Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0db277f-4bbd-393d-8956-fe38b25d5599.roa
File:                     d0db277f-4bbd-393d-8956-fe38b25d5599.roa (raw, json)
Hash identifier:          vGqvRgFsJGV/arV3L8gTxwwY0CyybUw49EIqbbxKE5s=
Subject key identifier:   B2:FF:AA:70:F5:1F:7D:2A:8A:67:4C:1D:BE:E6:BA:A3:F1:CB:A8:ED
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CB81C9470C99D13D94CD91600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0db277f-4bbd-393d-8956-fe38b25d5599.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     31898
IP address blocks:        2603:c002:8100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:94:70:c9:9d:13:d9:4c:d9:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=a6aea207-d21d-4fc5-a3d7-4d691cc0f8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:52:73:04:d2:46:10:26:fc:ac:7c:a4:29:
                    1a:ac:e3:4e:60:e6:f5:62:a7:a8:86:87:2e:40:67:
                    9f:d0:10:c3:d7:c5:30:12:20:78:c7:f4:1c:8a:10:
                    29:fa:ad:b3:1b:2c:08:80:e5:8a:ea:55:24:9e:81:
                    bb:79:59:65:ab:ee:b5:5a:c4:2a:ad:b2:94:9f:4a:
                    b7:89:8b:5e:e4:82:b5:cc:9d:11:e0:f6:4c:73:f5:
                    12:76:ba:a9:57:ae:73:74:2e:f9:e2:95:24:e5:24:
                    ab:9e:c4:56:9b:2d:7f:ad:1c:bc:9f:21:b7:19:57:
                    0c:ad:f5:ce:55:e0:91:36:50:14:e4:ed:75:4c:91:
                    dd:2e:d9:41:ed:af:6f:b2:cf:bc:f5:8f:77:18:84:
                    d2:05:92:fd:16:8b:df:c6:7d:8b:d2:95:36:c4:63:
                    85:83:38:05:c8:53:f1:f3:e3:ba:02:62:bb:76:37:
                    89:4c:f6:7b:e0:86:7a:1f:de:3f:a9:53:7b:b9:58:
                    5b:21:d3:eb:96:df:7f:5b:e3:47:a5:11:11:29:24:
                    75:a0:4b:22:38:c5:3f:b5:9d:1b:5e:3d:86:d0:2f:
                    2e:19:bc:b4:d6:00:dc:0a:c5:f6:90:96:f2:42:79:
                    48:5d:7c:8e:a8:08:71:aa:d5:c8:e4:93:11:9b:24:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FF:AA:70:F5:1F:7D:2A:8A:67:4C:1D:BE:E6:BA:A3:F1:CB:A8:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0db277f-4bbd-393d-8956-fe38b25d5599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:8100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:4d:c4:73:ba:a3:87:a9:71:a4:8c:ad:fc:00:51:14:18:a3:
         20:4e:8f:aa:a8:47:89:4d:33:07:ac:df:63:1e:6b:de:f7:25:
         2e:66:f9:00:2e:43:1d:53:b2:9d:26:2f:90:d9:b1:83:53:a7:
         86:12:f3:34:82:71:aa:27:a4:79:98:c5:b6:d4:ba:ab:63:59:
         b5:ad:99:c5:cd:5f:1c:65:bb:96:b5:a0:57:97:f1:5d:14:1c:
         b9:31:16:24:00:f8:68:bc:b4:af:5d:5e:5e:f0:bf:35:79:ed:
         38:d9:96:51:ba:88:b6:9a:a0:ea:bf:4b:9b:9a:54:ba:b4:82:
         bd:08:8e:fb:3a:85:e5:d6:44:73:66:71:b4:39:df:a7:a1:c8:
         e9:60:de:ad:f0:f7:ba:94:36:da:81:5f:1b:32:dc:4f:ac:fe:
         92:da:2d:df:91:65:a3:35:c9:34:09:ab:44:af:33:30:82:e5:
         df:12:14:0d:7b:0b:7c:b0:5d:c9:7a:47:5b:0e:18:c9:74:16:
         d1:ef:33:ab:22:f4:cd:82:50:3c:a2:b9:64:e6:a5:a7:f8:51:
         24:99:2b:ac:b3:33:a9:3c:dc:33:b9:17:90:11:ca:6f:f9:e0:
         b7:d7:fc:df:30:b9:6c:e1:91:2f:5e:3f:99:ce:b5:49:bf:77:
         c2:c8:ea:ff
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEy4HJRwyZ0T2UzZFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk
YTZhZWEyMDctZDIxZC00ZmM1LWEzZDctNGQ2OTFjYzBmOGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsElScwTSRhAm/Kx8pCkarONOYOb1Yqeohocu
QGef0BDD18UwEiB4x/QcihAp+q2zGywIgOWK6lUknoG7eVllq+61WsQqrbKUn0q3
iYte5IK1zJ0R4PZMc/USdrqpV65zdC754pUk5SSrnsRWmy1/rRy8nyG3GVcMrfXO
VeCRNlAU5O11TJHdLtlB7a9vss+89Y93GITSBZL9Fovfxn2L0pU2xGOFgzgFyFPx
8+O6AmK7djeJTPZ74IZ6H94/qVN7uVhbIdPrlt9/W+NHpRERKSR1oEsiOMU/tZ0b
Xj2G0C8uGby01gDcCsX2kJbyQnlIXXyOqAhxqtXI5JMRmyT/LwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLL/qnD1H30qimdMHb7muqPxy6jtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDBkYjI3N2YtNGJiZC0z
OTNkLTg5NTYtZmUzOGIyNWQ1NTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAoEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACk3Ec7qjh6lxpIyt/ABRFBijIE6PqqhHiU0zB6zfYx5r3vclLmb5
AC5DHVOynSYvkNmxg1OnhhLzNIJxqiekeZjFttS6q2NZta2Zxc1fHGW7lrWgV5fx
XRQcuTEWJAD4aLy0r11eXvC/NXntONmWUbqItpqg6r9Lm5pUurSCvQiO+zqF5dZE
c2ZxtDnfp6HI6WDerfD3upQ22oFfGzLcT6z+ktot35FlozXJNAmrRK8zMILl3xIU
DXsLfLBdyXpHWw4YyXQW0e8zqyL0zYJQPKK5ZOalp/hRJJkrrLMzqTzcM7kXkBHK
b/ngt9f83zC5bOGRL14/mc61Sb93wsjq/w==
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:43 2026 by rpki-client