Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8c0c18a-964a-33d6-8c43-5f60b7534a57.roa
File:                     d8c0c18a-964a-33d6-8c43-5f60b7534a57.roa (raw, json)
Hash identifier:          YqQpxcZ0PmlrlVRCUmYjX9YArS4WEMutIgZ6MIeUMPQ=
Subject key identifier:   5A:64:02:C1:38:52:39:F1:41:1C:59:64:1E:92:E2:7C:F2:57:5C:05
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBDB1EF2445BBE6C030C86340
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8c0c18a-964a-33d6-8c43-5f60b7534a57.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        2603:c002:2300::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:ef:24:45:bb:e6:c0:30:c8:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=b8aba49b-8803-4785-bfe1-5603ba6d9395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d9:b7:e3:30:ee:72:a5:37:93:a5:69:69:70:
                    5e:27:73:ec:a3:2a:96:84:ba:d9:3e:ac:e3:1f:8c:
                    69:b0:c7:48:77:69:47:b1:4f:f6:fb:2b:8e:d1:47:
                    56:f5:56:1f:e3:0b:0c:2f:36:0a:f4:a5:8a:22:a1:
                    66:b1:45:9f:0b:b9:95:66:1c:57:a6:5a:da:0d:33:
                    69:8e:3b:6c:9b:62:c7:bd:35:ec:58:fe:c1:12:cc:
                    19:e3:27:5e:22:91:88:b8:6b:07:86:3a:f0:16:1e:
                    8e:ee:fa:5b:db:14:2a:dc:18:88:80:e8:81:8f:d6:
                    87:e8:b1:08:2b:b3:e0:b0:9d:c5:12:4a:1e:f7:05:
                    64:eb:c8:5f:71:9e:3f:71:9e:20:c8:bd:ce:ca:48:
                    a8:a3:21:52:fa:b7:0b:d8:31:95:3f:ec:13:3c:35:
                    b8:0b:26:f5:6f:46:47:d2:24:cc:30:4f:53:c2:e8:
                    86:be:2c:fa:61:70:fb:c1:82:97:f9:d0:75:a4:80:
                    b9:65:d8:cd:05:d2:6b:41:09:09:ce:b2:68:28:76:
                    aa:cf:eb:2d:66:80:4a:4b:3b:36:fd:a7:9c:6a:5e:
                    69:48:de:22:9a:17:34:3c:85:f0:75:18:ce:f9:74:
                    9e:2f:15:5d:eb:67:6b:8d:56:0b:7c:95:2a:db:58:
                    97:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:64:02:C1:38:52:39:F1:41:1C:59:64:1E:92:E2:7C:F2:57:5C:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8c0c18a-964a-33d6-8c43-5f60b7534a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:2300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:7c:99:bd:e5:97:76:db:c7:82:2c:ad:ab:e5:a3:f8:cd:56:
         0d:65:4b:81:18:e6:ba:52:8a:54:d1:46:12:77:0b:95:80:84:
         eb:37:c6:51:b8:32:d6:61:56:18:87:ba:78:a8:75:6d:86:5b:
         df:e3:c6:a3:3c:0d:db:0e:82:4e:ee:a3:89:14:68:1a:42:8b:
         e2:f7:f1:a0:8c:56:af:3e:cf:b4:37:ca:fa:35:77:b2:48:92:
         5e:83:44:06:c2:32:51:45:28:b6:a6:e6:d2:27:3f:a8:d1:9c:
         5b:71:45:b6:cf:0b:55:ce:b5:eb:6e:4a:28:57:f1:74:e0:01:
         a2:3d:ed:1a:90:b9:20:32:a3:01:36:10:b0:15:7c:6b:f2:a8:
         0b:d4:51:9f:1e:9e:c9:3d:ad:26:46:e2:3c:d6:d7:d3:42:72:
         be:56:ae:5f:7b:70:c6:47:67:67:8d:59:61:5b:c8:53:b8:ca:
         69:f6:07:24:d8:25:38:27:fb:56:e9:1c:6c:d4:7b:8c:af:ad:
         a1:99:b4:85:c7:66:85:70:6b:e8:b0:be:b2:5a:7f:73:d0:0b:
         7d:70:47:57:a1:66:99:ba:7b:b6:9b:34:26:3b:ff:8e:cf:59:
         ef:a2:46:fb:2d:ac:f6:55:ad:c4:76:90:e9:bb:e2:6d:31:ad:
         d3:11:2f:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy9se8kRbvmwDDIY0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
YjhhYmE0OWItODgwMy00Nzg1LWJmZTEtNTYwM2JhNmQ5Mzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19m34zDucqU3k6VpaXBeJ3PsoyqWhLrZPqzj
H4xpsMdId2lHsU/2+yuO0UdW9VYf4wsMLzYK9KWKIqFmsUWfC7mVZhxXplraDTNp
jjtsm2LHvTXsWP7BEswZ4ydeIpGIuGsHhjrwFh6O7vpb2xQq3BiIgOiBj9aH6LEI
K7PgsJ3FEkoe9wVk68hfcZ4/cZ4gyL3OykiooyFS+rcL2DGVP+wTPDW4Cyb1b0ZH
0iTMME9TwuiGviz6YXD7wYKX+dB1pIC5ZdjNBdJrQQkJzrJoKHaqz+stZoBKSzs2
/aecal5pSN4imhc0PIXwdRjO+XSeLxVd62drjVYLfJUq21iXjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFpkAsE4UjnxQRxZZB6S4nzyV1wFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDhjMGMxOGEtOTY0YS0z
M2Q2LThjNDMtNWY2MGI3NTM0YTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAAiMA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADB8mb3ll3bbx4Isravlo/jNVg1lS4EY5rpSilTRRhJ3C5WAhOs3
xlG4MtZhVhiHuniodW2GW9/jxqM8DdsOgk7uo4kUaBpCi+L38aCMVq8+z7Q3yvo1
d7JIkl6DRAbCMlFFKLam5tInP6jRnFtxRbbPC1XOtetuSihX8XTgAaI97RqQuSAy
owE2ELAVfGvyqAvUUZ8ensk9rSZG4jzW19NCcr5Wrl97cMZHZ2eNWWFbyFO4ymn2
ByTYJTgn+1bpHGzUe4yvraGZtIXHZoVwa+iwvrJaf3PQC31wR1ehZpm6e7abNCY7
/47PWe+iRvstrPZVrcR2kOm74m0xrdMRL0Q=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:45 2026 by rpki-client