Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ddde1ed-b074-36d2-85db-68158850b780.roa
File:                     9ddde1ed-b074-36d2-85db-68158850b780.roa (raw, json)
Hash identifier:          2zsy6MbqMmlqr9r6HgiRoaNQjyluQ9eNxGqWRUymSXM=
Subject key identifier:   26:7F:D7:E7:D6:9E:8B:97:93:A0:D1:FF:93:10:DC:10:D8:F7:5D:88
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6DD4BB1EA993A648FEB992C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ddde1ed-b074-36d2-85db-68158850b780.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c024:4000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:bb:1e:a9:93:a6:48:fe:b9:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=b722d9ee-c178-496e-8a2d-1c3f6a10c9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:70:b3:17:20:73:1b:37:85:14:34:eb:b3:cb:
                    5f:04:49:8e:b7:08:cb:5a:47:12:01:eb:3c:52:2d:
                    74:d7:11:01:17:d2:b9:b2:cc:fc:62:75:cb:e7:55:
                    e5:a7:4c:c3:9b:2e:08:bb:c4:cf:9c:19:0b:2c:98:
                    80:35:25:6c:b2:45:d7:b1:4c:9e:e5:95:6b:01:50:
                    23:42:68:b8:ce:34:7d:a8:1f:86:96:dd:dc:e9:3c:
                    e4:67:cb:5b:11:d1:89:52:6b:25:29:07:47:e5:64:
                    e6:a4:e5:65:8a:bf:94:1f:c6:fb:be:87:ec:59:98:
                    06:45:4d:86:ed:f4:af:a1:bc:05:95:d1:8e:75:b7:
                    64:43:a3:58:d3:6d:9a:bf:30:de:87:2b:85:b8:c4:
                    77:3c:e5:79:8a:d3:b7:5f:d7:6e:a0:68:17:86:d6:
                    f3:18:91:ab:ab:ce:52:a7:27:1c:86:63:99:60:b0:
                    f5:eb:d1:a4:10:b5:58:de:f9:b0:ff:40:43:df:62:
                    ca:23:6c:7f:f2:f2:82:33:6c:fa:12:8f:89:2e:6b:
                    d4:94:05:4b:c3:ef:2a:a7:b7:9d:94:71:6e:95:79:
                    5f:e1:71:a4:09:5f:fe:6a:79:38:e5:12:b8:14:88:
                    72:81:0f:03:6b:f1:2c:91:e2:f3:d5:e8:28:0f:c6:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7F:D7:E7:D6:9E:8B:97:93:A0:D1:FF:93:10:DC:10:D8:F7:5D:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ddde1ed-b074-36d2-85db-68158850b780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c024:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:99:73:29:12:0e:b7:5b:c2:2a:c9:e4:9a:ca:96:4a:fe:e3:
         94:62:d5:2a:dd:8c:ad:db:ca:2c:d6:7c:e8:9f:fb:4e:d9:f6:
         bb:31:8b:56:56:1b:6c:5a:71:68:03:95:8c:7c:4f:74:65:7e:
         f1:5c:d2:51:83:5f:31:c3:f7:cf:ce:9c:3b:e6:b1:a9:28:58:
         37:14:07:6d:57:bf:5c:66:f1:a6:d3:ef:fc:62:6f:98:f6:b9:
         97:8f:21:67:91:e3:13:d1:ea:b7:a0:eb:d6:0a:a6:4d:d9:b7:
         1c:9c:06:48:ec:4d:57:e1:e2:d5:95:fd:c3:d8:7a:6f:77:92:
         63:14:8d:3c:0d:14:66:ed:3a:03:ff:d8:c7:14:e9:96:04:53:
         c4:ea:60:71:3a:59:f3:bf:6c:1c:43:31:d6:f4:ba:c5:09:1b:
         00:80:c2:bd:ed:65:e6:27:f0:26:6c:22:8d:45:f1:62:9c:8d:
         5f:ea:a6:89:df:c7:9e:6a:4d:52:6a:59:ff:3e:87:43:22:d4:
         87:7e:0c:f1:75:bf:88:b0:76:ed:cb:c9:fe:62:fb:71:7e:8e:
         0f:81:86:4b:28:5f:c9:87:ba:29:c4:54:c3:36:73:7a:99:d5:
         96:73:59:73:78:d5:8f:8b:70:a4:2f:ea:14:7b:d4:79:ae:50:
         ee:7d:c3:fa
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5t1LseqZOmSP65ksAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk
YjcyMmQ5ZWUtYzE3OC00OTZlLThhMmQtMWMzZjZhMTBjOWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnCzFyBzGzeFFDTrs8tfBEmOtwjLWkcSAes8
Ui101xEBF9K5ssz8YnXL51Xlp0zDmy4Iu8TPnBkLLJiANSVsskXXsUye5ZVrAVAj
Qmi4zjR9qB+Glt3c6TzkZ8tbEdGJUmslKQdH5WTmpOVlir+UH8b7vofsWZgGRU2G
7fSvobwFldGOdbdkQ6NY022avzDehyuFuMR3POV5itO3X9duoGgXhtbzGJGrq85S
pycchmOZYLD169GkELVY3vmw/0BD32LKI2x/8vKCM2z6Eo+JLmvUlAVLw+8qp7ed
lHFulXlf4XGkCV/+ank45RK4FIhygQ8Da/EskeLz1egoD8bJFQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCZ/1+fWnouXk6DR/5MQ3BDY912IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWRkZGUxZWQtYjA3NC0z
NmQyLTg1ZGItNjgxNTg4NTBiNzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAJEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAlplzKRIOt1vCKsnkmsqWSv7jlGLVKt2MrdvKLNZ86J/7Ttn2uzGL
VlYbbFpxaAOVjHxPdGV+8VzSUYNfMcP3z86cO+axqShYNxQHbVe/XGbxptPv/GJv
mPa5l48hZ5HjE9Hqt6Dr1gqmTdm3HJwGSOxNV+Hi1ZX9w9h6b3eSYxSNPA0UZu06
A//YxxTplgRTxOpgcTpZ879sHEMx1vS6xQkbAIDCve1l5ifwJmwijUXxYpyNX+qm
id/HnmpNUmpZ/z6HQyLUh34M8XW/iLB27cvJ/mL7cX6OD4GGSyhfyYe6KcRUwzZz
epnVlnNZc3jVj4twpC/qFHvUea5Q7n3D+g==
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:49:27 2026 by rpki-client