Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/18d42c63-4864-33b0-b64b-33ee0ad1b3cb.roa
File:                     18d42c63-4864-33b0-b64b-33ee0ad1b3cb.roa (raw, json)
Hash identifier:          gMOj0MwaF48Xc9mglsZz1d56DiMJ5bZ2ZWVbEzwcTjw=
Subject key identifier:   99:3B:CE:D3:16:52:E9:8C:F6:EE:B4:56:39:3E:10:F2:53:2C:1A:3A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F093D0FC803D9A3E92EF98880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/18d42c63-4864-33b0-b64b-33ee0ad1b3cb.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        2603:c013:c000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:0f:c8:03:d9:a3:e9:2e:f9:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=e25ed45e-c7b5-42e5-84a6-25f447229c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:d7:3f:2d:7b:39:df:e5:34:23:c8:b7:01:
                    75:67:6b:f6:be:5e:80:8e:37:71:a2:9b:c3:fd:b2:
                    f0:af:c5:3e:8a:0f:ef:97:20:e4:08:2c:97:0b:31:
                    8e:f6:dc:42:63:dc:37:79:28:3f:4e:16:15:cc:06:
                    37:f1:1a:22:33:be:51:4e:42:f2:70:6d:a5:80:52:
                    b4:bd:1d:9f:15:26:83:fd:c1:ce:bf:a8:b7:14:a5:
                    e4:b9:e8:cf:49:0a:f5:4a:6c:f5:66:cd:5a:d4:61:
                    40:ef:48:e7:d8:da:eb:61:41:72:42:a7:aa:c0:97:
                    7c:b9:57:55:df:4f:aa:a9:c9:bd:77:77:c8:93:37:
                    5a:a3:b0:50:ba:99:3c:86:b4:e0:d0:ac:78:2d:c9:
                    59:b6:d1:0c:b1:a8:04:d3:a2:5d:b3:cd:6a:62:f7:
                    db:74:45:df:60:34:9c:89:d0:56:0c:5f:bb:89:e7:
                    9d:20:bc:3c:5e:f3:0f:6e:06:3e:ea:9d:91:11:40:
                    ac:0e:da:48:82:cc:08:da:1a:51:f9:ea:f2:04:8f:
                    ad:37:8d:f0:8b:3d:30:fe:08:ad:a4:06:f0:4b:bc:
                    af:2f:b1:10:88:cc:e0:ed:fc:6a:4e:62:9b:70:e6:
                    bb:37:7e:6c:3b:4e:0a:d5:fd:82:c9:b7:73:04:b9:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3B:CE:D3:16:52:E9:8C:F6:EE:B4:56:39:3E:10:F2:53:2C:1A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/18d42c63-4864-33b0-b64b-33ee0ad1b3cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c013:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:88:b9:19:d6:fe:5d:5c:67:0d:68:76:ca:3a:86:c2:88:03:
         2b:34:16:5f:ca:39:03:39:97:ee:1c:52:74:e9:ac:bb:8d:de:
         9e:c5:42:f3:cc:34:c2:68:7a:94:ee:42:72:3b:ad:92:1d:7e:
         a6:45:bf:43:ef:f0:17:b2:48:6d:89:59:14:db:38:f8:08:41:
         05:b4:8f:e1:71:08:64:30:20:b9:07:b5:59:f7:40:56:9e:71:
         8e:73:b9:44:06:0a:2a:a2:f4:42:72:58:3d:98:90:7c:2a:4e:
         00:6d:8f:2d:a8:ca:43:2e:f5:be:8b:bf:a3:8a:f0:6d:07:38:
         18:39:1b:b1:13:e4:ab:0e:74:0e:ba:1c:6b:2c:19:63:c6:c9:
         46:5c:83:9e:bc:15:b2:b1:fd:47:aa:02:2e:34:cc:46:1f:0f:
         bd:c8:e0:09:30:d4:27:50:6e:c5:78:55:c8:85:25:79:bf:6c:
         f0:2c:8d:f1:2c:28:f1:f5:2f:3c:bc:69:34:c3:94:b4:16:32:
         9f:9c:59:d0:c9:89:e4:3d:59:ee:2a:e1:3c:02:69:cc:1d:d3:
         f0:d4:1a:2b:d2:e6:47:34:6f:62:cc:73:89:b3:71:e2:b1:7f:
         ea:e4:1a:fa:4f:49:84:73:ff:79:ee:e2:67:e5:03:3e:e9:90:
         eb:75:3e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:39:56 2026 by rpki-client