Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e1e76d0a-aacc-3997-ba76-60cfe566b1c2.roa
File:                     e1e76d0a-aacc-3997-ba76-60cfe566b1c2.roa (raw, json)
Hash identifier:          wuI6BRy+cebZg35rVuY8nb3NcH2eyzcSCyhzcd1ZrSg=
Subject key identifier:   FA:84:B1:17:2E:CE:0F:95:65:0C:21:13:56:44:20:4B:41:A0:29:BA
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F130248DE3C1B5A8CE9216D00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e1e76d0a-aacc-3997-ba76-60cfe566b1c2.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:d00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:48:de:3c:1b:5a:8c:e9:21:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=54fe270a-7ed6-4f2b-937b-580f7223cffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:28:f5:a3:a3:c2:cd:32:8f:94:55:32:d7:52:
                    75:c6:74:b9:ad:2b:20:48:83:d3:da:a3:30:a6:c2:
                    a7:72:8a:fb:76:bd:26:22:68:21:7d:72:14:33:de:
                    a9:14:3b:92:4a:d2:3f:e3:6d:f2:a5:3a:f5:70:80:
                    92:1a:1b:22:b8:d5:e0:45:01:1e:e5:5f:f9:91:ff:
                    3e:ee:b6:ac:71:03:ab:78:33:f3:c5:5f:75:84:4a:
                    ee:f5:42:02:ea:91:a1:7b:f3:96:d9:28:36:22:b0:
                    19:49:6d:7c:30:29:b6:7b:5a:1d:d6:b1:f7:ee:66:
                    02:98:2b:83:12:40:b0:ad:5f:54:d4:e8:98:7c:aa:
                    63:18:36:3e:fd:b3:e5:21:05:e5:40:0f:f1:28:d4:
                    22:d3:5c:4f:ba:fa:03:da:37:5b:7f:10:78:d1:4c:
                    8d:4a:cd:b3:af:8c:e9:22:09:ca:53:97:fd:13:24:
                    d4:e6:59:3e:f9:90:7c:81:c5:a8:2f:0b:cf:11:f8:
                    a2:46:79:69:19:60:ea:68:ba:9b:ad:b8:34:b1:d0:
                    da:7e:a5:3e:35:ff:c8:4a:d1:86:3c:27:71:72:e3:
                    3a:fa:29:3b:38:3e:12:8a:3e:ef:9d:c9:3d:de:64:
                    a0:04:a7:c5:13:52:25:d2:d2:b5:1e:8d:b2:58:b3:
                    3e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:84:B1:17:2E:CE:0F:95:65:0C:21:13:56:44:20:4B:41:A0:29:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e1e76d0a-aacc-3997-ba76-60cfe566b1c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a7:64:df:27:60:bc:0f:53:74:33:45:a8:2d:98:0f:41:db:
         7e:7c:6e:51:ff:18:d9:6f:f7:f4:d7:19:ab:8f:ab:f5:41:2a:
         2e:9f:b0:53:ff:f5:e9:58:d7:c2:c3:13:c6:7c:4b:ec:99:42:
         9e:14:ae:84:19:d0:4b:a9:7e:a7:2b:a2:6b:a1:75:41:96:14:
         7e:72:d3:44:33:1c:e9:c9:55:e6:9a:dc:e4:eb:1c:8d:b6:48:
         e6:fd:54:74:ad:70:5f:d5:a6:c6:0b:d4:45:17:f9:3d:64:c8:
         f0:34:2d:63:8c:17:e4:7c:1b:55:ff:8d:8f:d0:84:01:c9:70:
         5d:88:da:06:16:da:3e:ec:8b:c5:86:23:ca:b8:8f:b5:a7:24:
         6c:7c:27:a6:94:2e:bf:44:bd:87:b6:8a:ba:a8:ed:29:1d:0a:
         50:73:da:b5:7d:4f:d9:f1:f5:50:c4:40:f9:8a:d1:2a:f6:2d:
         02:42:b1:23:de:19:7e:5d:f6:c2:2e:4e:4d:71:66:39:a9:79:
         55:d2:3a:a2:50:5a:82:49:17:05:d5:6f:67:42:b1:63:a7:a0:
         bb:1f:7c:35:f5:d4:8a:30:66:48:a0:ce:70:4a:d7:6d:5e:47:
         01:2c:e0:86:b9:f1:fe:5a:1c:4a:b2:66:b9:d2:8d:91:9d:14:
         40:51:60:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:51:22 2026 by rpki-client