Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2734614-8811-3f1b-a6e0-319239b9b97d.roa
File:                     c2734614-8811-3f1b-a6e0-319239b9b97d.roa (raw, json)
Hash identifier:          I9uGLijL0Lu048jQCvpqkau3eFUK2cgXIcGRyLuuyzQ=
Subject key identifier:   9C:2B:48:08:E3:39:25:ED:1B:05:91:10:C7:C5:FC:00:52:B2:FC:CC
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D86954E7E3CBB827AD03F3460
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2734614-8811-3f1b-a6e0-319239b9b97d.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        2603:c002:9e00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:4e:7e:3c:bb:82:7a:d0:3f:34:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=2d3c55c7-75f0-4929-9cc0-b49b6c07d829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:51:aa:c0:be:ac:2c:16:b8:3c:7d:09:19:
                    8d:58:f4:c2:3a:93:a9:26:bf:6a:5d:06:73:81:d7:
                    ab:0b:c6:f9:80:9c:4f:1c:42:78:b2:37:bc:61:7d:
                    71:26:32:7f:fe:44:fd:4b:95:03:33:2d:d5:6a:4a:
                    fc:fa:bc:05:88:67:b8:0f:3d:a6:4e:2d:ca:c7:f8:
                    2a:b5:b7:99:df:44:43:6c:dc:d6:a6:4d:a1:b2:1a:
                    8b:f1:a8:1e:31:3b:5f:68:25:76:39:82:ee:ed:8e:
                    65:c9:07:f1:bd:94:3c:f3:cb:a7:7f:03:b2:7e:13:
                    45:04:d5:34:81:4c:8b:3a:ce:3e:87:59:cd:d9:7c:
                    dd:bf:6e:69:8e:73:35:c1:28:60:21:df:4d:0e:81:
                    39:c6:4e:0b:52:60:af:24:68:34:1e:d1:ce:fd:a3:
                    fe:38:2d:6b:d4:48:f4:51:8b:46:bf:e8:6b:77:c6:
                    e8:9a:a9:1e:b2:e0:08:0f:fb:36:38:69:c7:1f:fb:
                    03:35:d8:82:90:91:57:64:58:13:10:b8:5a:0e:7b:
                    ca:eb:c4:f0:c6:e9:0d:f9:62:8b:d7:e1:44:57:1c:
                    25:06:d1:56:ee:5e:9e:53:c2:e5:f2:a6:b6:b4:0b:
                    f2:75:d2:d5:e8:94:c1:2c:08:c7:08:ec:3c:85:ca:
                    cb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2B:48:08:E3:39:25:ED:1B:05:91:10:C7:C5:FC:00:52:B2:FC:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2734614-8811-3f1b-a6e0-319239b9b97d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:9e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:08:27:b9:fa:34:56:32:8a:b7:8b:88:d6:d4:5d:08:4a:4c:
         b4:35:cd:5e:2d:db:ef:a1:22:67:7d:52:aa:00:91:65:9b:a4:
         fe:a3:90:fa:6c:3d:43:f7:32:56:06:c0:a5:fe:84:f0:f5:bf:
         8e:fd:cf:7d:15:e8:f3:70:ea:14:8d:fc:90:cd:ae:92:5f:c7:
         8d:2c:71:7c:de:e5:f7:d5:cb:51:d2:77:16:cc:5e:3d:85:41:
         ab:60:f0:f5:86:bf:24:07:8f:e9:7f:b4:49:eb:19:92:dd:9a:
         a6:1a:48:74:be:7c:c2:72:e2:b7:0c:03:c9:bb:20:44:0c:f6:
         46:88:ed:12:5b:13:c5:36:55:73:01:6b:d6:58:34:3d:e6:11:
         0f:c5:33:56:16:6a:82:c8:a0:ef:9f:e0:94:be:86:e6:b6:d5:
         44:da:3c:16:78:58:10:ca:8d:e0:1a:de:bb:dc:a2:32:22:16:
         e7:2f:7e:c0:ae:ca:25:86:3f:18:45:84:a0:10:c2:32:e5:06:
         ff:50:f0:99:e9:d4:46:7d:30:c1:0c:9c:c8:d9:4e:52:6f:f8:
         c3:0c:86:c8:c0:7e:21:1f:6c:0c:1b:c9:1c:f4:d3:7e:36:53:
         c9:38:0a:44:dc:f3:86:4c:ef:c3:a4:1c:c5:c8:db:a0:5b:b4:
         a5:fe:23:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:09:03 2026 by rpki-client