Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d56ab500-23f5-3bc0-bff1-a05b7d15960f.roa
File:                     d56ab500-23f5-3bc0-bff1-a05b7d15960f.roa (raw, json)
Hash identifier:          QHAjcvQQCcymSNjDVdoG0mlsnuC/QwnUTnkj305+iFc=
Subject key identifier:   95:4F:6C:C2:FD:28:9D:D5:D8:BF:1C:9E:1F:EF:7F:45:6E:F2:1E:C8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F4974732484266DCB10278C60
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d56ab500-23f5-3bc0-bff1-a05b7d15960f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c058:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:73:24:84:26:6d:cb:10:27:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7ed4d5d1-b0a8-4f68-b5fe-fa88ceb2ade4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:72:9a:e9:96:f7:51:2a:ae:c3:66:ef:c0:9a:
                    18:68:75:d2:0f:15:0b:b4:e7:6b:84:9f:d9:cc:7d:
                    e2:6a:da:ae:28:98:67:03:fd:b9:49:52:e3:06:a4:
                    3f:ba:3d:d3:a5:a7:95:5d:de:e7:6c:26:7f:c5:51:
                    f7:00:5d:5e:4e:21:db:3d:66:b3:f0:1b:b9:3e:b1:
                    1a:96:1b:41:58:f3:36:d6:bf:7c:46:3e:42:30:de:
                    8f:eb:c9:02:1f:28:ce:6f:30:2f:c0:30:68:ba:64:
                    06:5f:bb:c0:55:d8:f2:1f:85:e0:af:32:90:42:b7:
                    1c:8b:29:92:5e:e4:b9:5b:3a:92:d1:58:fc:56:ff:
                    1a:e0:42:9d:09:01:ad:1d:14:ea:fa:c5:16:26:ed:
                    ca:50:a0:06:f0:0a:21:52:63:26:0a:5a:7a:de:9b:
                    6b:90:a3:e8:f6:d8:6c:b4:04:d9:03:d0:d1:83:fd:
                    04:29:87:20:ee:dd:60:40:44:61:4c:5c:f9:fe:03:
                    7f:6d:57:3b:d6:40:c6:72:ab:12:5a:f2:96:46:3e:
                    2e:4f:27:68:21:ad:79:53:1a:8e:8e:73:7a:1d:44:
                    d0:ca:3a:00:5b:b0:da:e0:64:88:b0:8f:e9:b1:5a:
                    d3:96:33:18:9f:6d:a5:4b:c8:10:81:1c:11:8d:59:
                    6f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4F:6C:C2:FD:28:9D:D5:D8:BF:1C:9E:1F:EF:7F:45:6E:F2:1E:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d56ab500-23f5-3bc0-bff1-a05b7d15960f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c058:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:05:af:e5:6e:52:f9:5f:7e:fd:4f:af:dd:72:7f:35:57:ba:
         92:be:98:91:cc:d1:c7:bf:23:e7:46:17:69:97:88:57:5d:32:
         1a:3b:04:03:20:d2:1d:e2:c8:d1:f8:de:d2:98:d3:ac:f4:18:
         99:40:a6:78:63:90:ce:ab:b8:40:1f:68:42:d1:3e:61:09:c4:
         e4:de:6c:58:a1:5b:ee:f3:10:98:e5:1e:12:1b:1c:cf:e6:c3:
         e9:76:90:ec:8e:06:6b:ca:04:11:ee:20:69:8d:36:42:ae:40:
         2e:b1:13:8f:02:f1:1a:db:c1:a6:35:d7:ab:6c:d4:a3:9c:53:
         a7:e6:15:a0:a7:0b:21:ae:16:dc:87:11:31:35:13:22:66:f5:
         69:32:89:90:07:88:48:27:d1:4c:43:5f:25:30:98:cf:55:df:
         65:22:c7:38:cb:4f:17:4a:65:e9:92:9e:e9:ea:e6:f0:ae:b6:
         f8:a6:6b:64:fb:5f:0d:a7:70:74:89:6e:3b:49:09:93:01:1b:
         58:73:d3:e4:59:0c:30:f8:b0:3c:8a:50:fe:b8:60:28:16:82:
         8c:54:f8:97:75:5c:15:b6:6e:3c:6e:36:4f:d6:d2:21:e5:f7:
         c7:4c:aa:52:96:e4:34:28:ac:d2:7b:6e:7f:2f:34:4e:45:ea:
         de:74:0a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:21:42 2026 by rpki-client