Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/852598ea-5dba-3b59-a531-3849382f70a2.roa
File:                     852598ea-5dba-3b59-a531-3849382f70a2.roa (raw, json)
Hash identifier:          k5CjIvbZkgxAnkPNoDlivAOpmBXG3zg5Lb8IkUNXhD4=
Subject key identifier:   0B:03:8B:CB:A1:54:A1:77:2C:26:B6:21:C0:DE:30:2F:6E:31:B3:94
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D87FA91EFC9D7E3EB06FD7280
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/852598ea-5dba-3b59-a531-3849382f70a2.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     31898
IP address blocks:        2603:c001:4800::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:91:ef:c9:d7:e3:eb:06:fd:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=81d72554-6c24-47e1-8541-cdc4f872f0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d9:fd:99:d0:43:83:3a:15:df:72:bf:45:f1:
                    6f:bb:f0:c5:b6:71:9a:df:73:2e:5d:3c:04:0e:f8:
                    e4:01:67:54:b0:9d:82:8c:cf:5d:34:da:66:00:d8:
                    9e:34:32:f5:7a:a8:86:fc:bf:30:ca:e3:b3:09:c1:
                    51:ad:06:3c:ed:6e:a3:b2:28:05:e7:58:af:4f:6f:
                    c5:61:93:e4:02:c5:dc:ed:d4:87:b1:1c:b5:60:d2:
                    f1:bf:6c:ca:e0:33:10:fe:bb:ca:79:cb:01:1d:6e:
                    f2:46:6f:84:95:14:ab:67:9b:55:58:fa:7d:cf:87:
                    dc:59:ae:d0:6e:52:20:5f:1e:b9:99:a3:d5:85:bc:
                    3b:07:78:f8:66:71:7f:85:d6:98:8d:9e:41:8d:96:
                    9f:d5:34:68:2d:36:0c:75:26:4e:92:71:02:24:f1:
                    0e:4c:0b:a5:6c:11:63:4c:cb:34:ae:ae:23:6a:7e:
                    cc:30:65:5d:da:df:19:7f:27:c6:ad:27:fc:7b:77:
                    45:68:e8:71:9d:57:55:5b:e5:19:e9:5e:e3:53:cd:
                    fc:d2:6f:26:97:9e:d1:cd:4b:11:4e:47:94:c0:38:
                    a8:01:79:0f:0b:05:21:da:78:4c:44:ed:a8:07:2f:
                    ec:8a:be:93:9e:68:bc:13:6f:8b:43:4c:bb:37:ab:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:03:8B:CB:A1:54:A1:77:2C:26:B6:21:C0:DE:30:2F:6E:31:B3:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/852598ea-5dba-3b59-a531-3849382f70a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:4800::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:08:8a:cd:e9:c6:9f:17:c7:9c:c3:90:fb:71:db:15:8f:cc:
         c3:ac:f8:ae:a9:7f:3e:67:09:86:2d:08:32:db:8c:85:ea:18:
         ea:b7:06:7a:a2:d3:8d:c8:34:ea:b6:e3:b3:ad:5e:41:d7:8c:
         31:d1:64:94:c6:ae:30:c3:5c:dc:0b:98:c2:fe:22:dc:0e:60:
         df:11:6b:8d:2d:e1:0c:27:d5:33:a3:18:7a:7c:73:f6:f0:4f:
         f9:6f:6c:09:60:db:2b:52:7b:13:21:94:5e:9d:74:8c:3d:7d:
         73:39:ab:91:65:d7:33:9e:91:e0:ed:1c:fe:36:93:07:3c:af:
         2a:df:42:c3:e9:fe:4c:d8:75:60:91:a5:6f:67:31:f4:24:d0:
         68:18:81:25:19:5b:2d:b8:42:b2:03:ad:6c:0e:49:13:fa:ad:
         66:ac:9b:8f:ec:c6:00:fb:c4:8d:18:ca:37:1d:9e:7c:04:d5:
         df:b1:48:fa:73:d2:d1:c7:49:39:84:4a:9f:b4:80:62:ae:24:
         a7:9c:e0:c9:60:0e:ac:5d:ca:94:39:20:57:54:03:b4:6c:0d:
         65:c6:fb:2a:bc:e9:c8:ae:58:84:dc:ea:fd:21:80:16:fc:42:
         80:03:ec:7d:44:c4:be:dc:01:74:21:c7:4b:74:e7:dd:1c:09:
         7b:cc:e5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:19:03 2026 by rpki-client