Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61b2b555-5c1d-310d-9bbc-08ef5302429b.roa
File:                     61b2b555-5c1d-310d-9bbc-08ef5302429b.roa (raw, json)
Hash identifier:          kDgwD+Qz49RyKggxDS+PVXvBdDQBizJdBbSwYrYgwHY=
Subject key identifier:   6D:92:CD:9B:01:51:7D:97:2C:50:B9:4B:C6:09:B9:EA:7B:8C:AB:35
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAE5EB3494290CC3117102DC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61b2b555-5c1d-310d-9bbc-08ef5302429b.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        2603:c024:c000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:b3:49:42:90:cc:31:17:10:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=c493e404-b26b-4a6e-8a4d-eb840af11d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6f:45:db:0d:2c:78:3f:8f:2f:51:ae:b2:55:
                    05:99:88:62:aa:0b:46:3f:5e:27:b3:02:4f:aa:aa:
                    61:96:ff:d8:3a:dd:7e:7f:b1:a7:f3:11:2e:a6:d9:
                    00:4e:d1:4e:bc:f6:07:35:dc:39:4c:44:b4:b9:85:
                    72:18:43:e2:b1:51:18:23:e0:db:18:44:63:2f:f3:
                    1b:39:85:db:e0:bc:40:9a:59:6f:11:66:69:e4:8a:
                    2b:0e:ee:d3:e6:d8:7b:9f:bf:19:4c:a1:7e:26:33:
                    5f:23:93:23:6c:a1:31:b8:ff:5a:1f:49:d4:ec:a7:
                    e4:42:77:61:b4:07:fb:a6:2d:87:ec:2b:07:95:48:
                    10:7b:74:d1:b5:eb:57:f0:37:6e:53:d4:bd:b8:91:
                    f4:b7:43:ce:28:be:47:11:20:8c:d6:e6:16:b7:2d:
                    34:09:0f:19:00:93:13:14:28:cd:d6:89:e7:6c:c4:
                    d7:37:bd:f2:d7:9c:27:99:df:f1:0e:ef:26:ca:e4:
                    f2:ed:dc:1f:11:0e:cd:39:fa:20:5c:41:21:fc:f9:
                    8d:17:b4:ae:31:c1:5c:91:ab:5a:79:3e:1b:45:1f:
                    f7:4b:20:e7:a8:69:ee:67:3f:6b:d5:4c:5b:c7:47:
                    e1:90:20:af:bc:7f:2c:01:4a:94:30:52:6a:9c:93:
                    d0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:92:CD:9B:01:51:7D:97:2C:50:B9:4B:C6:09:B9:EA:7B:8C:AB:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61b2b555-5c1d-310d-9bbc-08ef5302429b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c024:c000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:24:a2:7b:74:b3:cb:be:e4:90:ef:0e:7c:2c:5a:73:1a:
         cc:3c:b4:9e:3e:71:d0:cd:cd:2c:0f:d0:5b:15:af:20:00:ab:
         33:8d:e9:33:10:0e:03:0d:92:59:8b:6f:1c:08:54:14:92:fb:
         7d:25:98:8d:c3:f0:3e:c1:4c:77:fc:b4:7a:92:6e:e4:fc:1b:
         9d:d2:cf:95:26:89:4e:23:26:3f:28:e7:45:24:2e:3a:c5:8a:
         eb:ee:38:7b:ce:85:56:a8:21:d8:6b:a7:c9:7a:e4:de:b4:be:
         93:5e:ee:a7:26:68:ff:c2:d4:2e:6e:81:25:d7:aa:79:02:19:
         fc:98:c5:27:bd:0f:cf:a4:c3:fc:3a:77:cb:89:c3:26:69:37:
         db:20:50:26:59:32:a1:05:a9:e3:5f:91:29:f6:e1:e9:b3:ef:
         96:3d:e5:47:15:aa:e9:0e:ab:2d:54:f9:ae:29:71:1e:cc:2d:
         4d:0e:63:63:b8:a3:25:48:9c:d3:78:39:fb:c8:ee:b5:48:6d:
         23:83:7f:60:f5:4d:66:2a:f4:23:32:3e:4c:6d:77:01:da:7e:
         34:32:e1:29:89:78:4d:d1:cc:3e:a0:27:99:dd:18:15:a4:a9:
         61:39:1d:25:53:ce:d2:cf:b6:cb:03:e5:43:8c:0f:01:d5:66:
         37:f9:0c:ed
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuXrNJQpDMMRcQLcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YzQ5M2U0MDQtYjI2Yi00YTZlLThhNGQtZWI4NDBhZjExZDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim9F2w0seD+PL1GuslUFmYhiqgtGP14nswJP
qqphlv/YOt1+f7Gn8xEuptkATtFOvPYHNdw5TES0uYVyGEPisVEYI+DbGERjL/Mb
OYXb4LxAmllvEWZp5IorDu7T5th7n78ZTKF+JjNfI5MjbKExuP9aH0nU7KfkQndh
tAf7pi2H7CsHlUgQe3TRtetX8DduU9S9uJH0t0POKL5HESCM1uYWty00CQ8ZAJMT
FCjN1onnbMTXN73y15wnmd/xDu8myuTy7dwfEQ7NOfogXEEh/PmNF7SuMcFckata
eT4bRR/3SyDnqGnuZz9r1Uxbx0fhkCCvvH8sAUqUMFJqnJPQkQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFG2SzZsBUX2XLFC5S8YJuep7jKs1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjFiMmI1NTUtNWMxZC0z
MTBkLTliYmMtMDhlZjUzMDI0MjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAJMAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATPYkont0s8u+5JDvDnwsWnMazDy0nj5x0M3NLA/QWxWvIACrM43p
MxAOAw2SWYtvHAhUFJL7fSWYjcPwPsFMd/y0epJu5PwbndLPlSaJTiMmPyjnRSQu
OsWK6+44e86FVqgh2GunyXrk3rS+k17upyZo/8LULm6BJdeqeQIZ/JjFJ70Pz6TD
/Dp3y4nDJmk32yBQJlkyoQWp41+RKfbh6bPvlj3lRxWq6Q6rLVT5rilxHswtTQ5j
Y7ijJUic03g5+8jutUhtI4N/YPVNZir0IzI+TG13Adp+NDLhKYl4TdHMPqAnmd0Y
FaSpYTkdJVPO0s+2ywPlQ4wPAdVmN/kM7Q==
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:33 2026 by rpki-client