Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a5d68064-b98c-3324-8d45-8f36058fb3c5.roa
File:                     a5d68064-b98c-3324-8d45-8f36058fb3c5.roa (raw, json)
Hash identifier:          zpVoTemFbZVIyVLaDVPrjt/jfIJrQYLkxnYzDoO/rv8=
Subject key identifier:   01:50:DC:1D:04:9D:D5:70:53:47:30:67:BF:40:A3:1A:F9:4B:90:D4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA78836A12EEA8EC01312EE80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a5d68064-b98c-3324-8d45-8f36058fb3c5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0c0:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:36:a1:2e:ea:8e:c0:13:12:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ba1ecbc7-e0ff-4ba5-bfa4-461b4a176955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ef:8a:5b:84:cf:b9:8e:ec:a7:9f:55:ec:83:
                    8a:b3:d3:c9:fa:51:d4:f4:b7:09:64:cc:22:66:6e:
                    36:6c:b6:09:b0:36:54:1e:45:03:36:a8:e3:fd:2b:
                    1b:3a:7f:f2:c4:d2:b1:d3:07:af:1a:80:c7:75:eb:
                    c9:9d:0d:99:e5:73:27:f2:d6:1c:cd:75:d7:8b:c2:
                    88:33:ed:00:36:70:0b:9e:c8:8f:4c:58:72:77:ea:
                    cf:0c:2e:ce:f1:8d:51:cd:3d:2d:40:11:7d:ac:83:
                    1f:0e:d7:6e:73:1f:a1:cc:04:cc:3d:8f:49:f8:64:
                    bf:10:50:46:a6:a9:17:b4:53:cc:0c:1b:93:2d:a7:
                    d7:06:56:bb:23:85:fd:d4:af:d6:74:f8:cb:25:c9:
                    28:15:bf:2e:b2:b9:c1:56:0d:11:48:66:f8:ad:f0:
                    17:c2:65:eb:54:85:87:1f:c1:55:91:57:63:12:5f:
                    76:87:2a:66:5d:2f:d3:c1:56:e6:98:b3:f0:ee:a3:
                    5a:9a:bd:84:20:e5:7d:b5:53:7a:8e:c8:6a:1e:f4:
                    f3:3d:d8:f0:a1:e5:66:fb:0f:6c:2a:4a:bf:43:15:
                    95:0e:49:17:7e:90:0c:e7:58:83:88:47:fb:f4:ba:
                    e8:89:98:20:1f:ff:32:89:0f:43:5e:0f:54:10:e7:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:50:DC:1D:04:9D:D5:70:53:47:30:67:BF:40:A3:1A:F9:4B:90:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a5d68064-b98c-3324-8d45-8f36058fb3c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0c0:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:8f:4c:bc:99:8c:eb:5d:8c:72:5a:3d:a0:bf:db:df:9c:dd:
         bc:f9:d5:ce:41:bf:39:4a:d9:56:88:5e:24:25:61:c3:b9:bc:
         c5:0a:c5:e2:74:b1:c4:a8:38:0c:97:01:ec:59:08:6d:30:a2:
         3e:5f:78:f6:0a:5c:f3:ae:b9:a2:d9:cf:5f:a8:b3:e4:1d:17:
         32:67:4a:2d:00:83:1c:b5:35:0e:4b:81:0e:15:c1:bc:75:2a:
         33:86:56:13:37:a7:fa:de:d2:30:6b:f3:e3:ea:94:e7:51:84:
         3d:a8:18:03:af:4e:7b:52:90:a1:09:ae:2f:5a:1e:a8:1a:4d:
         3f:bb:c0:4f:aa:71:61:e8:0e:d3:68:0b:37:54:22:c2:b4:55:
         25:08:c5:d2:7e:85:55:96:68:fe:7a:23:8e:61:62:15:4c:5b:
         41:5c:96:7e:d2:1f:95:88:c8:1c:0b:10:3c:be:d4:b1:37:34:
         00:d0:26:4c:14:60:b5:9b:28:24:7e:58:54:ed:a3:3d:d3:75:
         8c:ce:29:8d:d7:68:31:84:d4:63:2a:50:f8:c6:e1:81:30:65:
         75:f2:84:1b:64:7c:76:4e:6f:54:a7:b6:63:ca:99:1d:73:05:
         75:c0:64:02:29:63:2e:3b:7f:29:f5:80:66:0c:f5:05:b5:68:
         81:d7:8c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:53:27 2026 by rpki-client