Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/190e67fa-50bf-38ff-ac01-191831ce2c84.roa
File:                     190e67fa-50bf-38ff-ac01-191831ce2c84.roa (raw, json)
Hash identifier:          N0DLVt86Su2bN9z+Q7RB0+qYYg7gbDHcF7KAnEcyoZk=
Subject key identifier:   86:E9:08:08:5E:89:F0:9D:BD:C2:13:14:5A:18:A7:57:29:10:07:99
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE977360E2188E74B23CF9F80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/190e67fa-50bf-38ff-ac01-191831ce2c84.roa
Signing time:             Tue 19 Aug 2025 20:44:18 +0000
ROA not before:           Tue 19 Aug 2025 20:44:18 +0000
ROA not after:            Mon 17 Nov 2025 21:44:18 +0000
asID:                     31898
IP address blocks:        2603:c001:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:77:36:0e:21:88:e7:4b:23:cf:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 19 20:44:18 2025 GMT
            Not After : Nov 17 21:44:18 2025 GMT
        Subject: CN=333596da-e7ac-4d90-8f33-9a712c8ca914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:39:ec:39:23:ed:ee:a8:18:6c:b0:d8:b4:
                    46:35:4d:17:76:2a:94:52:98:1b:5d:0a:5d:02:4c:
                    66:8b:68:97:72:93:53:9a:06:01:6a:a4:c0:a6:f7:
                    bf:b6:09:26:5a:ab:e5:f8:ff:d0:9a:b5:3a:99:81:
                    2b:14:22:a2:df:87:80:6e:15:f2:8a:56:40:d4:0d:
                    ab:bd:30:de:27:34:4f:e8:cf:cf:c7:91:99:d6:26:
                    e4:c9:14:47:c8:ed:53:30:e9:85:dc:90:9f:8e:aa:
                    87:41:f0:44:6f:4f:a4:6a:62:55:27:c7:9a:c1:93:
                    98:6e:df:32:4a:e2:c8:e1:89:fb:e0:dc:39:2a:b7:
                    b8:81:f5:cd:f2:e3:3a:3e:2d:6a:3b:21:fd:c8:c1:
                    aa:3f:70:29:93:fa:94:db:d9:2f:61:dd:3f:77:d0:
                    0c:a7:a8:5e:72:c2:a6:11:98:04:81:d3:25:61:12:
                    dd:b0:ac:88:ec:c6:54:69:27:a5:b2:f7:b1:98:a9:
                    f8:76:d9:d6:82:57:b8:b8:67:8b:cd:a9:07:da:06:
                    cb:b3:12:7d:4e:7a:c8:4c:e3:f4:b4:d3:5e:cf:72:
                    7a:2f:da:1f:a9:5c:46:8f:30:84:93:3a:12:e3:60:
                    b2:d8:82:0d:76:e7:ce:33:26:79:93:95:7c:93:de:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E9:08:08:5E:89:F0:9D:BD:C2:13:14:5A:18:A7:57:29:10:07:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/190e67fa-50bf-38ff-ac01-191831ce2c84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:eb:96:67:89:81:39:31:44:7a:36:e8:79:5f:7d:34:b3:57:
         3b:78:2f:69:be:f8:13:18:43:c0:68:57:97:72:2d:9b:7d:82:
         e8:60:07:02:8c:24:9d:f6:ac:94:c3:1c:38:36:7b:05:3c:fa:
         09:7e:95:44:8f:e8:d7:a8:cd:65:1f:13:ca:c3:33:80:0c:9a:
         34:00:55:ee:81:3e:bd:26:ef:39:91:78:3c:40:33:7d:17:d9:
         31:2e:c0:3d:d2:2b:49:a8:32:ee:ec:2a:9c:c3:01:e2:71:44:
         c8:04:15:ce:2c:78:06:75:7c:20:f9:ce:95:81:e0:fb:99:9c:
         fa:75:e5:da:5f:af:03:ee:f8:a3:49:cb:a7:9e:29:4c:73:3f:
         ff:1f:0b:9a:8b:7f:70:a6:56:2d:92:bc:58:06:17:a5:31:5c:
         8c:04:82:2a:04:cf:e1:fb:7f:9d:16:d9:9a:07:a9:b4:f6:e8:
         80:24:61:4b:db:e9:38:7d:9c:e6:38:ab:98:05:c7:c6:1c:61:
         e0:eb:4b:2f:b2:80:c8:f4:43:0f:db:e9:64:11:c6:0a:09:55:
         ba:c1:03:47:ac:3f:e5:6d:a5:b2:cf:9a:e1:61:78:52:e6:7a:
         e3:41:60:6c:ba:73:14:c7:25:8f:d1:87:f6:1f:d5:6e:1d:f5:
         bb:79:5a:9e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErpdzYOIYjnSyPPn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDgxOTIwNDQxOFoXDTI1MTExNzIxNDQxOFowLzEtMCsGA1UEAxMk
MzMzNTk2ZGEtZTdhYy00ZDkwLThmMzMtOWE3MTJjOGNhOTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9Y57Dkj7e6oGGyw2LRGNU0XdiqUUpgbXQpd
Akxmi2iXcpNTmgYBaqTApve/tgkmWqvl+P/QmrU6mYErFCKi34eAbhXyilZA1A2r
vTDeJzRP6M/Px5GZ1ibkyRRHyO1TMOmF3JCfjqqHQfBEb0+kamJVJ8eawZOYbt8y
SuLI4Yn74Nw5Kre4gfXN8uM6Pi1qOyH9yMGqP3Apk/qU29kvYd0/d9AMp6hecsKm
EZgEgdMlYRLdsKyI7MZUaSelsvexmKn4dtnWgle4uGeLzakH2gbLsxJ9TnrITOP0
tNNez3J6L9ofqVxGjzCEkzoS42Cy2IINdufOMyZ5k5V8k96fjwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIbpCAheifCdvcITFFoYp1cpEAeZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTkwZTY3ZmEtNTBiZi0z
OGZmLWFjMDEtMTkxODMxY2UyYzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAARAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAqeuWZ4mBOTFEejboeV99NLNXO3gvab74ExhDwGhXl3Itm32C6GAH
AowknfaslMMcODZ7BTz6CX6VRI/o16jNZR8TysMzgAyaNABV7oE+vSbvOZF4PEAz
fRfZMS7APdIrSagy7uwqnMMB4nFEyAQVzix4BnV8IPnOlYHg+5mc+nXl2l+vA+74
o0nLp54pTHM//x8Lmot/cKZWLZK8WAYXpTFcjASCKgTP4ft/nRbZmgeptPbogCRh
S9vpOH2c5jirmAXHxhxh4OtLL7KAyPRDD9vpZBHGCglVusEDR6w/5W2lss+a4WF4
UuZ640FgbLpzFMclj9GH9h/Vbh31u3lang==
-----END CERTIFICATE-----
Generated at Wed Aug 20 03:33:43 2025 by rpki-client