQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKI10Z3DGQLzJrLH6XJoI307Y/xmaUDgrP2pR4OjEtCXh5cXWDUM
q4jIrBIowUYScf2DkkPIImVPX92U+mzxdc2lNTVKHL8/Gj/qU+bG+ZkRBAZ9QQh2
jj401jLRIi+c53qfl9ixCwfnEkX2ojKFfN2+sEWzIxBRIgc5CiqOBbKyNPyoFOcT
Z1qTRHnK2jRJZERpTypC+tfQfqv4B6bxuzIkBehJvmd6hrObUzij/5RYKAEmjWpo
g8/BzIK9KRs8UmNiBy8hk8EFdQgp/Db5zJ1OBAt2Tt1C0xjFXb5uloDKT5xpLsuy
Y+CNSi+s7WpQz4DYgCClel8PYIrH0zOntwU=
-----END CERTIFICATE-----
Generated at Thu Oct 9 00:58:31 2025 by rpki-client