Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01ea527e-53f5-3f02-89f6-6eef7f776df5.roa
File:                     01ea527e-53f5-3f02-89f6-6eef7f776df5.roa (raw, json)
Hash identifier:          34PMNVnAtNoj11iT614j/74XhuyLzAoBMEJjeoEi67E=
Subject key identifier:   AF:D6:9C:BC:C7:36:84:60:78:16:5A:1E:83:9C:52:8A:D5:D1:B1:78
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F0D6CD4F370E3E3CBE9783900
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01ea527e-53f5-3f02-89f6-6eef7f776df5.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:8500::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:d4:f3:70:e3:e3:cb:e9:78:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=bf37f33c-37e6-41ca-b37c-2e18617bca88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:7e:b0:04:a7:19:e9:54:af:ca:a1:d7:46:
                    2c:77:6a:1f:18:98:67:0b:f8:09:dc:5c:49:7c:81:
                    98:27:a3:45:ce:c4:28:25:05:df:be:6d:69:3b:21:
                    e9:6a:50:05:5c:e0:24:f9:92:2f:7d:2b:4c:53:34:
                    1d:0a:51:38:af:38:7f:ff:8c:80:e8:01:72:be:40:
                    b0:9b:5b:63:c3:1f:4d:ae:00:aa:26:04:fc:ed:00:
                    ca:78:4f:05:db:7c:32:a7:c0:cf:16:e0:f4:6e:17:
                    c3:91:10:e8:35:1a:cb:d6:15:c6:65:33:8e:8e:be:
                    eb:0d:7a:d5:41:2a:5e:57:90:f7:d0:07:a9:71:4d:
                    1b:8d:e9:b0:73:98:29:6d:85:4d:87:76:c3:a7:5c:
                    db:34:5c:d8:78:59:45:23:86:29:45:9d:a8:81:1a:
                    43:5a:61:cc:19:92:a9:27:37:ad:f7:d4:98:38:1f:
                    95:f8:6c:c5:2a:07:ef:aa:08:3f:f1:8a:e9:34:19:
                    1e:93:3b:37:c9:1c:24:07:52:41:76:7f:52:70:f9:
                    18:b6:d4:c9:cc:f3:a1:6d:50:b5:42:71:48:7b:85:
                    e0:98:9c:a3:ae:0c:22:20:3b:4e:6d:d5:4a:e4:cd:
                    4d:03:43:1c:16:2b:4c:35:cd:5d:16:a7:37:aa:e2:
                    6e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D6:9C:BC:C7:36:84:60:78:16:5A:1E:83:9C:52:8A:D5:D1:B1:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01ea527e-53f5-3f02-89f6-6eef7f776df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:8500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:fe:a9:20:27:e7:44:c7:4c:ae:f3:7f:77:80:8c:bf:59:53:
         a0:83:ac:aa:27:97:90:8e:00:48:f8:41:5a:af:69:1c:ae:87:
         88:88:d3:c4:1e:69:28:78:5d:09:a7:3d:9e:01:5a:23:a4:21:
         52:d1:01:c5:aa:19:c6:ba:8b:0b:36:81:ae:8a:74:c6:e1:fb:
         0e:22:73:23:7f:e3:1f:28:82:96:43:e3:da:24:36:95:05:61:
         80:93:d0:cf:9e:a4:c0:ee:ff:03:de:b0:8e:f9:f1:97:73:c0:
         ef:eb:5a:86:cf:f1:67:0f:3b:77:e9:72:38:07:10:51:e8:79:
         5c:98:fa:56:68:ae:91:71:3a:d2:6e:33:e0:0b:3b:36:86:2e:
         2c:8b:3a:5c:ef:66:30:2e:cc:54:91:80:a7:23:df:b8:22:b8:
         fb:17:e0:5e:fa:6e:f2:06:7c:97:19:6b:ca:3c:ef:c9:fa:39:
         5f:6a:fd:90:26:29:85:7a:8d:d1:06:e0:73:23:9a:28:56:28:
         24:76:b0:61:65:0f:30:9e:d5:7d:57:f3:18:06:0b:2e:58:37:
         a9:ce:80:d5:c3:ee:60:86:5a:6b:e3:ed:0d:a7:eb:d6:d1:2f:
         f6:05:1b:b5:ee:4f:be:3c:58:e5:8d:0f:87:05:e7:41:77:3e:
         9e:99:78:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:21:41 2026 by rpki-client