Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d364780b-4ef9-32c3-92d7-93ce73e762f9.roa
File:                     d364780b-4ef9-32c3-92d7-93ce73e762f9.roa (raw, json)
Hash identifier:          6Ihi+0ZlPZack1epupFs3HXekUkMcny01Xp5p+30QD8=
Subject key identifier:   52:06:3D:8F:B9:65:9F:C7:EC:7E:39:78:3A:6B:5B:1F:6D:47:A7:A1
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F1037922EE7AE6815EF5F83C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d364780b-4ef9-32c3-92d7-93ce73e762f9.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:3900::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:92:2e:e7:ae:68:15:ef:5f:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=6a8e64fe-4571-44d0-8fb5-72fbb2d66722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a9:1c:32:3d:94:d2:ec:bd:e3:27:26:4a:7f:
                    61:ec:f9:df:b2:5e:04:78:e4:9b:78:8e:0a:31:65:
                    9a:8b:35:0a:a5:35:37:5d:c5:d7:0b:ab:d9:c3:48:
                    56:e8:02:d0:a1:83:a9:d7:e3:18:c8:ee:70:f7:bc:
                    69:2c:df:7e:e5:4d:19:fd:7c:45:dd:5f:08:d3:cc:
                    2e:33:cd:62:78:7b:36:25:3e:a3:99:03:3c:d4:0b:
                    bf:b1:79:d0:19:58:ff:ee:36:fa:1a:24:25:16:40:
                    fe:ae:98:9a:98:9a:a2:7f:35:ab:20:69:1b:4e:20:
                    35:f1:93:e0:63:7a:38:2e:bf:46:62:39:07:da:03:
                    39:65:1e:60:81:58:32:96:b5:0e:b2:cb:a0:a3:19:
                    17:82:fa:bf:57:27:5f:7d:24:37:c5:d4:da:63:31:
                    2b:43:77:16:fb:ba:95:d8:75:6c:a7:7f:04:3d:11:
                    6a:d7:c6:20:0c:98:14:4a:d7:92:48:11:2a:fe:0a:
                    eb:71:ef:27:8f:f1:03:f5:d6:73:9d:df:dc:f0:51:
                    67:91:ad:87:f3:17:ba:6c:9e:32:fa:b4:7f:08:90:
                    ac:0d:7a:86:00:b3:4c:ac:21:0a:11:57:d2:a0:b5:
                    09:09:91:96:9d:74:63:ec:33:86:fd:8d:06:cb:17:
                    a0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:06:3D:8F:B9:65:9F:C7:EC:7E:39:78:3A:6B:5B:1F:6D:47:A7:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d364780b-4ef9-32c3-92d7-93ce73e762f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:3900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f3:01:b7:8a:97:c1:f9:b4:e0:9b:3f:14:a7:f7:8e:e9:6f:
         f5:3e:d9:26:de:45:dc:2a:5a:49:27:bf:bd:ab:99:84:5e:80:
         3d:77:22:56:1a:2a:d5:56:b4:61:24:46:35:29:95:ab:b8:7f:
         77:88:17:a2:e0:13:d6:0d:0d:08:31:69:92:61:83:36:d6:c9:
         e9:f1:61:e3:45:3d:ab:51:1f:c3:6f:95:09:54:d6:e7:a5:3e:
         e2:95:ba:28:68:07:24:6d:36:aa:81:8e:80:81:c0:1f:5a:aa:
         9a:7b:e1:3e:8a:c4:b6:82:bf:b8:11:b8:5e:7a:89:f1:cc:56:
         a3:ac:0f:47:2e:6b:f1:e4:f6:4c:71:e2:a5:f3:55:61:25:17:
         ed:33:9f:f7:5a:4c:20:9b:c6:c6:46:9c:8d:d3:0e:17:a5:35:
         50:84:12:36:6c:73:d8:2a:c1:50:e2:87:98:c8:53:80:ac:28:
         5a:c1:37:f2:b7:5d:6c:83:63:f7:37:be:26:2f:96:af:57:ce:
         66:0b:77:3f:d7:70:46:2f:b2:bc:3b:3d:79:4e:ff:74:60:39:
         c1:77:ef:8c:32:50:af:0d:da:8c:e1:40:75:26:f4:91:5a:75:
         fd:6b:3c:9d:5c:28:98:cf:d3:8a:f1:5b:8f:b3:bd:d7:85:87:
         c5:8a:4a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:31:00 2026 by rpki-client