Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a25ec348-690b-3461-8dfd-fd1263febb5d.roa
File:                     a25ec348-690b-3461-8dfd-fd1263febb5d.roa (raw, json)
Hash identifier:          cUJm4cIpC0KucH3vt2HUVWvnWJphrRXtefJ44fwfwTI=
Subject key identifier:   A6:46:EB:75:8E:07:24:E4:45:3B:32:8C:E1:F5:94:70:18:F6:D8:EC
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F1037A0EAD8509961DC5B3E20
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a25ec348-690b-3461-8dfd-fd1263febb5d.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c001:1600::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a0:ea:d8:50:99:61:dc:5b:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=bb808c58-74db-4aef-bf2e-67abb59e479a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:56:fe:7c:09:ca:57:25:dc:93:72:1e:07:
                    50:ca:9f:89:ab:36:96:e6:d0:33:0d:3f:3e:26:c1:
                    b4:bd:56:c4:b5:38:45:c0:35:68:b3:c6:00:b0:35:
                    b4:98:c8:a2:ff:74:b3:ab:54:a0:42:6f:14:b4:d3:
                    2f:8a:15:d6:af:a8:99:7f:14:78:62:dd:00:51:36:
                    0f:f3:36:af:c4:8c:91:e5:2d:27:d1:ae:d0:c7:1a:
                    74:fd:f5:1f:78:21:d6:5e:74:22:5d:6e:ee:30:b4:
                    30:8a:19:f7:4e:cd:d2:42:22:a9:76:30:17:08:c6:
                    be:a8:ba:24:b6:d2:00:6b:db:fb:0e:bf:25:9b:05:
                    fe:61:08:05:a3:57:6f:6b:c0:1a:c0:da:f2:dc:c6:
                    a8:e1:25:6c:94:57:94:25:78:7a:2a:67:39:45:c9:
                    05:c6:cc:f8:3d:50:db:6a:2f:60:99:82:5a:6e:4c:
                    0b:8f:45:42:40:29:9b:88:59:e2:c3:16:dd:66:59:
                    da:41:fc:ab:c0:50:2e:69:bd:21:12:b8:42:16:1a:
                    88:85:81:05:ae:ff:66:64:93:9c:b9:7d:6a:58:3f:
                    31:54:a6:e8:4e:10:13:1c:54:ff:ab:29:1c:5e:4d:
                    ad:69:38:9d:cb:79:9d:ca:7e:b9:59:de:de:b1:69:
                    b7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:46:EB:75:8E:07:24:E4:45:3B:32:8C:E1:F5:94:70:18:F6:D8:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a25ec348-690b-3461-8dfd-fd1263febb5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:1600::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7c:3a:70:20:f4:71:8a:ef:80:dd:ae:90:a0:a4:69:d6:10:
         ac:2d:c1:3c:74:9f:2c:77:2f:13:82:5e:78:64:81:cc:d5:bf:
         c1:8f:ac:4f:ff:d4:00:0d:94:44:8d:c4:0c:89:81:6d:28:a7:
         30:0e:97:0a:2a:aa:20:29:68:6a:c2:be:b6:5b:a7:a7:0e:bd:
         b9:cb:e1:11:0c:6e:19:b9:43:af:58:f2:b2:dd:bf:bb:84:33:
         95:3e:f8:48:b0:0d:c7:6b:c9:1c:55:7e:44:25:e2:ff:9e:76:
         e9:a7:8c:59:b6:0f:a7:fc:5a:53:c6:ec:a7:ba:94:8d:9c:96:
         a8:de:c9:e5:f5:22:92:e5:a7:4f:bb:3f:2c:86:1f:f6:cf:4d:
         5e:df:4f:20:7a:d8:2f:62:f8:71:4e:af:4f:64:d9:21:eb:2d:
         da:5a:6a:b6:5e:78:66:14:ee:0c:eb:2d:4e:98:f8:3d:fd:38:
         a9:12:2e:ae:94:79:ce:32:da:5f:91:ec:3b:16:76:78:ad:8d:
         b0:12:60:ac:80:8e:40:02:f9:9a:f1:aa:a7:53:c8:5f:37:69:
         cb:4d:77:37:d3:2d:1c:60:a6:dc:9f:4a:2d:6a:70:79:98:d7:
         37:e1:e8:33:e3:5a:47:4f:fd:17:dc:b2:3f:c5:30:d6:b4:c5:
         f9:3b:20:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:37:39 2026 by rpki-client