Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60a3455f-331e-3a81-91e5-291220065e1c.roa
File:                     60a3455f-331e-3a81-91e5-291220065e1c.roa (raw, json)
Hash identifier:          vNwpRTdMNvAUcABMtT3T4XwRupasgYUFNtPO7pGq+OE=
Subject key identifier:   95:99:3B:3E:1A:1C:F8:E4:66:3A:92:68:B4:CC:5B:14:C4:4B:74:17
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F093D17ECEF3BBA3126D89F00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60a3455f-331e-3a81-91e5-291220065e1c.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:8c00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:17:ec:ef:3b:ba:31:26:d8:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=bf1b6263-99f1-43ef-96fd-539401e531d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:96:a7:68:b5:93:18:c0:d2:8e:92:4d:d6:64:
                    b7:ee:a0:ec:88:ac:83:20:50:70:b3:d3:e9:53:9a:
                    a9:71:83:5e:39:b0:ce:48:58:eb:07:6b:8d:2c:62:
                    ea:83:6b:2d:47:f3:16:6d:2e:07:47:9d:e6:03:d0:
                    af:69:34:2d:6f:f2:da:1f:be:6b:36:82:6d:c2:bf:
                    cf:da:ff:72:ed:57:2a:4e:31:03:5e:77:8a:66:b3:
                    ec:95:ee:86:45:20:7d:4a:70:24:91:0f:ab:98:65:
                    3a:33:80:29:de:45:f8:7d:98:a3:82:74:ef:e1:0a:
                    54:df:7e:4a:09:5d:48:fd:f9:f4:f7:f1:f5:1b:e6:
                    1e:12:df:e5:f5:e7:b8:51:60:49:7f:32:28:6f:4d:
                    d5:0c:bb:86:58:1e:35:b1:77:db:98:02:84:02:5c:
                    81:dd:ef:1d:50:22:58:1f:98:fd:01:b0:19:f7:d8:
                    06:56:d7:32:16:2e:4c:69:d6:c6:35:c2:41:fe:24:
                    b5:a5:5b:ba:04:74:dc:6d:7a:d3:ba:68:ee:a2:67:
                    4d:8d:1c:66:91:43:1f:6f:b8:1c:25:d3:08:7c:e5:
                    26:8a:50:51:2c:77:02:90:51:d8:cf:29:cb:57:8e:
                    94:50:82:dc:9b:80:d1:14:ea:6d:01:a5:57:3c:3d:
                    6c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:99:3B:3E:1A:1C:F8:E4:66:3A:92:68:B4:CC:5B:14:C4:4B:74:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60a3455f-331e-3a81-91e5-291220065e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:8c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3c:76:47:eb:24:df:1d:7f:10:9a:65:0a:88:87:24:1c:b7:
         d4:b2:94:ea:75:c4:5a:61:aa:b2:fb:54:e9:17:ad:37:ca:14:
         89:73:8c:6a:96:14:c7:ee:ac:9d:86:70:ca:bb:8a:66:47:9a:
         2f:b2:23:17:d8:eb:c2:35:b3:63:33:66:05:bf:dd:27:d4:43:
         f1:b7:b8:07:e2:c1:c5:2e:ea:ea:a0:34:a9:c4:e3:9c:6b:3d:
         26:c6:94:ca:d2:11:9d:aa:d5:bf:11:43:f6:06:92:29:02:9c:
         e1:a2:c7:dc:32:c2:6f:3e:94:94:44:1e:eb:cd:ae:cb:69:3f:
         f7:25:94:72:68:8e:99:0f:60:53:ec:71:62:04:31:e3:67:e9:
         72:d6:86:09:57:8b:7d:ec:b1:af:de:60:93:24:16:0a:a3:e9:
         6c:68:49:42:c9:3d:37:5d:32:11:ae:be:3e:41:81:b3:ca:57:
         23:12:79:71:3d:a1:9c:cf:41:92:4f:cf:ac:c2:62:31:af:d2:
         99:8d:c1:6a:69:ea:1c:3e:ab:2f:09:0c:8e:db:0f:6b:c3:d7:
         37:51:54:51:04:53:91:fc:35:01:b5:4a:18:e0:75:4b:59:35:
         fb:ca:03:26:c4:6b:06:89:24:d6:4b:d3:67:9d:e3:cb:de:b5:
         6d:2a:2a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:56:06 2026 by rpki-client