Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc695724-630a-3465-b181-4ada53f919d8.roa
File:                     cc695724-630a-3465-b181-4ada53f919d8.roa (raw, json)
Hash identifier:          bxsLpGdjcaoJmMU0O0jBtpcAyXYV9e7bL2HVM2y970Q=
Subject key identifier:   6C:08:40:E9:C0:74:CB:C2:BF:31:E2:1F:2A:33:7C:75:11:E7:0C:B4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D86957A119D47C26A70AD95C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc695724-630a-3465-b181-4ada53f919d8.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        2603:c002:1f00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:7a:11:9d:47:c2:6a:70:ad:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=da27ef1b-d984-4238-8d57-960e6405168c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:69:f6:c3:a5:a6:9e:0f:31:43:97:5f:52:23:
                    fe:b7:8f:d2:48:7f:1e:b8:17:24:b8:59:c8:95:c3:
                    30:e7:43:6b:7d:6d:79:6a:c1:d2:cb:11:e7:e6:bb:
                    e5:94:1f:16:7f:e7:45:22:63:44:63:a8:79:a9:43:
                    6c:0f:15:ef:64:fc:1c:24:9d:2b:96:83:76:61:b4:
                    90:6a:be:07:71:c0:ce:69:36:31:8c:4b:35:1e:4e:
                    b0:81:89:d2:c9:1d:23:a8:df:61:1c:f3:05:f3:e3:
                    47:c1:40:65:59:70:44:ad:ae:c2:e7:05:6f:46:d7:
                    13:d2:8b:f3:be:89:1f:a5:db:4e:b8:4b:8e:7b:86:
                    4e:78:15:88:38:8b:25:87:80:90:b7:fd:5a:29:75:
                    97:59:65:17:71:b6:f7:a9:ba:fa:bd:de:3f:79:7c:
                    8d:b5:88:8f:a7:e6:d6:ca:9a:7b:31:1f:79:a5:9a:
                    53:51:13:09:c9:ca:ea:67:97:0a:dc:33:d5:7c:87:
                    94:e2:5e:b1:6d:b3:18:51:49:0c:54:0f:e2:65:d4:
                    d4:3e:94:ce:54:95:3d:c7:a2:f6:fb:5b:3f:67:90:
                    35:e9:08:a3:73:f0:af:91:b6:91:d0:8a:01:7a:84:
                    fb:08:2c:d2:0a:dc:6b:ec:07:59:26:b4:a2:f1:ab:
                    cc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:08:40:E9:C0:74:CB:C2:BF:31:E2:1F:2A:33:7C:75:11:E7:0C:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc695724-630a-3465-b181-4ada53f919d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:1f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b5:ab:d0:6c:c3:66:a4:d4:ef:13:4f:16:9e:78:9b:df:13:
         19:00:5f:cf:16:40:60:c3:db:72:23:22:38:f3:46:e6:03:4a:
         99:f2:7f:b6:24:1a:6a:be:22:44:ba:3a:e4:09:fd:db:b2:ba:
         e9:48:13:79:95:15:7d:cf:61:de:45:85:82:46:0b:70:b0:aa:
         b7:90:b4:53:5c:48:86:bb:e3:e5:9e:5f:53:5d:f5:de:47:0f:
         78:bd:a1:dc:86:f5:7c:f7:93:bb:7c:e8:25:72:fa:17:c5:d2:
         00:a1:ad:4e:59:e2:3d:23:e3:88:4f:76:38:a5:37:17:17:d6:
         99:1c:a6:68:fd:c3:5f:cc:70:fd:66:6f:eb:f7:8a:1a:2d:63:
         80:51:bb:79:04:77:aa:1d:42:a0:4a:ae:b8:b1:a6:60:c7:a7:
         34:77:25:bb:a1:2c:0a:22:b0:05:24:30:b4:73:af:7d:96:e7:
         e4:0d:cf:72:16:7f:4d:e9:b7:c6:a5:3f:2f:47:38:27:51:fc:
         a0:dd:90:99:03:33:4a:51:c9:89:66:29:82:9c:b3:f3:b2:7b:
         c9:a5:88:f3:27:8c:4e:2b:8d:39:9e:01:58:9e:f4:72:5a:da:
         08:a7:a0:52:f9:f1:26:2c:89:c7:1a:f3:c5:0a:2e:ce:9b:3a:
         76:3b:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:09:21 2026 by rpki-client