Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d31eb2ce-198c-3678-9792-7ea2b3eeca21.roa
File:                     d31eb2ce-198c-3678-9792-7ea2b3eeca21.roa (raw, json)
Hash identifier:          xmswNo+2gjoGeqn/NREe3GwhSbvi6tgCFik/ZDim7C0=
Subject key identifier:   FD:87:87:98:19:8E:02:07:90:4A:52:C0:AC:94:88:F1:84:22:44:F5
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AFD4443DB8E14B30E678C96E0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d31eb2ce-198c-3678-9792-7ea2b3eeca21.roa
Signing time:             Tue 26 Aug 2025 22:57:49 +0000
ROA not before:           Tue 26 Aug 2025 22:57:49 +0000
ROA not after:            Mon 24 Nov 2025 23:57:49 +0000
asID:                     31898
IP address blocks:        2603:c002:2400::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fd:44:43:db:8e:14:b3:0e:67:8c:96:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 26 22:57:49 2025 GMT
            Not After : Nov 24 23:57:49 2025 GMT
        Subject: CN=36c88448-2319-47c6-8faa-ce62919d082c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:e0:cc:11:fc:e2:3d:84:0c:7f:13:f6:2a:
                    a7:a5:3d:c1:c2:ed:11:20:83:f0:8d:ff:d0:8c:6e:
                    75:aa:d9:6e:88:ce:f9:95:7b:fb:d2:4e:c9:fd:70:
                    10:52:30:68:eb:fa:28:88:b8:24:65:cb:da:a3:4f:
                    2f:d3:71:0f:bc:5d:1d:a7:45:36:17:ab:5d:8f:0b:
                    c9:9b:d5:65:d5:9d:41:56:6c:78:d0:eb:a1:c0:b2:
                    da:1c:d2:4d:fd:7b:46:d4:1b:1b:c8:44:5c:27:de:
                    5a:83:e4:15:b3:cc:03:a4:30:d7:e3:ec:46:be:33:
                    32:14:fc:9a:ca:d2:c1:17:4d:4a:d4:ef:76:da:af:
                    d6:ed:30:ff:fa:6f:63:29:59:53:2e:37:ec:f6:67:
                    6a:65:20:14:bb:f4:d1:82:b4:89:bb:86:c2:ad:92:
                    69:7f:e5:e9:f2:ce:53:cc:2b:5c:6e:52:ad:a6:f3:
                    76:34:d1:91:e3:bc:52:21:cf:da:72:52:45:04:61:
                    27:0a:da:1a:2a:3b:3a:7b:cd:d1:10:65:b2:06:fa:
                    57:ad:b3:0f:f0:50:ce:bd:a0:96:48:0c:b0:9b:0a:
                    e0:9d:b4:8e:62:4b:3b:0c:7b:5d:59:3b:42:46:1e:
                    f9:69:ec:5d:63:01:81:22:0c:bf:8b:c4:4e:a5:37:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:87:87:98:19:8E:02:07:90:4A:52:C0:AC:94:88:F1:84:22:44:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d31eb2ce-198c-3678-9792-7ea2b3eeca21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:2400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:35:44:13:6c:8e:78:c3:81:ce:21:b3:47:1b:4e:16:1e:5f:
         6e:84:b1:4c:a7:ee:9e:b1:b3:ac:82:b5:94:97:c7:d1:16:69:
         b1:d3:62:7b:50:39:1c:b5:f9:95:ac:5b:c5:bd:76:a4:4d:7d:
         7f:3b:0d:48:4e:77:22:e6:7b:5e:17:62:8c:40:ce:7b:30:69:
         17:1c:30:86:1a:03:9a:8e:0a:17:aa:1d:84:61:15:d1:08:c2:
         7a:47:9e:59:3d:86:5c:c6:92:e8:e3:7c:98:53:e1:32:d7:2b:
         ad:b6:65:78:09:65:eb:c5:5f:df:5a:dc:b0:a7:16:54:86:2e:
         b5:fe:c8:18:aa:21:d8:3b:5e:60:41:e6:b3:e4:f5:7d:af:68:
         1d:4d:35:ae:cf:1b:c5:ba:1d:b2:c8:1c:e4:83:e8:cd:98:82:
         bd:0a:34:12:e0:2a:be:09:b8:76:67:90:0f:fb:3c:d7:31:f8:
         76:15:52:c1:0b:0b:19:29:8a:0a:cd:29:0f:44:86:9d:70:d7:
         bb:fd:9e:85:7f:64:dc:27:62:ed:bf:b4:d1:c7:c0:fe:11:a0:
         90:e0:c3:96:9f:86:11:87:cf:a7:a7:74:7c:7e:a6:92:23:ec:
         1b:57:bb:bd:76:11:a0:57:27:b2:82:ed:88:75:e8:b6:47:3f:
         bc:3c:fc:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr9REPbjhSzDmeMluAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDgyNjIyNTc0OVoXDTI1MTEyNDIzNTc0OVowLzEtMCsGA1UEAxMk
MzZjODg0NDgtMjMxOS00N2M2LThmYWEtY2U2MjkxOWQwODJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTfgzBH84j2EDH8T9iqnpT3Bwu0RIIPwjf/Q
jG51qtluiM75lXv70k7J/XAQUjBo6/ooiLgkZcvao08v03EPvF0dp0U2F6tdjwvJ
m9Vl1Z1BVmx40OuhwLLaHNJN/XtG1BsbyERcJ95ag+QVs8wDpDDX4+xGvjMyFPya
ytLBF01K1O922q/W7TD/+m9jKVlTLjfs9mdqZSAUu/TRgrSJu4bCrZJpf+Xp8s5T
zCtcblKtpvN2NNGR47xSIc/aclJFBGEnCtoaKjs6e83REGWyBvpXrbMP8FDOvaCW
SAywmwrgnbSOYks7DHtdWTtCRh75aexdYwGBIgy/i8ROpTds0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP2Hh5gZjgIHkEpSwKyUiPGEIkT1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDMxZWIyY2UtMTk4Yy0z
Njc4LTk3OTItN2VhMmIzZWVjYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAAiQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGM1RBNsjnjDgc4hs0cbThYeX26EsUyn7p6xs6yCtZSXx9EWabHT
YntQORy1+ZWsW8W9dqRNfX87DUhOdyLme14XYoxAznswaRccMIYaA5qOCheqHYRh
FdEIwnpHnlk9hlzGkujjfJhT4TLXK622ZXgJZevFX99a3LCnFlSGLrX+yBiqIdg7
XmBB5rPk9X2vaB1NNa7PG8W6HbLIHOSD6M2Ygr0KNBLgKr4JuHZnkA/7PNcx+HYV
UsELCxkpigrNKQ9Ehp1w17v9noV/ZNwnYu2/tNHHwP4RoJDgw5afhhGHz6endHx+
ppIj7BtXu712EaBXJ7KC7Yh16LZHP7w8/No=
-----END CERTIFICATE-----
Generated at Thu Oct 9 00:58:32 2025 by rpki-client