Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/57a88550-dd9e-3bb3-8e14-2504398298fa.roa
File:                     57a88550-dd9e-3bb3-8e14-2504398298fa.roa (raw, json)
Hash identifier:          u9tHfdP/hMNYtnkluJhqbNJ8DoYw8CUh3aikXbiQ54E=
Subject key identifier:   AA:18:43:FD:DC:3F:C2:78:AB:FC:50:4C:F7:10:BD:EB:62:21:A5:46
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD78B2179DB98EFC712FADAE0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/57a88550-dd9e-3bb3-8e14-2504398298fa.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     54253
IP address blocks:        2603:c0fd:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:21:79:db:98:ef:c7:12:fa:da:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=0eab0fe8-0f3c-48e8-98a5-8a95ced63027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:f1:50:16:16:f0:75:0e:32:36:a5:13:c1:
                    bf:29:64:de:6e:c0:6a:fc:c4:d6:79:62:07:43:6f:
                    86:87:35:db:5e:42:27:3a:aa:d7:83:ad:3f:ae:ff:
                    31:db:3e:74:bb:83:1a:f2:8d:e2:3e:4f:fc:dc:2c:
                    60:16:c0:e0:05:a9:ca:0e:39:20:84:81:65:e6:a5:
                    eb:02:df:92:d0:bd:97:e8:51:c4:6e:24:ec:23:ee:
                    46:4f:1b:8e:05:c6:b5:c2:52:c5:28:2f:95:41:47:
                    26:2f:b1:45:b3:1f:d2:ed:5b:17:13:38:33:c9:3a:
                    11:f7:d0:12:2b:dd:d4:ad:6a:e1:f8:bc:1a:a6:53:
                    00:70:68:74:c5:25:04:6d:41:ed:0e:dd:99:79:76:
                    61:5b:e7:be:4d:1e:7e:fd:8b:49:26:f1:af:ed:45:
                    59:ec:fc:fe:02:00:55:fe:a8:05:fd:18:02:4f:ce:
                    09:8e:38:95:53:4a:28:24:f8:04:54:ad:98:8e:40:
                    c9:b6:42:20:46:35:a6:f1:f3:22:4f:e7:4a:f5:6a:
                    39:0b:05:c3:3b:a2:bb:19:e0:81:45:58:43:26:6e:
                    1f:1d:10:1a:53:8f:28:f7:a6:0f:b4:11:b0:86:7b:
                    57:77:b1:34:99:49:1c:93:5f:eb:2d:7f:6d:c4:a6:
                    4b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:18:43:FD:DC:3F:C2:78:AB:FC:50:4C:F7:10:BD:EB:62:21:A5:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/57a88550-dd9e-3bb3-8e14-2504398298fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0fd:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:fb:2b:2e:f4:f8:a5:3b:b4:9d:6b:81:87:66:eb:f8:8a:52:
         05:09:4e:92:c3:55:b8:87:7a:f4:a9:e4:b7:5f:bc:eb:c4:4e:
         f4:46:23:b6:9d:dc:d4:70:8c:8d:41:93:98:b5:ab:8e:94:57:
         78:a9:8a:a5:e8:c1:4a:5d:16:63:e0:4e:7b:fe:4a:bf:66:9c:
         df:ce:9a:f7:99:56:f1:26:d6:a1:71:7a:27:69:66:46:f6:4e:
         07:50:78:18:45:13:64:08:64:56:73:9a:a4:4b:44:71:02:74:
         aa:09:b4:1e:1b:70:92:e0:5c:08:e4:14:05:08:7d:23:ed:71:
         8a:24:26:a6:de:88:02:6d:5c:d3:b0:73:db:c7:c5:87:8d:91:
         c8:43:0f:98:24:74:66:b8:be:c4:c1:88:1b:52:03:5f:48:16:
         17:18:92:cb:c4:a9:ef:a0:09:b0:5c:e1:36:64:1f:0e:36:33:
         88:30:9b:8b:43:c8:06:c4:97:85:86:8c:3b:9b:01:d9:8e:2f:
         6f:e6:2f:c0:2f:c5:91:d7:e4:cb:e2:4a:a5:97:11:24:4f:80:
         78:a8:f1:d0:5f:7d:13:f6:36:a9:f5:20:e5:5b:91:8f:5c:d2:
         18:ed:18:78:67:06:64:65:10:c0:f6:77:65:a0:6e:dd:f0:09:
         a9:65:9d:db
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3XiyF525jvxxL62uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDUxNTEzMDAzMFoXDTI2MDgxMzEzMDAzMFowLzEtMCsGA1UEAxMk
MGVhYjBmZTgtMGYzYy00OGU4LTk4YTUtOGE5NWNlZDYzMDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS/xUBYW8HUOMjalE8G/KWTebsBq/MTWeWIH
Q2+GhzXbXkInOqrXg60/rv8x2z50u4Ma8o3iPk/83CxgFsDgBanKDjkghIFl5qXr
At+S0L2X6FHEbiTsI+5GTxuOBca1wlLFKC+VQUcmL7FFsx/S7VsXEzgzyToR99AS
K93UrWrh+LwaplMAcGh0xSUEbUHtDt2ZeXZhW+e+TR5+/YtJJvGv7UVZ7Pz+AgBV
/qgF/RgCT84JjjiVU0ooJPgEVK2YjkDJtkIgRjWm8fMiT+dK9Wo5CwXDO6K7GeCB
RVhDJm4fHRAaU48o96YPtBGwhntXd7E0mUkck1/rLX9txKZLlwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKoYQ/3cP8J4q/xQTPcQvetiIaVGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTdhODg1NTAtZGQ5ZS0z
YmIzLThlMTQtMjUwNDM5ODI5OGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPA/SAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcPsrLvT4pTu0nWuBh2br+IpSBQlOksNVuId69Knkt1+868RO9EYj
tp3c1HCMjUGTmLWrjpRXeKmKpejBSl0WY+BOe/5Kv2ac386a95lW8SbWoXF6J2lm
RvZOB1B4GEUTZAhkVnOapEtEcQJ0qgm0HhtwkuBcCOQUBQh9I+1xiiQmpt6IAm1c
07Bz28fFh42RyEMPmCR0Zri+xMGIG1IDX0gWFxiSy8Sp76AJsFzhNmQfDjYziDCb
i0PIBsSXhYaMO5sB2Y4vb+YvwC/Fkdfky+JKpZcRJE+AeKjx0F99E/Y2qfUg5VuR
j1zSGO0YeGcGZGUQwPZ3ZaBu3fAJqWWd2w==
-----END CERTIFICATE-----
Generated at Thu May 28 17:05:38 2026 by rpki-client