Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ebd60e7d-1a96-3862-b6a0-008bc84fc7d8.roa
File:                     ebd60e7d-1a96-3862-b6a0-008bc84fc7d8.roa (raw, json)
Hash identifier:          k2L3fEVbUc5vEjDHg7WbTxEdiJ8zE57bqijPienK5os=
Subject key identifier:   E4:2E:EC:A2:B6:07:00:6F:4C:E2:2A:C4:FB:B7:11:55:04:0D:47:58
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBDB1EED9FE8A4D5AB8844BC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ebd60e7d-1a96-3862-b6a0-008bc84fc7d8.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        2603:c002:2910::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:ee:d9:fe:8a:4d:5a:b8:84:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=492e1d0a-f79a-4a28-898d-3a3ca7dd7198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:38:13:ef:49:7b:e1:00:33:de:0f:e3:e0:
                    3c:2c:27:0d:fc:47:62:2c:aa:1e:81:bd:cf:61:68:
                    cf:01:9f:42:5f:2e:7f:0c:4e:d7:a0:80:25:34:bb:
                    d6:4d:32:e5:e3:ac:18:c7:d2:1a:0d:ed:3c:6d:06:
                    a6:3d:56:b3:e5:52:bf:dd:99:20:c4:ac:79:b0:63:
                    b6:32:75:5f:05:c8:59:77:24:32:89:7d:f0:19:e7:
                    76:57:cd:e6:e5:10:ad:b4:c8:94:9d:7c:b3:3b:c3:
                    cb:25:e6:56:53:52:f8:48:4a:5f:db:4c:f3:3d:ee:
                    f4:92:35:84:e7:94:71:9a:65:83:7e:f8:77:f8:2f:
                    e7:f9:35:f0:bb:53:00:20:57:c0:ea:d8:56:02:bd:
                    cc:4a:d7:f6:7f:f9:e3:2a:d7:37:09:21:3c:0c:ff:
                    aa:42:b6:87:55:ea:0f:02:ce:2e:e4:fc:01:cc:cb:
                    20:be:d6:38:9c:a0:47:1c:7f:b3:ad:ce:00:a9:01:
                    80:ea:bb:08:1c:b4:f9:fa:d3:18:2b:72:3c:86:8a:
                    f0:5f:f6:5d:7d:ee:a0:fb:73:cc:c1:f3:24:a4:6a:
                    31:0b:64:1b:07:66:45:c5:6d:09:e6:64:50:69:15:
                    fb:40:c2:07:82:bd:f3:02:29:6f:40:9c:10:35:51:
                    f4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2E:EC:A2:B6:07:00:6F:4C:E2:2A:C4:FB:B7:11:55:04:0D:47:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ebd60e7d-1a96-3862-b6a0-008bc84fc7d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:2910::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6d:2d:11:e7:40:ca:17:41:14:80:75:32:ac:8f:76:a3:e8:
         de:a2:af:84:83:26:11:83:4b:9d:a2:9c:80:da:13:93:75:38:
         5c:35:ea:3c:5d:53:f8:27:85:eb:ec:19:be:f1:90:0e:a8:e5:
         71:c1:60:7b:15:7f:4a:96:7d:1a:3e:81:6b:68:1e:e6:6d:e7:
         b2:42:59:b0:b4:90:80:58:dd:e5:a6:3e:50:7f:2c:e5:33:b1:
         54:83:38:c6:c0:3a:d8:9f:2f:c3:d9:0f:4d:c7:43:c2:d8:b2:
         3f:de:e5:d1:11:a9:df:82:c3:5e:50:fd:bc:cf:ef:6f:14:d4:
         f7:e5:c8:e4:41:21:3c:d4:ff:d1:0b:94:ab:de:24:e1:61:71:
         c5:1c:f4:3d:44:fe:44:7e:4c:74:97:01:59:3f:a1:a7:23:a8:
         1a:f0:e0:1e:2d:38:e2:5e:e2:1b:a1:7d:7c:73:9e:31:56:d4:
         e9:15:55:22:37:10:c3:2d:80:f5:cd:18:3c:96:3c:5e:f6:a6:
         07:b2:f4:72:56:08:1c:b0:4d:8c:5c:b9:7c:da:1e:76:27:a9:
         94:30:2b:ec:89:6f:da:75:06:b8:a2:0f:74:74:7a:6e:90:db:
         80:ac:9f:19:d9:3a:ce:d6:2a:16:6a:c5:09:e9:c2:62:36:52:
         d6:d8:7f:aa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy9se7Z/opNWriES8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
NDkyZTFkMGEtZjc5YS00YTI4LTg5OGQtM2EzY2E3ZGQ3MTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR44E+9Je+EAM94P4+A8LCcN/EdiLKoegb3P
YWjPAZ9CXy5/DE7XoIAlNLvWTTLl46wYx9IaDe08bQamPVaz5VK/3ZkgxKx5sGO2
MnVfBchZdyQyiX3wGed2V83m5RCttMiUnXyzO8PLJeZWU1L4SEpf20zzPe70kjWE
55RxmmWDfvh3+C/n+TXwu1MAIFfA6thWAr3MStf2f/njKtc3CSE8DP+qQraHVeoP
As4u5PwBzMsgvtY4nKBHHH+zrc4AqQGA6rsIHLT5+tMYK3I8horwX/Zdfe6g+3PM
wfMkpGoxC2QbB2ZFxW0J5mRQaRX7QMIHgr3zAilvQJwQNVH00QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOQu7KK2BwBvTOIqxPu3EVUEDUdYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWJkNjBlN2QtMWE5Ni0z
ODYyLWI2YTAtMDA4YmM4NGZjN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAAikQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEBtLRHnQMoXQRSAdTKsj3aj6N6ir4SDJhGDS52inIDaE5N1OFw1
6jxdU/gnhevsGb7xkA6o5XHBYHsVf0qWfRo+gWtoHuZt57JCWbC0kIBY3eWmPlB/
LOUzsVSDOMbAOtifL8PZD03HQ8LYsj/e5dERqd+Cw15Q/bzP728U1PflyORBITzU
/9ELlKveJOFhccUc9D1E/kR+THSXAVk/oacjqBrw4B4tOOJe4huhfXxznjFW1OkV
VSI3EMMtgPXNGDyWPF72pgey9HJWCBywTYxcuXzaHnYnqZQwK+yJb9p1BriiD3R0
em6Q24CsnxnZOs7WKhZqxQnpwmI2UtbYf6o=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:24 2026 by rpki-client