Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/90beced0-94ab-3aa2-92e1-be1a262d2b0a.roa
File:                     90beced0-94ab-3aa2-92e1-be1a262d2b0a.roa (raw, json)
Hash identifier:          LDHXGQcV5XpSUjcX+XhyOqJvLGlaiUyTlslaWGXxI/8=
Subject key identifier:   C2:CC:36:02:AB:DB:9A:DE:02:AD:A1:C4:C7:85:00:26:75:BD:9E:1B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6F3A2E098992A42F084954C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/90beced0-94ab-3aa2-92e1-be1a262d2b0a.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:8200::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:2e:09:89:92:a4:2f:08:49:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=4bc8f073-08e9-42fe-9a7b-d56a5b6be60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8d:bd:2d:a9:ba:b7:3a:16:fa:04:52:44:82:
                    da:8b:7b:61:3a:db:c9:a8:03:76:13:90:69:a9:8a:
                    69:81:05:b3:0b:c4:fe:07:f5:94:ba:5e:8f:fc:1d:
                    06:ef:22:47:4c:e8:6a:85:cd:6a:dc:af:0f:67:da:
                    01:41:cf:19:65:14:e6:29:84:d3:99:c2:ca:a9:c8:
                    ed:e1:78:d5:ae:74:a8:c4:91:ff:70:7f:6b:8c:2a:
                    70:eb:7b:b3:1f:35:e0:87:37:d7:e7:42:60:91:4a:
                    ba:fb:a8:85:ec:87:5c:52:fe:ed:5b:25:60:60:a4:
                    27:bb:0a:66:c2:6f:c1:3f:86:6c:88:0f:91:d2:8c:
                    76:02:8b:bc:88:42:83:c7:be:d8:16:64:04:41:36:
                    98:b9:c8:47:34:8a:c9:fb:2b:53:4f:f8:e3:8c:e0:
                    f6:98:cb:ca:a1:ea:60:a3:2a:0b:5a:1f:d3:21:c4:
                    9c:2a:69:d5:5b:d4:1f:65:3a:0e:81:70:b7:dd:8a:
                    12:e5:9a:f2:9f:d2:a3:7b:2a:c0:58:a3:ac:a3:78:
                    93:d8:6b:13:9e:78:16:8c:cc:e8:f3:d8:ed:3a:bc:
                    ff:52:94:44:25:72:0d:53:83:64:8a:a0:5d:94:9b:
                    f0:ea:e2:6b:fa:92:22:5d:f1:69:10:0b:32:af:22:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CC:36:02:AB:DB:9A:DE:02:AD:A1:C4:C7:85:00:26:75:BD:9E:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/90beced0-94ab-3aa2-92e1-be1a262d2b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:8200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1a:f9:c4:77:75:6b:8e:dc:0a:6a:3c:11:49:0c:ad:0e:4d:
         03:26:bb:85:49:4e:7d:d1:62:d3:1e:5f:ec:94:ea:ff:60:7c:
         fb:db:0b:17:1d:84:cc:47:2c:e5:7a:ed:b9:08:7f:56:fa:ba:
         be:f7:45:87:58:5d:46:37:31:0d:2f:a3:b4:0a:11:cb:8d:fc:
         c7:3b:c7:2c:a3:f1:93:12:2a:4f:6e:f4:be:65:85:8d:17:a3:
         3f:04:08:21:7d:c0:62:d6:4a:40:ab:32:92:89:ae:2b:3b:85:
         5c:ef:83:7a:61:8d:2e:12:c1:4b:91:c8:85:6d:52:78:d3:5f:
         6f:fa:8e:8c:15:b1:a3:cc:13:20:0c:eb:14:5a:e7:b3:5a:7f:
         e0:66:f8:0c:ec:f8:cb:31:09:a7:a9:65:56:9a:12:85:65:65:
         f4:7a:d0:46:cb:68:fb:20:82:d2:b6:c8:0e:98:39:d3:c1:4b:
         17:16:fc:af:86:f1:e3:3e:96:44:ae:a2:79:c6:ca:eb:45:b9:
         5a:6a:8b:ac:59:5b:91:56:80:a0:94:77:28:06:e6:7c:56:60:
         dc:ab:de:bd:86:4d:71:90:f3:09:17:f8:c7:bc:13:b6:00:c1:
         f3:f1:8b:93:87:00:7f:c8:a4:45:53:c3:c2:3f:fc:97:aa:54:
         33:60:46:56
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5vOi4JiZKkLwhJVMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
NGJjOGYwNzMtMDhlOS00MmZlLTlhN2ItZDU2YTViNmJlNjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho29Lam6tzoW+gRSRILai3thOtvJqAN2E5Bp
qYppgQWzC8T+B/WUul6P/B0G7yJHTOhqhc1q3K8PZ9oBQc8ZZRTmKYTTmcLKqcjt
4XjVrnSoxJH/cH9rjCpw63uzHzXghzfX50JgkUq6+6iF7IdcUv7tWyVgYKQnuwpm
wm/BP4ZsiA+R0ox2Aou8iEKDx77YFmQEQTaYuchHNIrJ+ytTT/jjjOD2mMvKoepg
oyoLWh/TIcScKmnVW9QfZToOgXC33YoS5Zryn9KjeyrAWKOso3iT2GsTnngWjMzo
89jtOrz/UpREJXINU4NkiqBdlJvw6uJr+pIiXfFpEAsyryI3DwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMLMNgKr25reAq2hxMeFACZ1vZ4bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTBiZWNlZDAtOTRhYi0z
YWEyLTkyZTEtYmUxYTI2MmQyYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAoIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMRr5xHd1a47cCmo8EUkMrQ5NAya7hUlOfdFi0x5f7JTq/2B8+9sL
Fx2EzEcs5XrtuQh/Vvq6vvdFh1hdRjcxDS+jtAoRy438xzvHLKPxkxIqT270vmWF
jRejPwQIIX3AYtZKQKsykomuKzuFXO+DemGNLhLBS5HIhW1SeNNfb/qOjBWxo8wT
IAzrFFrns1p/4Gb4DOz4yzEJp6llVpoShWVl9HrQRsto+yCC0rbIDpg508FLFxb8
r4bx4z6WRK6iecbK60W5WmqLrFlbkVaAoJR3KAbmfFZg3KvevYZNcZDzCRf4x7wT
tgDB8/GLk4cAf8ikRVPDwj/8l6pUM2BGVg==
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:47:43 2026 by rpki-client