Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9153e728-f779-35ae-853c-48307159d1a5.roa
File:                     9153e728-f779-35ae-853c-48307159d1a5.roa (raw, json)
Hash identifier:          DTq3pHt8vZWZpR2HRTRHz4GkdB5Pk+96Wc20P1YQhyQ=
Subject key identifier:   9B:E9:CC:47:4F:B4:C1:FA:A6:DF:D5:8B:1D:F7:0D:C5:84:A9:1F:34
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBDB2119019C58EADF1B1BCD4
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9153e728-f779-35ae-853c-48307159d1a5.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        2603:c002:b600::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:11:90:19:c5:8e:ad:f1:b1:bc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=4479d63a-257d-47d3-8094-d156c881ecef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f6:e1:7f:02:87:43:08:b3:34:cc:b4:b2:34:
                    c0:5a:8f:83:39:63:4f:6d:8a:74:c6:89:70:5a:2c:
                    aa:cc:fe:a1:a8:b0:fc:4b:ea:4b:79:aa:5e:ba:8f:
                    ab:69:a6:02:b5:bd:24:05:b2:b7:39:01:20:21:1d:
                    cd:e2:73:4f:42:2f:7a:c9:f1:11:18:df:00:e1:05:
                    6d:60:67:c4:76:15:be:28:42:8c:5c:64:09:4e:9c:
                    ef:ff:92:99:41:cb:9e:13:16:71:b4:2b:65:6d:f0:
                    1c:f9:3c:21:63:5e:c6:b5:cc:49:ca:e5:f3:cf:01:
                    ff:de:fe:59:7d:ff:d9:31:6f:01:6a:55:f0:c3:a4:
                    f6:47:7b:8b:7e:ca:1e:26:ef:09:0f:ea:1a:48:d1:
                    d5:0c:0b:02:6a:15:9a:c7:01:13:2e:3e:36:ee:7e:
                    bd:a6:91:25:af:8c:7a:db:30:9e:9c:56:ab:4c:4d:
                    53:6a:e3:ec:75:fb:a8:b1:b3:f3:30:81:bc:92:4e:
                    0a:2a:3b:af:e8:b7:8c:d8:19:49:af:c0:ad:4d:c5:
                    86:ff:fb:61:5a:b4:e9:da:7e:a4:83:38:70:24:da:
                    e6:fc:46:5d:5e:25:e1:31:64:f8:ae:f1:d3:b5:b4:
                    59:cf:19:ed:99:7a:77:99:4f:d2:a0:d9:8f:6d:2c:
                    ae:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E9:CC:47:4F:B4:C1:FA:A6:DF:D5:8B:1D:F7:0D:C5:84:A9:1F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9153e728-f779-35ae-853c-48307159d1a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:b600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:7f:63:82:5f:2b:ee:70:3c:57:db:1d:38:b0:12:35:9d:
         36:01:63:7c:e8:ba:47:23:fc:40:a0:6c:4b:e9:1b:51:0d:7d:
         f0:b3:c6:2c:f7:28:9c:a4:d7:d5:4d:d2:cf:3d:2f:ea:a5:2b:
         3c:f0:e4:91:e6:4a:7e:ba:59:f2:7e:f1:b3:96:40:4a:42:f5:
         35:46:3d:95:7f:34:fb:ea:5c:54:47:78:ac:00:7d:7b:73:2b:
         43:b2:32:13:a1:88:a6:43:70:6f:c2:a5:32:07:da:5a:c9:04:
         37:31:3e:1a:ee:eb:84:27:95:05:93:d7:20:35:c0:5f:93:cf:
         fd:83:b4:b8:97:8f:5d:1c:06:fa:1c:92:0c:e0:22:a5:30:1f:
         c1:23:4d:03:b7:ee:18:99:9e:fd:4f:4f:11:21:90:e2:12:11:
         b5:e0:3a:84:bf:e6:19:4e:c2:68:f7:11:d0:ae:8f:bb:10:23:
         25:f4:3b:14:c2:d3:41:85:02:15:1b:0d:f3:70:5f:27:bc:47:
         01:4b:06:eb:4e:f0:95:79:5d:29:bb:b0:db:bc:56:2f:3e:1b:
         fb:06:d3:4b:ac:45:6b:a8:78:d9:18:ee:09:6c:58:34:e4:b8:
         54:49:16:17:17:8e:00:29:a8:b0:20:b8:a0:9f:81:f6:cb:42:
         5b:62:8d:17
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEy9shGQGcWOrfGxvNQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
NDQ3OWQ2M2EtMjU3ZC00N2QzLTgwOTQtZDE1NmM4ODFlY2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/bhfwKHQwizNMy0sjTAWo+DOWNPbYp0xolw
WiyqzP6hqLD8S+pLeapeuo+raaYCtb0kBbK3OQEgIR3N4nNPQi96yfERGN8A4QVt
YGfEdhW+KEKMXGQJTpzv/5KZQcueExZxtCtlbfAc+TwhY17GtcxJyuXzzwH/3v5Z
ff/ZMW8BalXww6T2R3uLfsoeJu8JD+oaSNHVDAsCahWaxwETLj427n69ppElr4x6
2zCenFarTE1TauPsdfuosbPzMIG8kk4KKjuv6LeM2BlJr8CtTcWG//thWrTp2n6k
gzhwJNrm/EZdXiXhMWT4rvHTtbRZzxntmXp3mU/SoNmPbSyubwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJvpzEdPtMH6pt/Vix33DcWEqR80MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTE1M2U3MjgtZjc3OS0z
NWFlLTg1M2MtNDgzMDcxNTlkMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAArYw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAEeR/Y4JfK+5wPFfbHTiwEjWdNgFjfOi6RyP8QKBsS+kbUQ198LPG
LPconKTX1U3Szz0v6qUrPPDkkeZKfrpZ8n7xs5ZASkL1NUY9lX80++pcVEd4rAB9
e3MrQ7IyE6GIpkNwb8KlMgfaWskENzE+Gu7rhCeVBZPXIDXAX5PP/YO0uJePXRwG
+hySDOAipTAfwSNNA7fuGJme/U9PESGQ4hIRteA6hL/mGU7CaPcR0K6PuxAjJfQ7
FMLTQYUCFRsN83BfJ7xHAUsG607wlXldKbuw27xWLz4b+wbTS6xFa6h42RjuCWxY
NOS4VEkWFxeOACmosCC4oJ+B9stCW2KNFw==
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:55 2026 by rpki-client