Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b284a7b-4d31-3a78-8c77-35e8bf6a4fd2.roa
File:                     2b284a7b-4d31-3a78-8c77-35e8bf6a4fd2.roa (raw, json)
Hash identifier:          dJ2oJ/FrkPfJboHlVlsVetOLo8D6z5di74wQI5YhKdo=
Subject key identifier:   41:94:94:E9:2F:24:75:81:0B:37:0F:EB:B4:68:58:EA:4E:CF:E6:0C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E37648C63B2A29D669C114280
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b284a7b-4d31-3a78-8c77-35e8bf6a4fd2.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0b9::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:8c:63:b2:a2:9d:66:9c:11:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=32a6540a-6e55-4fa9-beed-23397df2cfc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:d6:83:94:64:eb:3e:95:18:97:2e:9f:1a:
                    ac:00:8e:71:69:65:f5:58:d6:58:60:2d:48:ef:ac:
                    68:58:f6:3a:e1:aa:c7:79:68:c7:3b:7e:a7:c6:70:
                    4f:7c:cc:20:8b:3b:ce:49:5d:55:56:e8:90:97:09:
                    a5:8e:70:56:f2:10:88:cb:9e:c9:72:f1:91:fa:9e:
                    16:2a:49:b2:97:4f:63:a6:fd:e6:ea:5b:96:9b:d1:
                    d6:ec:6e:8f:eb:8f:3f:1a:a4:e2:5b:07:23:4a:8f:
                    ef:79:c1:b6:33:60:94:8e:e9:97:fc:b5:06:04:14:
                    a3:7c:9e:ad:7c:f8:ff:b5:04:c4:3a:9a:da:46:af:
                    ce:7d:21:d6:43:4c:2a:65:6e:43:0d:49:e6:f9:c9:
                    a3:1e:e9:3d:b3:d2:72:06:06:bc:ba:39:eb:cc:0b:
                    5b:25:3e:f9:06:01:7f:09:0a:0f:8e:5c:ae:f8:80:
                    7c:8f:cd:b1:ed:fe:dd:d9:d5:b0:40:20:45:4f:97:
                    48:d4:b6:43:9e:cd:a2:db:21:70:8a:f1:44:36:67:
                    c3:c3:2e:5e:21:f3:9a:22:e0:69:aa:36:fa:01:bf:
                    55:8e:f4:3e:f6:67:f2:50:13:09:c4:08:5c:d6:8e:
                    21:41:06:9e:f2:8d:07:5e:66:45:18:64:79:8b:d3:
                    7c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:94:94:E9:2F:24:75:81:0B:37:0F:EB:B4:68:58:EA:4E:CF:E6:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b284a7b-4d31-3a78-8c77-35e8bf6a4fd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0b9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:00:13:f9:c2:50:c1:4d:e8:b7:1b:83:7a:d2:12:e6:b9:e7:
         72:35:c7:29:55:07:13:aa:30:62:03:2c:a5:1f:6d:8c:11:ef:
         18:1b:96:c2:84:16:6c:7f:01:d2:9e:f5:8c:ab:9b:af:d3:95:
         d3:ad:97:52:25:a9:14:cc:a7:bf:b5:10:cf:e4:bc:b9:4d:29:
         86:40:b9:bc:69:bf:70:14:f4:68:6d:1f:e0:d0:a1:f6:39:8d:
         47:d6:fb:74:ff:cd:4d:cf:92:3b:25:8c:19:02:70:cc:9f:04:
         6c:c3:a2:bd:c3:7e:a4:91:d3:e2:00:6c:b1:67:da:63:01:5c:
         a6:99:74:d2:f9:df:11:a9:05:80:4b:52:ea:00:7e:29:e8:aa:
         e2:bd:e9:2a:d1:72:3a:4f:28:8d:49:53:33:31:40:85:54:2b:
         cf:36:66:92:e6:25:5b:e7:a6:f1:87:b9:1d:d0:66:69:b8:5b:
         5d:77:eb:88:d0:bc:4a:eb:ad:5f:db:16:97:d7:1b:ed:a0:85:
         ec:5e:f5:a1:1a:98:7f:48:9b:3f:e0:16:b4:f7:69:db:31:b1:
         bb:e2:c3:49:1e:b6:78:96:f7:fa:d9:1b:1f:3c:36:0b:52:d6:
         04:e0:23:33:82:5c:35:f0:64:be:e5:9c:3e:56:33:b4:32:ea:
         77:a7:bc:2c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE43ZIxjsqKdZpwRQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
MzJhNjU0MGEtNmU1NS00ZmE5LWJlZWQtMjMzOTdkZjJjZmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO7Wg5Rk6z6VGJcunxqsAI5xaWX1WNZYYC1I
76xoWPY64arHeWjHO36nxnBPfMwgizvOSV1VVuiQlwmljnBW8hCIy57JcvGR+p4W
Kkmyl09jpv3m6luWm9HW7G6P648/GqTiWwcjSo/vecG2M2CUjumX/LUGBBSjfJ6t
fPj/tQTEOpraRq/OfSHWQ0wqZW5DDUnm+cmjHuk9s9JyBga8ujnrzAtbJT75BgF/
CQoPjlyu+IB8j82x7f7d2dWwQCBFT5dI1LZDns2i2yFwivFENmfDwy5eIfOaIuBp
qjb6Ab9VjvQ+9mfyUBMJxAhc1o4hQQae8o0HXmZFGGR5i9N80wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEGUlOkvJHWBCzcP67RoWOpOz+YMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmIyODRhN2ItNGQzMS0z
YTc4LThjNzctMzVlOGJmNmE0ZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAuQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAngAT+cJQwU3otxuDetIS5rnncjXHKVUHE6owYgMspR9tjBHvGBuW
woQWbH8B0p71jKubr9OV062XUiWpFMynv7UQz+S8uU0phkC5vGm/cBT0aG0f4NCh
9jmNR9b7dP/NTc+SOyWMGQJwzJ8EbMOivcN+pJHT4gBssWfaYwFcppl00vnfEakF
gEtS6gB+Keiq4r3pKtFyOk8ojUlTMzFAhVQrzzZmkuYlW+em8Ye5HdBmabhbXXfr
iNC8SuutX9sWl9cb7aCF7F71oRqYf0ibP+AWtPdp2zGxu+LDSR62eJb3+tkbHzw2
C1LWBOAjM4JcNfBkvuWcPlYztDLqd6e8LA==
-----END CERTIFICATE-----
Generated at Mon Jul 13 05:51:08 2026 by rpki-client