Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39a184b0-a6bc-3935-9b3e-2bd544e59417.roa
File:                     39a184b0-a6bc-3935-9b3e-2bd544e59417.roa (raw, json)
Hash identifier:          aUNRTOIIg9htZZ0zcEdTcK77rSKKU33AxcDwSKXMed0=
Subject key identifier:   E3:F8:F2:DD:75:9A:21:8B:29:FC:38:9D:2B:7D:98:50:2D:CE:DC:06
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F20F7A2EDA211C72639B9BC80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39a184b0-a6bc-3935-9b3e-2bd544e59417.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:a200::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:a2:ed:a2:11:c7:26:39:b9:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=6f798680-7c6b-416b-9181-c3352a5bcffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9f:1c:10:ed:d6:fc:bc:ec:d0:92:d0:28:94:
                    4c:53:14:68:6b:85:bb:4f:36:2c:b9:e1:ed:60:24:
                    cb:d0:a5:4f:3f:fe:f4:c0:d4:99:f6:f0:ac:6a:3c:
                    c6:9f:85:73:f6:7a:a3:75:6d:a1:b6:7d:5a:4f:1a:
                    9b:3a:76:3a:77:ca:5c:1e:47:35:17:0f:88:8a:b2:
                    3c:1b:46:b5:6d:48:62:62:c1:fe:9d:bd:cb:29:99:
                    94:7d:5e:0e:07:da:a6:a5:0b:d5:a9:ba:cb:90:e4:
                    38:04:58:42:b4:e2:01:d2:cf:f0:e5:09:fb:6b:03:
                    98:42:18:b9:b7:14:8f:cc:61:99:61:cd:7c:b6:4e:
                    88:6b:61:54:10:0d:e7:11:6c:9b:1e:e3:3d:10:61:
                    10:de:c2:da:26:e8:a0:c4:43:93:0a:aa:7e:cd:f6:
                    dd:36:5d:f4:ad:61:c9:24:f5:17:ea:65:dd:2f:7e:
                    78:df:c4:45:94:f2:01:9d:b4:ca:b7:32:59:b2:ca:
                    42:32:99:af:ef:e6:53:19:60:ea:5d:a2:e2:a9:3d:
                    ec:7c:f5:c8:91:96:d8:b0:63:78:0f:8a:88:7c:08:
                    f1:ea:60:a1:1a:56:31:c9:0d:75:0b:05:27:70:09:
                    e4:47:6c:3a:6b:a5:69:e8:4d:ed:eb:90:7a:5a:3b:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F8:F2:DD:75:9A:21:8B:29:FC:38:9D:2B:7D:98:50:2D:CE:DC:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39a184b0-a6bc-3935-9b3e-2bd544e59417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:a200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:01:55:3e:8e:d0:be:4c:74:9c:ab:5e:b5:de:fe:40:f8:bb:
         dd:58:b7:c9:81:31:a6:66:00:79:e4:d1:10:85:c7:79:93:0b:
         cd:f3:a9:0f:12:79:72:54:69:38:5c:35:3f:73:80:26:37:92:
         02:fe:aa:09:92:3c:43:e9:95:f9:c4:8c:77:b2:10:81:61:8a:
         5c:46:24:f2:c5:81:38:e2:e3:9b:1e:1a:55:76:26:f9:36:5b:
         f6:e2:37:18:c0:75:e8:c8:4a:d6:81:68:12:f9:73:52:97:d7:
         80:ad:ce:ef:04:69:1a:30:ad:cb:d8:fe:f9:38:9a:7e:0c:14:
         9f:7d:89:ec:4c:25:cf:ea:cd:73:82:64:c1:91:52:30:04:3d:
         5d:3c:fa:3e:f6:bd:71:74:8d:e1:29:c0:ec:35:08:ea:d6:44:
         8d:f3:b9:1c:d3:9d:eb:14:f2:dc:61:7c:81:55:45:77:95:47:
         c4:c0:22:9f:78:df:44:8a:c6:28:32:18:30:02:18:11:68:3b:
         a1:09:2a:f1:83:b3:86:c3:be:4f:14:18:a4:12:42:d8:a3:5d:
         c9:d0:4a:df:9a:a6:6c:be:5c:cf:db:6b:e2:5f:db:7f:b8:88:
         c1:96:d7:50:aa:d9:4a:00:fb:47:74:fc:83:f8:bd:36:88:df:
         50:4a:08:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:50:02 2026 by rpki-client