Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/baac5437-1589-37c4-83fe-d61d6ee5ebb1.roa
File:                     baac5437-1589-37c4-83fe-d61d6ee5ebb1.roa (raw, json)
Hash identifier:          N5rocKGaVutwZZekgeXX/AjirK82SVAL+6z2c7RsDT0=
Subject key identifier:   1C:3D:5E:28:31:15:29:B9:DC:71:92:16:54:7E:6C:D7:66:7B:11:7B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584BBB75A65CFD4B55494B6F5500
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/baac5437-1589-37c4-83fe-d61d6ee5ebb1.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     31898
IP address blocks:        2603:c02d:8000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:a6:5c:fd:4b:55:49:4b:6f:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=62149373-e6ca-4526-a769-067f735be709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:c5:01:01:34:be:f9:11:81:2b:74:c3:f0:
                    3f:dc:ad:b7:ed:41:d8:b0:7f:04:be:d0:44:4c:9c:
                    ac:0d:54:e5:c7:cb:21:b8:d5:d0:34:57:34:e0:8c:
                    2a:bc:1e:5d:fa:3c:49:fc:c8:d6:9d:d1:4f:e4:75:
                    6f:7d:94:97:f0:b8:a7:58:27:e9:c4:d4:fd:fa:8f:
                    a2:9b:58:80:65:2d:78:73:b9:4f:31:cf:3f:71:e5:
                    f8:5c:98:17:40:54:24:fc:8d:be:2c:59:7e:d0:47:
                    5f:2c:0f:d3:e5:b7:40:42:06:64:78:3b:3f:fa:4a:
                    13:d1:0a:39:a4:3d:71:55:61:87:a2:d0:ca:a9:18:
                    62:fe:ed:08:88:5d:48:11:c6:1f:07:05:1f:21:4f:
                    d2:e0:ad:58:72:c9:fa:91:3f:1c:26:53:ae:bd:23:
                    96:9d:00:98:50:23:38:b1:2a:7f:0a:cc:60:3f:99:
                    77:0e:d9:eb:75:24:0e:e2:95:07:ad:a8:8f:22:0d:
                    16:f7:c3:b0:d5:23:cb:18:af:1c:fa:e8:5d:e2:e2:
                    ba:b2:d0:11:b5:e3:39:04:b3:f9:79:d7:78:4f:93:
                    28:df:dd:4d:0d:28:1d:9f:e5:23:50:1e:e3:6d:d9:
                    07:f9:1e:8e:0a:f7:52:76:18:ce:40:35:2c:a0:90:
                    d7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3D:5E:28:31:15:29:B9:DC:71:92:16:54:7E:6C:D7:66:7B:11:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/baac5437-1589-37c4-83fe-d61d6ee5ebb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c02d:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:42:fe:3a:ea:99:ef:c2:63:d0:bb:cb:7c:3b:7d:51:b7:9c:
         5e:4f:6c:62:1d:0b:09:80:3d:fe:4f:30:c7:ca:dc:dc:f0:06:
         eb:67:73:0b:1c:8b:f4:6d:95:3f:cf:4e:1c:46:4f:a3:97:bb:
         93:5a:80:2a:db:0e:a8:36:6a:93:01:98:6d:23:b7:69:43:84:
         e1:25:a5:3f:ff:ba:2f:e6:55:10:bf:96:62:4e:14:34:0f:6e:
         13:9a:58:cf:ba:8d:70:82:76:48:19:29:37:ed:d8:6e:fc:00:
         16:3c:3e:4f:21:a6:90:e7:38:f6:05:9b:2f:3e:b2:83:e0:b0:
         28:19:26:0b:b0:f7:88:25:5f:19:90:fc:6d:71:48:a8:15:01:
         35:01:29:fd:4e:e5:2c:f0:4a:2b:50:47:db:57:e5:f0:66:6c:
         ee:3e:0e:ac:48:f1:76:d0:9f:b4:30:3c:3d:f3:2c:b3:89:99:
         85:00:fc:32:d6:14:db:a8:20:68:41:f0:bb:f1:9d:9b:cc:05:
         90:3f:58:a5:e0:08:0b:57:77:85:89:eb:1a:04:1b:2c:82:79:
         c4:b3:0f:76:62:e4:61:60:3e:70:f1:b4:ac:0e:78:28:84:ac:
         8a:21:54:c6:5d:34:22:12:2a:e9:d4:01:5d:8f:92:93:a8:36:
         57:ba:03:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:57:52 2025 by rpki-client