Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/10a598a3-dddd-3eb9-8c99-aed13a368b9a.roa
File:                     10a598a3-dddd-3eb9-8c99-aed13a368b9a.roa (raw, json)
Hash identifier:          pPtzdbsLTnKobrKRXEP6BMCer9nIAno+c/xtdK3KioY=
Subject key identifier:   2B:0C:38:01:21:FD:B3:99:62:20:98:F2:2B:41:E0:82:A0:9A:B4:85
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F498A06B6E633613C57827C80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/10a598a3-dddd-3eb9-8c99-aed13a368b9a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c059::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:06:b6:e6:33:61:3c:57:82:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8c850a82-9bf9-4644-b526-8660c9230314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:02:81:7e:2c:79:ee:8c:81:77:ad:ef:70:07:
                    5e:b2:ea:cd:bd:86:e3:fb:58:4f:9b:bf:3d:e5:35:
                    8e:ed:6b:01:d6:c4:4e:a3:9f:65:60:85:8b:a5:85:
                    71:7c:67:3a:4e:89:e4:43:ff:45:05:93:f3:77:21:
                    3f:8c:38:d8:ee:bd:ab:ab:c8:6c:1d:1e:a4:d8:63:
                    ce:ff:89:c0:46:e1:6a:61:89:83:e3:1f:0d:67:42:
                    63:dc:ad:47:52:83:de:f1:c6:77:00:ed:fc:71:9d:
                    17:25:27:76:aa:bf:6d:9e:bd:d3:2c:c1:21:9e:c6:
                    47:c3:34:0e:59:1d:a6:c5:1e:99:ad:ea:a2:1a:28:
                    be:87:7c:75:0f:79:10:e5:ef:5b:6f:6c:3d:34:85:
                    de:4d:e6:27:b6:99:03:2b:c6:f2:2a:32:86:06:d5:
                    6b:ce:36:68:09:2a:61:61:99:cc:05:27:4b:54:01:
                    3b:b7:b9:d2:fc:00:af:66:14:85:79:32:19:a9:9e:
                    98:15:9b:14:de:45:12:7c:df:f8:a1:66:77:a7:e8:
                    12:cf:1f:e6:f3:d9:44:43:a9:a4:d3:ce:54:6d:a6:
                    aa:29:51:82:62:fb:a2:9e:82:81:a4:5e:3d:5c:33:
                    29:77:eb:5f:1d:a3:db:8f:56:92:e4:ea:73:71:4f:
                    f2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0C:38:01:21:FD:B3:99:62:20:98:F2:2B:41:E0:82:A0:9A:B4:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/10a598a3-dddd-3eb9-8c99-aed13a368b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c059::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:79:b2:dd:22:58:35:ed:17:16:b5:14:47:0d:ee:80:9d:b4:
         55:09:92:34:61:53:e1:a0:4b:e7:28:3e:4c:82:c5:01:8e:63:
         04:48:69:b1:8f:30:4d:39:f4:4b:41:32:8d:d0:44:b9:65:87:
         dd:be:c0:f1:f1:f1:f8:5e:bd:41:4e:e6:7f:89:a3:8d:c2:4b:
         30:6d:66:30:7f:ad:7a:d7:67:fc:a7:05:da:76:ed:61:f7:17:
         19:af:68:16:73:9a:3d:19:1c:91:42:02:b3:9c:65:e0:19:86:
         9b:c4:69:2e:7c:24:1e:7a:a6:8a:fc:ec:6a:1a:86:f0:03:93:
         c1:73:49:16:42:0c:d3:8b:42:43:a7:9d:5b:92:3a:f9:17:28:
         97:cb:a7:9f:b5:2f:3a:d4:67:6a:e7:c4:3d:c6:1d:ab:88:d1:
         fe:ef:e5:f9:3d:b5:fd:46:18:04:96:eb:e2:26:37:af:99:10:
         4f:db:5a:26:b6:13:2c:5b:92:69:e9:a4:23:12:c9:7f:d9:16:
         0f:9b:b7:14:04:de:1f:85:48:11:78:e6:1a:7d:de:6f:42:81:
         0a:12:20:c0:a3:69:fc:b8:37:5c:ec:76:f6:1d:13:0d:03:46:
         39:c2:49:02:22:1d:13:9a:cc:d9:2b:db:08:6b:61:03:37:7a:
         b2:ee:ef:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:50:52 2026 by rpki-client