Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/495fc312-f0c8-3101-9f65-29408390ed87.roa
File:                     495fc312-f0c8-3101-9f65-29408390ed87.roa (raw, json)
Hash identifier:          JzvAtXzDvgKLUMPHZ3o995JPjPfFFoMftlFn/ON9grk=
Subject key identifier:   DC:58:18:F0:14:99:24:4E:CC:0B:41:A1:AC:18:9A:1B:A8:44:22:D7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E1A1431F7FD4FF28F315ED280
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/495fc312-f0c8-3101-9f65-29408390ed87.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0d2:4000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:31:f7:fd:4f:f2:8f:31:5e:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=a55096d6-392d-42db-ad01-133cb47d50d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:03:8f:00:f6:b0:25:66:96:6f:cd:3f:f3:9b:
                    18:e3:54:9a:a0:57:c5:b3:c1:5c:40:4d:73:97:8b:
                    04:73:77:32:39:55:c8:fd:1a:45:a3:d9:6b:9c:6d:
                    a4:ac:09:02:44:e5:4a:ac:30:94:68:22:3c:ee:f1:
                    3a:e8:1a:e1:6d:8f:39:c3:6c:9d:28:4a:4b:34:b6:
                    fe:aa:e4:6e:d5:6e:1c:3b:7b:d1:42:a6:80:02:2c:
                    6f:81:94:7d:7b:25:0a:72:b2:84:f9:3b:13:79:3a:
                    4a:ac:2a:14:9b:cf:3f:f1:27:09:6a:47:a2:30:db:
                    15:4c:4e:41:a3:1d:9b:e2:35:5a:34:79:82:cb:f5:
                    dc:91:3a:52:07:33:67:c3:40:d4:ed:49:3a:cc:24:
                    2e:b5:8b:34:4d:72:dd:22:36:79:45:dd:ad:b3:68:
                    72:d7:70:0d:ad:7f:d1:1b:a8:c6:60:22:bf:16:a5:
                    b4:ed:0f:8e:80:ed:82:a8:02:38:9e:2e:4f:9f:d4:
                    6f:5e:d5:02:ac:3a:1d:41:c8:f2:81:a1:c2:ab:48:
                    44:c4:e7:c1:c7:57:64:86:44:bd:bb:44:a5:2d:4c:
                    fc:75:14:7d:ea:5c:a5:1b:f1:13:89:49:3a:c1:eb:
                    3f:87:a1:b7:55:c4:79:11:e5:73:70:7a:62:ba:e9:
                    d9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:58:18:F0:14:99:24:4E:CC:0B:41:A1:AC:18:9A:1B:A8:44:22:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/495fc312-f0c8-3101-9f65-29408390ed87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0d2:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:27:f6:2d:87:b2:d3:83:53:8f:14:57:4e:9b:56:ab:50:49:
         72:7b:3b:d4:27:1f:10:df:99:ec:34:ca:f5:de:dd:6d:fc:2b:
         6e:e9:c3:23:7d:7f:ea:3b:cd:c7:ed:7c:ed:15:64:aa:5e:20:
         76:99:a7:6e:ec:d5:24:5b:4c:cd:1c:ac:91:cf:ca:50:c6:b8:
         18:b9:75:61:78:fa:26:98:5f:a4:aa:35:5f:df:57:82:eb:bf:
         bb:eb:6d:df:e1:ed:cb:94:cd:e9:c7:95:3f:e5:3d:80:57:04:
         55:8c:29:f9:95:cf:e3:40:cf:85:1c:4a:bb:27:ef:c8:3c:37:
         5a:23:8b:04:3b:4a:09:7e:51:16:18:67:2e:5d:a7:34:0f:80:
         f5:59:31:a7:14:3f:f1:cd:82:e1:8c:cc:b0:42:70:fa:0f:de:
         cf:b1:dc:17:a9:66:c2:d1:ed:ba:14:30:3f:86:ee:f8:be:53:
         e2:66:40:65:61:2a:2b:ed:e4:b8:70:11:c5:e1:a8:77:5e:16:
         1e:ac:07:56:1d:11:f2:6b:07:fc:4c:b9:22:c3:a0:e7:7f:5e:
         96:1a:5f:36:5f:1c:24:aa:69:e9:37:79:a8:62:be:68:07:a3:
         01:3d:21:10:0b:d1:c6:c9:c0:bc:21:fa:18:18:c6:38:4d:d7:
         1b:3c:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:42:50 2026 by rpki-client