Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c7ec7c36-fa55-3b4a-b8b0-b587a9e8c90f.roa
File:                     c7ec7c36-fa55-3b4a-b8b0-b587a9e8c90f.roa (raw, json)
Hash identifier:          1Cim6xnY7he+UmCkch05CNip33YsleS9ujT3hb8kwlE=
Subject key identifier:   EA:FC:05:4F:4B:23:8F:5F:9B:12:5C:20:19:26:8E:AE:E9:7B:9E:D3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBDB1F15A3B453434AFAF7E80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c7ec7c36-fa55-3b4a-b8b0-b587a9e8c90f.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        2603:c002:3110::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:f1:5a:3b:45:34:34:af:af:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=4a6183e2-b9f6-4639-a5bb-c4986df6f0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cf:cf:14:39:3f:b3:5d:26:3f:40:b1:b5:2b:
                    01:cf:b4:e4:ac:e3:61:81:9a:5e:aa:d7:48:f8:c2:
                    f8:a0:03:ce:ca:0f:77:4e:ac:2a:10:13:92:95:c1:
                    ba:6a:08:6c:8f:33:33:b9:51:89:a0:54:36:ea:d5:
                    25:39:92:85:b5:b1:ad:ae:ca:85:fb:6d:77:75:ac:
                    d7:93:93:39:3f:7d:43:f0:b4:25:fb:4d:dc:fd:c9:
                    29:2f:85:32:d1:95:63:b6:27:85:35:a1:30:08:b8:
                    28:7f:29:06:18:a0:4a:fe:fc:cc:f7:1a:53:6c:d0:
                    6f:85:f7:36:5d:41:f7:b5:5f:23:20:81:35:fc:50:
                    6f:83:11:ce:9f:7b:5c:6f:4e:98:ae:41:d9:6e:77:
                    77:33:83:46:f0:9f:13:dd:cd:0a:43:c3:90:84:60:
                    cd:6b:17:94:c5:1f:32:1a:cb:da:fd:66:88:46:0d:
                    23:b3:d6:ce:1d:09:0b:99:34:3d:c5:a9:da:60:0c:
                    b8:7e:92:20:72:f7:4c:83:02:1f:96:97:38:52:54:
                    98:3f:c3:a0:03:84:a8:0b:bd:1e:a5:35:ea:56:cf:
                    70:c6:a4:8e:a9:0f:bc:73:8f:bb:f8:89:9f:17:0f:
                    9d:d8:01:33:5b:fa:25:3b:d5:9a:b2:c1:24:26:c2:
                    1b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FC:05:4F:4B:23:8F:5F:9B:12:5C:20:19:26:8E:AE:E9:7B:9E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c7ec7c36-fa55-3b4a-b8b0-b587a9e8c90f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:3110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:08:fc:fb:fe:29:24:1c:54:72:82:0b:09:14:ab:d4:62:c5:
         77:84:1c:db:8b:5a:1c:e0:5a:81:cc:32:7b:4b:9f:03:2f:42:
         94:78:bb:83:22:11:2b:1c:c1:d0:0a:6d:17:5f:d9:2a:f6:7a:
         e1:0b:00:f8:6e:d2:56:81:1b:88:a0:d5:12:86:22:aa:53:cc:
         ac:dd:c8:63:a5:0d:1e:e4:13:db:dd:27:51:d8:ce:a9:af:13:
         5d:d5:37:be:7c:82:8c:93:5a:1f:76:25:1a:0c:02:d4:96:f1:
         71:b6:c1:91:4f:63:d8:fd:b9:ac:6e:df:57:76:9e:e9:2e:fe:
         19:6e:fb:1e:c4:72:a4:eb:30:2d:a1:d1:60:9b:a5:a4:7f:f9:
         b0:86:df:35:bd:87:ec:da:64:d9:45:3a:72:5c:a6:7b:48:ee:
         a3:8a:b3:a1:a7:03:24:d1:22:3c:1a:a9:79:94:44:47:f5:66:
         bf:60:58:01:f3:48:4a:2d:44:d5:a2:ec:99:23:6a:9f:bb:06:
         81:73:0c:9e:0e:26:cb:fe:c1:d1:da:0d:d5:86:97:1b:41:ea:
         5e:c7:a7:ad:80:5b:e0:b2:b0:63:71:81:95:36:36:d3:41:a7:
         ab:2b:c5:cf:b2:18:fc:a9:09:1f:3f:c7:b8:b7:d0:12:57:10:
         14:7f:68:ad
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy9sfFaO0U0NK+vfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
NGE2MTgzZTItYjlmNi00NjM5LWE1YmItYzQ5ODZkZjZmMGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6M/PFDk/s10mP0CxtSsBz7TkrONhgZpeqtdI
+ML4oAPOyg93TqwqEBOSlcG6aghsjzMzuVGJoFQ26tUlOZKFtbGtrsqF+213dazX
k5M5P31D8LQl+03c/ckpL4Uy0ZVjtieFNaEwCLgofykGGKBK/vzM9xpTbNBvhfc2
XUH3tV8jIIE1/FBvgxHOn3tcb06YrkHZbnd3M4NG8J8T3c0KQ8OQhGDNaxeUxR8y
Gsva/WaIRg0js9bOHQkLmTQ9xanaYAy4fpIgcvdMgwIflpc4UlSYP8OgA4SoC70e
pTXqVs9wxqSOqQ+8c4+7+ImfFw+d2AEzW/olO9WassEkJsIbJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOr8BU9LI49fmxJcIBkmjq7pe57TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzdlYzdjMzYtZmE1NS0z
YjRhLWI4YjAtYjU4N2E5ZThjOTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAAjEQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAwI/Pv+KSQcVHKCCwkUq9RixXeEHNuLWhzgWoHMMntLnwMvQpR4
u4MiESscwdAKbRdf2Sr2euELAPhu0laBG4ig1RKGIqpTzKzdyGOlDR7kE9vdJ1HY
zqmvE13VN758goyTWh92JRoMAtSW8XG2wZFPY9j9uaxu31d2nuku/hlu+x7EcqTr
MC2h0WCbpaR/+bCG3zW9h+zaZNlFOnJcpntI7qOKs6GnAyTRIjwaqXmUREf1Zr9g
WAHzSEotRNWi7Jkjap+7BoFzDJ4OJsv+wdHaDdWGlxtB6l7Hp62AW+CysGNxgZU2
NtNBp6srxc+yGPypCR8/x7i30BJXEBR/aK0=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:59 2026 by rpki-client