Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b5ed9e3-d6e4-3ec4-bdf3-dd15de4d928c.roa
File:                     4b5ed9e3-d6e4-3ec4-bdf3-dd15de4d928c.roa (raw, json)
Hash identifier:          tAoma9yIdACebKWWYWC6YCwvN2F3+13E5NKpTiKv9Ik=
Subject key identifier:   73:06:02:0E:17:57:F1:E8:E7:39:54:C8:96:2B:53:C9:0B:36:95:2A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F4987EE14C1034AE1D97CA400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b5ed9e3-d6e4-3ec4-bdf3-dd15de4d928c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c088:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:ee:14:c1:03:4a:e1:d9:7c:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fbb8ce2e-85cf-4b0b-8978-584ec86fdee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5e:9c:07:fd:61:25:72:4d:5e:d4:5e:1c:86:
                    c0:0f:12:7d:43:96:7c:f7:21:53:7d:d0:81:1a:a6:
                    ac:d4:90:8a:51:2f:24:9a:b1:e1:31:37:93:de:72:
                    7f:42:e8:df:8c:1e:e2:46:dd:27:14:05:78:c0:0f:
                    27:da:19:7c:01:ca:e7:a8:6f:5b:81:7e:ff:98:62:
                    cc:67:82:b5:2b:97:db:cc:69:9a:6a:13:e6:26:44:
                    e7:29:47:b1:fb:9c:58:19:15:46:a9:1f:71:5e:1f:
                    24:6d:57:d6:cd:b8:3f:2d:94:b3:54:73:37:42:4c:
                    68:21:d0:b7:b5:81:96:db:de:2b:0c:af:a4:dd:33:
                    6a:55:7c:f0:5d:d4:d3:f0:71:33:a1:32:79:03:6c:
                    3a:b6:2a:1b:bc:c1:70:52:63:68:8f:d4:53:c7:d1:
                    2a:8c:4f:6b:b8:26:d0:24:43:ef:58:eb:27:dc:54:
                    92:0a:00:dd:18:af:96:a8:da:4e:4f:26:0a:d2:1f:
                    cf:ba:0c:e3:f2:f5:df:15:79:85:f6:e7:de:bc:c9:
                    38:2d:c9:52:7d:fc:32:7e:e4:8d:10:ef:d9:3a:8b:
                    6f:59:8e:3e:95:a7:b1:f1:db:bf:0f:e5:a3:c2:fb:
                    68:56:d8:a6:27:1e:6b:61:b7:15:44:6a:f9:7a:fb:
                    94:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:06:02:0E:17:57:F1:E8:E7:39:54:C8:96:2B:53:C9:0B:36:95:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b5ed9e3-d6e4-3ec4-bdf3-dd15de4d928c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c088:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9c:c4:c6:7d:e1:cb:c0:42:9f:13:56:cd:b4:ba:b0:06:4f:
         9c:16:1c:de:3c:06:36:5c:94:60:7c:19:c6:11:67:42:13:bf:
         7c:3c:7c:ef:2f:f9:c7:b5:96:15:50:ea:33:a1:20:5e:10:fa:
         22:e2:74:4b:a0:ea:ca:4c:6b:7b:4e:0b:9b:7c:4c:82:c9:2d:
         2d:10:ec:ef:54:3b:b4:6f:ec:7b:96:59:cf:9b:fc:6d:fc:60:
         28:d1:be:38:24:ba:37:d0:64:32:21:9a:a4:a7:23:ad:d3:50:
         41:3a:57:61:b0:39:65:37:ad:ad:e7:4a:33:09:3e:0f:a0:2e:
         98:82:72:d7:70:44:3b:f7:c0:89:fa:a6:dd:4a:7a:5d:d3:c8:
         f7:6d:82:4e:80:53:2d:d1:88:92:9d:cc:ad:eb:2f:b5:bd:04:
         78:d6:0d:3d:f6:5d:95:3d:7b:7c:44:65:c6:50:ab:a9:cc:40:
         07:9d:83:44:1a:22:7d:90:91:cd:f9:e1:57:18:c7:2c:38:cf:
         89:6d:4a:20:db:69:23:92:36:3b:e3:c7:00:e2:1f:22:75:d2:
         d9:8e:2b:36:ea:ca:47:93:37:0b:ea:3d:63:52:af:27:e9:30:
         65:3f:12:36:4b:3a:8c:bb:2e:7f:c8:01:83:55:b6:ad:79:66:
         7d:f9:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:19:32 2026 by rpki-client