Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffedef33-2fb7-3ccc-af47-97eef0c97160.roa
File:                     ffedef33-2fb7-3ccc-af47-97eef0c97160.roa (raw, json)
Hash identifier:          EMjF8Av+h1Z1iapx6sQIEvH38b+1wbUmsdWdkaF8SKU=
Subject key identifier:   B7:9C:87:1F:D1:14:07:39:DB:7A:0B:B2:E1:EE:93:50:AA:4F:27:FE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E736A19DFBA56F98B532B0E80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffedef33-2fb7-3ccc-af47-97eef0c97160.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c01b::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:19:df:ba:56:f9:8b:53:2b:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=0af360cd-46ac-4f03-beba-38a5a5ee1922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cb:1f:49:d3:02:f6:0a:5b:b4:e7:3c:60:57:
                    d1:91:56:09:ff:43:4f:32:d9:4a:f9:52:fd:b7:3c:
                    89:a2:53:a8:13:4f:df:3a:2b:bc:01:a3:26:fd:43:
                    87:9c:2a:fa:77:00:74:87:11:11:12:d7:e3:41:34:
                    8d:98:be:9c:39:0e:3e:3d:6a:8f:f4:56:d2:28:d8:
                    62:fa:a4:41:04:c1:a7:83:6b:a3:a6:da:bb:48:4b:
                    f1:95:6b:1b:4b:70:9f:c1:f9:5f:03:b2:8c:49:a0:
                    63:89:d5:29:44:14:68:33:ef:de:79:7c:16:12:96:
                    66:85:67:02:5e:f4:47:16:fa:38:b0:3a:0e:72:23:
                    63:c9:aa:17:b1:d0:e7:06:7e:42:08:b1:ed:f5:00:
                    52:2e:1f:3a:aa:28:8b:3c:9d:61:46:cf:9b:9a:f7:
                    91:51:fb:4e:d4:7f:52:8b:83:0e:a6:86:3d:9c:85:
                    93:4a:a2:a6:24:67:d3:66:b2:28:fb:1b:25:26:b9:
                    5f:cc:07:3a:25:d0:d3:75:73:aa:96:1d:e2:45:f8:
                    94:c0:d7:95:84:82:8a:e7:36:32:24:b4:e0:02:cf:
                    fe:b1:32:ef:d3:9e:f0:09:ca:b7:40:c4:ee:b7:af:
                    48:1b:14:7b:ea:58:2f:e6:5e:34:97:8d:7c:b6:39:
                    49:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9C:87:1F:D1:14:07:39:DB:7A:0B:B2:E1:EE:93:50:AA:4F:27:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffedef33-2fb7-3ccc-af47-97eef0c97160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c01b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e6:97:d3:4f:e6:04:49:d6:fe:85:cc:c8:f9:10:cf:a1:4e:
         96:f0:15:9e:0d:44:7d:65:ed:32:7a:ed:ef:e5:03:59:c4:1c:
         9e:c1:b0:06:18:04:9a:5e:ec:f6:87:50:dd:03:54:8e:63:15:
         22:24:81:87:9c:38:2e:17:54:7e:2c:c3:bb:ed:19:94:7b:88:
         77:a2:96:01:76:1d:e9:4d:0e:6d:d4:01:a7:a8:c0:1f:c2:4e:
         5a:4b:5a:9a:32:50:18:f1:fb:40:63:42:42:18:c1:34:59:7b:
         af:d3:4c:0b:19:80:46:29:96:2c:cd:95:17:4c:80:7e:88:a2:
         a3:11:70:73:97:9f:4e:f2:28:d0:f6:56:50:86:23:41:28:95:
         72:bb:d5:09:6f:f1:73:f7:cb:6e:be:17:9e:60:87:85:01:a9:
         e1:8c:9c:90:c8:dd:25:ac:cc:71:9e:e4:be:ca:cd:e1:1a:ae:
         be:a1:cf:b2:ff:8b:ef:a4:6a:b3:e4:83:7c:d0:18:54:24:10:
         ab:e1:e5:91:5d:ff:e5:93:2d:09:d0:b1:7e:8c:70:89:5b:dc:
         09:bb:bd:eb:a7:c5:25:84:6f:f7:df:51:47:56:3f:97:41:f9:
         e0:16:6b:ff:26:ba:d9:8b:bc:3d:05:80:f7:46:93:da:d4:d1:
         3e:0b:c0:72
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5zahnfulb5i1MrDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk
MGFmMzYwY2QtNDZhYy00ZjAzLWJlYmEtMzhhNWE1ZWUxOTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcsfSdMC9gpbtOc8YFfRkVYJ/0NPMtlK+VL9
tzyJolOoE0/fOiu8AaMm/UOHnCr6dwB0hxEREtfjQTSNmL6cOQ4+PWqP9FbSKNhi
+qRBBMGng2ujptq7SEvxlWsbS3CfwflfA7KMSaBjidUpRBRoM+/eeXwWEpZmhWcC
XvRHFvo4sDoOciNjyaoXsdDnBn5CCLHt9QBSLh86qiiLPJ1hRs+bmveRUftO1H9S
i4MOpoY9nIWTSqKmJGfTZrIo+xslJrlfzAc6JdDTdXOqlh3iRfiUwNeVhIKK5zYy
JLTgAs/+sTLv057wCcq3QMTut69IGxR76lgv5l40l418tjlJqwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLechx/RFAc523oLsuHuk1CqTyf+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmZlZGVmMzMtMmZiNy0z
Y2NjLWFmNDctOTdlZWYwYzk3MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAGwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXeaX00/mBEnW/oXMyPkQz6FOlvAVng1EfWXtMnrt7+UDWcQcnsGw
BhgEml7s9odQ3QNUjmMVIiSBh5w4LhdUfizDu+0ZlHuId6KWAXYd6U0ObdQBp6jA
H8JOWktamjJQGPH7QGNCQhjBNFl7r9NMCxmARimWLM2VF0yAfoiioxFwc5efTvIo
0PZWUIYjQSiVcrvVCW/xc/fLbr4XnmCHhQGp4YyckMjdJazMcZ7kvsrN4RquvqHP
sv+L76Rqs+SDfNAYVCQQq+HlkV3/5ZMtCdCxfoxwiVvcCbu966fFJYRv999RR1Y/
l0H54BZr/ya62Yu8PQWA90aT2tTRPgvAcg==
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:46:33 2026 by rpki-client