Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6455d2c0-9f8b-33be-8c30-64023177faf7.roa
File:                     6455d2c0-9f8b-33be-8c30-64023177faf7.roa (raw, json)
Hash identifier:          f1abnMhZPK8WLWlrQHJot6iHcITKrkrmYvkCZJ1Cdp0=
Subject key identifier:   10:DC:6F:E2:4E:A4:EE:39:9F:6E:BC:49:F7:05:F6:A7:A2:ED:E9:B9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D86953AAD4BD4C12E30D9D380
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6455d2c0-9f8b-33be-8c30-64023177faf7.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        2603:c01a::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:3a:ad:4b:d4:c1:2e:30:d9:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=70eaea8c-3660-405b-b7be-227ff046d7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:32:99:9a:f3:07:b1:ae:3e:db:07:14:8e:
                    37:a7:91:e8:4f:ec:17:3a:41:a6:9a:ed:1c:ea:92:
                    71:13:0c:ec:9b:25:75:9c:7c:c2:57:41:21:57:e8:
                    cd:38:fc:59:c5:cb:be:40:05:68:07:49:79:ab:b0:
                    a2:13:3a:35:1c:b5:22:6e:ab:fd:09:0f:12:6e:c3:
                    0a:e5:99:11:d2:57:68:27:d3:e5:2c:00:fc:2a:72:
                    90:fb:44:75:c9:b8:78:2e:e7:fd:cd:46:76:2f:38:
                    66:96:02:4d:87:b1:5f:2f:54:8c:fa:fa:2a:f5:41:
                    9e:db:95:3b:0e:79:a4:6c:e2:bc:04:15:a9:0e:01:
                    e2:bc:5a:2e:d6:b7:70:7e:0a:91:91:57:3a:ef:21:
                    81:9b:cc:b8:32:18:9a:4a:5e:0a:7c:c4:0c:d2:1b:
                    5b:11:75:e6:33:47:e1:5e:f9:9c:1d:13:f9:9d:98:
                    c6:7d:4c:2b:04:11:53:43:d7:c0:06:ff:f1:bc:54:
                    b5:fc:c4:5f:05:99:e9:64:f2:22:3f:84:d8:66:b5:
                    1e:80:25:e5:4d:66:f3:b9:8c:53:f9:79:7c:75:5c:
                    a9:1a:19:eb:28:e8:1b:86:9a:78:f1:a6:88:89:f7:
                    7a:63:7f:1f:bb:01:1f:ea:b8:66:49:1e:68:60:b0:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DC:6F:E2:4E:A4:EE:39:9F:6E:BC:49:F7:05:F6:A7:A2:ED:E9:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6455d2c0-9f8b-33be-8c30-64023177faf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c01a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:cd:06:11:e5:7a:eb:4a:59:76:c0:28:b9:1e:da:c6:1d:da:
         65:21:c6:7e:88:73:1e:9f:7a:1b:d1:7c:79:cb:41:0c:c7:b3:
         6f:e0:ec:cc:23:c8:61:53:9b:c5:6e:c3:72:8b:b7:38:38:32:
         5b:f6:7e:a1:5a:f8:9d:57:4e:0e:a2:4a:77:75:66:37:75:8b:
         2b:b9:d5:09:b5:66:01:fc:9a:18:3d:a4:6e:46:ee:e2:13:41:
         01:fc:c6:84:46:28:4b:f4:11:99:77:9c:12:18:20:9c:47:bc:
         cb:05:d6:16:f4:9e:89:dc:05:12:4e:c4:69:34:72:b5:f7:f2:
         37:a1:97:0d:80:41:f5:b9:4f:d0:a3:f7:d6:00:b5:46:61:16:
         be:39:7b:a7:c3:c1:34:36:db:b3:55:6a:a4:b8:19:26:7e:02:
         7f:ef:dc:d0:90:fe:5b:dd:dd:c3:cf:f4:86:56:96:7b:fe:f1:
         96:8f:59:53:61:51:25:a2:ff:17:b6:bf:0e:a4:8b:72:58:6e:
         c0:af:7c:93:92:6a:ba:53:78:15:47:31:fc:36:81:fe:51:10:
         02:5f:de:30:1b:b2:07:c5:90:7f:c0:db:0b:64:a2:63:7d:e3:
         18:5c:45:41:39:c9:d4:a9:0d:1a:a7:e9:07:27:cb:5c:78:d8:
         e3:1c:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:32 2026 by rpki-client