Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccef90dc-9587-33ab-93f0-769b0aadf960.roa
File:                     ccef90dc-9587-33ab-93f0-769b0aadf960.roa (raw, json)
Hash identifier:          fRf1jKbliH3H5Xbjx1RFpEQS/JltoZJXPdfLtfsUN7A=
Subject key identifier:   D9:62:C0:7E:05:E6:DF:4A:77:CA:46:E8:7F:C2:56:91:6D:46:E6:C3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B377AD2F0996B58612BD62700
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccef90dc-9587-33ab-93f0-769b0aadf960.roa
Signing time:             Tue 16 Sep 2025 19:24:38 +0000
ROA not before:           Tue 16 Sep 2025 19:24:38 +0000
ROA not after:            Mon 15 Dec 2025 20:24:38 +0000
asID:                     54253
IP address blocks:        2603:c0f4::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:37:7a:d2:f0:99:6b:58:61:2b:d6:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 16 19:24:38 2025 GMT
            Not After : Dec 15 20:24:38 2025 GMT
        Subject: CN=68884750-e841-4292-b0ec-424b4aaf5a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:da:15:87:ca:f6:4f:97:b3:5c:c6:79:bd:63:
                    63:10:2d:22:ce:59:9d:a5:7d:1d:4b:0d:06:a5:73:
                    84:9d:15:70:c5:59:cb:bb:d6:4d:c1:c8:38:3e:3f:
                    04:24:06:72:7f:e3:01:a7:1e:e7:db:72:69:23:b4:
                    53:f2:dd:70:2e:98:fc:e2:03:f0:82:8b:3c:73:ba:
                    65:18:40:c5:cd:70:01:11:83:ef:af:1b:2d:06:7f:
                    45:c6:66:b5:12:ef:76:ac:3b:44:22:a7:03:14:87:
                    6a:4e:1c:6b:91:fd:f7:ef:20:01:d0:a0:8e:33:0c:
                    0d:6a:ed:18:b9:16:52:00:21:35:60:0d:d9:1f:cc:
                    40:d2:8e:22:94:ed:a6:18:8b:0e:7d:d5:22:74:25:
                    6f:3c:db:93:b6:24:62:2a:5c:5f:1a:10:04:7e:d1:
                    9f:bf:64:0e:4e:2c:ba:93:05:67:24:d9:32:af:eb:
                    c9:ab:dc:70:c4:8d:2c:ab:b1:77:99:39:a5:1d:4a:
                    a3:e5:37:59:eb:52:5f:49:75:c6:ad:fa:fd:2a:60:
                    d1:11:92:f8:87:07:fb:16:37:4b:11:87:75:f5:a2:
                    ea:25:78:0f:8e:27:53:e8:f8:81:bd:78:ca:27:a4:
                    89:30:65:a4:10:49:e4:21:22:3e:d1:d7:be:08:19:
                    d9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:62:C0:7E:05:E6:DF:4A:77:CA:46:E8:7F:C2:56:91:6D:46:E6:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccef90dc-9587-33ab-93f0-769b0aadf960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:af:0b:d5:34:47:f1:1b:95:32:5c:9b:90:e7:d0:4b:3e:22:
         75:8a:1c:c1:e9:ea:4b:d1:7b:dd:bd:15:c0:90:a3:04:dc:a5:
         0e:aa:25:d5:cc:6e:7c:b2:d0:9f:bb:80:72:ae:f0:a0:3e:95:
         9d:21:14:5d:63:7f:85:29:cf:ec:0a:3a:f3:ce:8b:aa:13:4a:
         40:6d:9a:95:a7:9c:c7:80:dc:7a:43:7a:a4:4b:ab:02:f4:a1:
         ae:f5:6a:d3:cf:b8:93:e9:1b:51:11:88:63:89:9b:23:01:dc:
         0a:5b:d5:e8:9b:2b:eb:4f:a3:5f:73:7d:7c:9d:88:53:ed:eb:
         7f:a8:1a:83:29:aa:8c:02:44:b9:cf:f6:08:6e:bf:57:52:b9:
         78:58:f6:00:7b:cf:aa:73:d1:eb:85:43:4f:61:85:c8:20:ee:
         20:92:f4:20:98:4b:ab:96:5c:8a:b5:d1:e1:75:da:d9:a4:e6:
         98:09:d9:a4:ac:fd:4c:c9:12:89:8a:a5:5d:98:d1:62:64:62:
         ec:26:ef:9c:9d:28:bb:75:67:95:bb:f8:ce:22:a8:25:d1:26:
         cb:f7:27:1e:cb:74:c9:40:08:7d:8a:ee:b9:f1:f8:e3:5c:ca:
         71:30:5f:76:54:a9:f3:93:0b:01:d1:7b:42:4a:6d:30:8e:66:
         18:25:14:8f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs3etLwmWtYYSvWJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDkxNjE5MjQzOFoXDTI1MTIxNTIwMjQzOFowLzEtMCsGA1UEAxMk
Njg4ODQ3NTAtZTg0MS00MjkyLWIwZWMtNDI0YjRhYWY1YTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9oVh8r2T5ezXMZ5vWNjEC0izlmdpX0dSw0G
pXOEnRVwxVnLu9ZNwcg4Pj8EJAZyf+MBpx7n23JpI7RT8t1wLpj84gPwgos8c7pl
GEDFzXABEYPvrxstBn9Fxma1Eu92rDtEIqcDFIdqThxrkf337yAB0KCOMwwNau0Y
uRZSACE1YA3ZH8xA0o4ilO2mGIsOfdUidCVvPNuTtiRiKlxfGhAEftGfv2QOTiy6
kwVnJNkyr+vJq9xwxI0sq7F3mTmlHUqj5TdZ61JfSXXGrfr9KmDREZL4hwf7FjdL
EYd19aLqJXgPjidT6PiBvXjKJ6SJMGWkEEnkISI+0de+CBnZoQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNliwH4F5t9Kd8pG6H/CVpFtRubDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2NlZjkwZGMtOTU4Ny0z
M2FiLTkzZjAtNzY5YjBhYWRmOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPA9AAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAp68L1TRH8RuVMlybkOfQSz4idYocwenqS9F73b0VwJCjBNylDqol
1cxufLLQn7uAcq7woD6VnSEUXWN/hSnP7Ao6886LqhNKQG2alaecx4DcekN6pEur
AvShrvVq08+4k+kbURGIY4mbIwHcClvV6Jsr60+jX3N9fJ2IU+3rf6gagymqjAJE
uc/2CG6/V1K5eFj2AHvPqnPR64VDT2GFyCDuIJL0IJhLq5ZcirXR4XXa2aTmmAnZ
pKz9TMkSiYqlXZjRYmRi7CbvnJ0ou3Vnlbv4ziKoJdEmy/cnHst0yUAIfYruufH4
41zKcTBfdlSp85MLAdF7QkptMI5mGCUUjw==
-----END CERTIFICATE-----
Generated at Thu Oct 9 03:11:01 2025 by rpki-client