Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c0f9a656-919f-3bed-a148-edeec558a502.roa
File:                     c0f9a656-919f-3bed-a148-edeec558a502.roa (raw, json)
Hash identifier:          9R3lB/o8JCmIBMlpH+8NPHg7u4MedjYo/pdx0D/aleo=
Subject key identifier:   0D:15:34:C1:B1:3F:56:B3:69:E3:DB:98:10:18:FA:84:F6:01:B2:F9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EED51F9D063E3232C8B06CC00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c0f9a656-919f-3bed-a148-edeec558a502.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c044:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:51:f9:d0:63:e3:23:2c:8b:06:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=a80f78d5-7f93-4167-a132-811c767ca5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c5:e9:d0:89:94:62:f5:12:b6:22:02:34:51:
                    3c:4a:f0:ad:a8:28:3c:e6:95:cf:dc:d2:b3:2e:b8:
                    8f:de:94:ba:5e:58:42:df:4b:bf:e5:e8:91:aa:9f:
                    6a:6d:6a:60:da:61:3d:27:e4:6c:6d:84:4c:aa:75:
                    79:b9:50:d1:8e:f2:81:98:d1:5e:45:3f:b7:6b:34:
                    85:4a:e8:55:ef:12:c3:fa:eb:4d:5f:75:cb:7a:6f:
                    d5:a8:41:25:4e:1a:f6:cc:99:ee:20:98:54:1a:48:
                    ae:44:33:3a:e6:d0:75:b5:08:59:93:9d:4b:e0:4d:
                    2b:0a:52:7e:62:66:a1:85:42:43:f3:a5:65:23:40:
                    0f:4c:bc:33:af:1d:11:b0:91:ce:37:af:34:07:a5:
                    53:a1:07:16:b3:c1:93:ff:6e:c5:3f:cf:d5:b7:37:
                    78:43:8b:db:8d:b7:67:dc:91:1e:14:e2:8e:67:a0:
                    19:4d:90:82:6c:22:d5:92:6c:ce:61:73:81:52:8d:
                    98:b6:82:ba:ae:43:96:aa:c8:c5:e9:b9:ab:90:79:
                    5e:50:b0:2e:d2:0c:8e:d4:45:a6:10:a2:a9:32:20:
                    e4:ff:74:05:ff:36:50:c1:0b:e9:18:c0:3c:53:f9:
                    39:6d:b2:a8:5f:b0:6a:1b:95:d2:8b:1c:79:5a:17:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:15:34:C1:B1:3F:56:B3:69:E3:DB:98:10:18:FA:84:F6:01:B2:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c0f9a656-919f-3bed-a148-edeec558a502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c044:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:df:41:14:c2:8b:9e:aa:e3:c9:b9:9e:99:a9:e7:2c:4c:36:
         99:78:91:61:dd:a9:b9:73:29:c8:ab:55:4e:d4:97:d2:38:f3:
         9f:08:93:4e:9f:21:01:4d:3a:50:28:ce:62:ff:57:84:24:b7:
         18:cf:24:f0:86:d2:d3:27:ea:a3:a3:b0:12:35:59:e6:86:7a:
         e1:e3:27:d5:75:63:ad:d1:34:e4:b2:dc:45:66:48:12:5c:fb:
         6a:8e:c8:9b:2b:61:c1:e9:5e:f7:f2:f5:05:4f:aa:fe:91:bf:
         fc:70:f1:63:69:2c:87:67:8a:47:c4:4c:38:ea:fe:02:27:fa:
         b7:83:05:90:8c:b6:e9:a9:e1:b3:79:22:87:c0:b7:9e:a3:9e:
         a9:95:b5:09:77:24:66:18:7d:e4:9c:ee:a7:f4:65:29:5b:73:
         56:3e:14:b4:7e:af:fc:21:07:f4:48:c6:07:fe:21:23:eb:a6:
         f8:38:6c:2b:2b:6f:7c:0d:c1:c4:f2:37:fc:1f:fe:b6:ee:d2:
         93:66:21:4e:10:52:36:d9:a4:17:63:c4:8f:23:ae:85:59:bd:
         cf:16:35:82:28:a3:ca:1b:e3:44:0b:d5:fe:43:a9:6f:e8:d1:
         36:1e:af:83:4e:91:1a:59:3d:4c:82:4f:a4:10:08:a4:2e:ee:
         29:bb:8d:eb
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7tUfnQY+MjLIsGzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
YTgwZjc4ZDUtN2Y5My00MTY3LWExMzItODExYzc2N2NhNWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsXp0ImUYvUStiICNFE8SvCtqCg85pXP3NKz
LriP3pS6XlhC30u/5eiRqp9qbWpg2mE9J+RsbYRMqnV5uVDRjvKBmNFeRT+3azSF
SuhV7xLD+utNX3XLem/VqEElThr2zJnuIJhUGkiuRDM65tB1tQhZk51L4E0rClJ+
YmahhUJD86VlI0APTLwzrx0RsJHON680B6VToQcWs8GT/27FP8/Vtzd4Q4vbjbdn
3JEeFOKOZ6AZTZCCbCLVkmzOYXOBUo2YtoK6rkOWqsjF6bmrkHleULAu0gyO1EWm
EKKpMiDk/3QF/zZQwQvpGMA8U/k5bbKoX7BqG5XSixx5WheNXwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFA0VNMGxP1azaePbmBAY+oT2AbL5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzBmOWE2NTYtOTE5Zi0z
YmVkLWExNDgtZWRlZWM1NThhNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPARAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACN9BFMKLnqrjybmemannLEw2mXiRYd2puXMpyKtVTtSX0jjznwiT
Tp8hAU06UCjOYv9XhCS3GM8k8IbS0yfqo6OwEjVZ5oZ64eMn1XVjrdE05LLcRWZI
Elz7ao7Imythwele9/L1BU+q/pG//HDxY2ksh2eKR8RMOOr+Aif6t4MFkIy26anh
s3kih8C3nqOeqZW1CXckZhh95Jzup/RlKVtzVj4UtH6v/CEH9EjGB/4hI+um+Dhs
KytvfA3BxPI3/B/+tu7Sk2YhThBSNtmkF2PEjyOuhVm9zxY1giijyhvjRAvV/kOp
b+jRNh6vg06RGlk9TIJPpBAIpC7uKbuN6w==
-----END CERTIFICATE-----
Generated at Thu Aug 27 17:02:10 2026 by rpki-client