Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8eb8cd1-3093-30a4-93ba-ae29ef794471.roa
File:                     d8eb8cd1-3093-30a4-93ba-ae29ef794471.roa (raw, json)
Hash identifier:          0F4aFp0kE46wG0Bf22xJKZTQskn+IrPE/F3dN84HNKg=
Subject key identifier:   2B:F3:C4:E4:D1:2A:62:62:A7:87:2D:5D:85:A1:30:15:E3:FD:97:25
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584FB50BBD05EC4A776E6D4C97C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8eb8cd1-3093-30a4-93ba-ae29ef794471.roa
Signing time:             Mon 02 Nov 2026 14:00:14 +0000
ROA not before:           Mon 02 Nov 2026 14:00:14 +0000
ROA not after:            Sun 31 Jan 2027 14:00:14 +0000
asID:                     31898
IP address blocks:        2603:c001:1a00::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b5:0b:bd:05:ec:4a:77:6e:6d:4c:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Nov  2 14:00:14 2026 GMT
            Not After : Jan 31 14:00:14 2027 GMT
        Subject: CN=7a66e702-09bb-4593-96de-e9772c6851a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:36:45:ec:37:1c:ac:94:41:1a:ce:c2:f0:c1:
                    f7:30:e2:6c:9c:5e:0d:8b:c4:45:3d:c2:7e:89:88:
                    2a:dc:77:86:a7:c1:e3:1e:08:f8:ad:94:54:57:76:
                    db:1e:8a:f0:61:ba:99:6b:9c:1b:0b:e8:0c:a8:c6:
                    0c:9b:a9:a0:4c:a6:89:15:67:12:0d:d5:5f:2c:78:
                    bc:40:7b:6e:14:90:ee:b4:e9:0e:d2:82:5b:33:7c:
                    bf:53:70:e6:cd:67:33:2e:ba:c8:bd:ab:b1:4f:f1:
                    1e:b0:a6:f0:19:d8:68:23:dd:46:1a:04:d8:e7:11:
                    40:00:46:e4:8f:7a:34:00:33:0e:de:0e:a4:19:57:
                    a8:d4:aa:f9:f5:9a:d0:ce:eb:33:90:3e:cd:38:c5:
                    eb:16:9f:b0:11:f0:63:e1:3d:96:f3:8c:d2:5a:2a:
                    58:f0:2b:d7:5e:e1:7e:0d:bb:89:a9:a8:c9:ed:40:
                    0e:dd:b0:4d:87:a8:42:b6:3d:c5:ea:57:b5:db:93:
                    51:8a:a7:ee:a0:b0:eb:72:b8:69:10:50:d8:36:40:
                    4c:a2:b5:c7:fb:ec:4e:88:ba:60:cf:84:61:f9:e5:
                    d0:87:90:ea:72:fc:cc:14:9a:fe:ce:61:90:55:4a:
                    45:18:22:c8:3f:0c:96:13:cd:32:83:17:93:8d:65:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F3:C4:E4:D1:2A:62:62:A7:87:2D:5D:85:A1:30:15:E3:FD:97:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8eb8cd1-3093-30a4-93ba-ae29ef794471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:1a00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:39:04:ba:a7:19:b7:62:72:66:c2:e0:69:c4:61:69:95:b4:
         7d:52:1e:c4:c9:dc:b8:b6:09:b9:fb:d5:ee:4c:16:95:ef:d1:
         a8:83:eb:c2:7b:1e:8b:97:f2:0d:a5:68:e7:6d:76:5d:04:b4:
         c7:82:92:f2:a7:d4:8d:3e:a6:7a:18:79:c8:f2:c3:2e:dc:f6:
         7b:1c:fe:37:31:e8:0c:a3:b2:e7:16:13:22:a3:5b:1d:bd:fa:
         31:59:f0:19:a2:b5:7b:ec:89:df:bb:09:6a:45:4a:22:de:58:
         ea:f0:5e:4a:60:79:c5:b2:fe:26:fb:67:9b:81:66:c1:77:c3:
         76:a3:fa:21:a5:3b:b4:ed:19:57:42:d9:5b:02:e1:91:e5:00:
         b8:c1:16:fe:b0:da:29:b6:99:27:ac:35:9a:81:6d:9c:1a:c7:
         17:ae:33:f0:78:9c:f4:a9:e0:e1:c2:df:c3:5f:ae:7f:b7:9b:
         4a:2b:c6:a3:9c:2c:32:f1:53:36:c8:3e:e5:e7:64:f2:0b:34:
         62:fe:b8:2a:01:6c:18:8f:2d:a1:9e:79:6a:1a:cb:8c:ef:12:
         52:0e:85:ad:55:29:33:fb:72:4b:10:8f:5b:9d:90:df:8f:96:
         b9:24:65:26:9f:cc:ba:5f:e6:d6:0f:36:24:45:73:45:4e:7a:
         c6:d1:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:17:25 2026 by rpki-client