Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/692041a2-6820-3f9b-b127-71ab5225a99f.roa
File:                     692041a2-6820-3f9b-b127-71ab5225a99f.roa (raw, json)
Hash identifier:          qKAzWhvX1n3TlvV2DkM95KWTKR/5uyYWXLSzq4+lrUo=
Subject key identifier:   F9:90:17:06:20:68:80:41:67:31:6F:60:3E:35:06:FC:77:9F:37:9B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D86954D97E0BCA9AB9F6D3100
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/692041a2-6820-3f9b-b127-71ab5225a99f.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        2603:c001:c00::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:4d:97:e0:bc:a9:ab:9f:6d:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=1e9c547a-75d5-4dc8-aebd-1905d9db5236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:71:ed:1a:10:04:ec:6d:21:d4:80:a6:c5:ca:
                    6f:4a:f6:59:0a:24:ef:15:0f:5f:58:04:69:be:3b:
                    15:35:2c:c0:3b:1b:ea:e6:76:69:97:29:05:75:55:
                    87:a6:12:8e:ae:50:d4:cd:a1:7d:a1:7c:d1:b3:0b:
                    b4:05:64:30:d2:82:f3:e3:86:23:f5:8e:96:fc:b5:
                    d8:62:65:85:8f:29:b2:b1:93:dd:d8:ef:06:78:ba:
                    63:1d:37:77:32:f9:98:9c:22:75:a4:fb:a0:c6:6d:
                    9e:49:cb:72:67:9d:97:b9:8b:5b:b5:df:89:bb:9d:
                    7a:3b:a2:0c:f4:36:20:13:0f:9d:c5:d4:9b:6a:cb:
                    ad:fd:4f:82:21:f3:39:d6:98:62:f2:ba:d0:a0:17:
                    cd:94:3c:f9:2c:f5:4c:d6:d9:50:ef:45:2c:48:03:
                    72:41:6e:cf:2c:eb:ca:0b:41:f3:03:cd:bc:fb:35:
                    85:35:75:8f:d5:1a:ca:16:36:52:e8:43:54:d4:34:
                    c8:26:0b:d4:5c:22:71:ff:1a:f4:62:9c:c0:8d:8e:
                    8f:54:40:67:04:0d:9a:40:e9:3c:8a:eb:80:09:8e:
                    2e:3c:34:90:0d:63:c5:4f:f8:1e:1e:88:7d:24:bb:
                    f7:e9:48:24:67:42:88:5b:ba:d8:9d:b4:1e:b1:d1:
                    8b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:90:17:06:20:68:80:41:67:31:6F:60:3E:35:06:FC:77:9F:37:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/692041a2-6820-3f9b-b127-71ab5225a99f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:c00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:f6:ce:2d:21:d9:0d:1f:3a:98:da:c3:4e:37:23:c8:53:c4:
         ca:99:ea:96:3e:e1:70:c1:e7:5c:04:20:c6:7a:5b:67:16:0f:
         8e:f1:98:a6:c2:8f:e2:33:eb:37:8f:b0:d6:01:c2:c1:82:85:
         3b:29:00:c7:2f:74:a3:4b:3d:e1:b8:50:8c:a4:90:3c:0b:d7:
         35:48:59:4a:0f:1b:1e:5b:00:23:8f:06:79:7a:35:ff:2e:32:
         61:98:0e:4e:74:19:44:27:a5:63:e3:69:3a:c1:b9:4e:19:e2:
         4b:73:03:fa:83:0b:81:06:29:58:74:f0:99:74:1b:6c:57:fc:
         5f:a0:94:e8:f5:74:da:65:74:f8:fc:29:a8:9a:de:21:42:9a:
         c7:49:79:d1:f6:fd:e0:60:b4:07:5b:c1:28:41:f4:f1:0b:3f:
         d8:b9:9f:ad:9a:00:43:77:e0:fa:00:40:85:3c:6b:42:b3:4f:
         1b:93:2b:db:ad:87:e5:90:ea:f6:22:26:8b:39:22:89:29:55:
         0f:ba:fe:e6:4d:85:6c:29:89:29:f2:a0:2a:1b:90:0c:0c:d5:
         13:23:4a:3a:c3:0e:13:c8:8e:5c:6d:e0:e0:dc:18:df:3e:ba:
         ec:b1:39:12:db:c7:49:83:fe:14:5f:bf:8d:7e:8e:4d:a1:ec:
         5a:85:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:15 2026 by rpki-client