Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e44889cf-b938-3efe-a098-ea13734a990d.roa
File:                     e44889cf-b938-3efe-a098-ea13734a990d.roa (raw, json)
Hash identifier:          zZ3tr2HSM8smeXLx9AnQCJMA6vIpkq0vbQkQPLPqpNw=
Subject key identifier:   10:BE:81:AA:EF:71:57:94:DA:68:7E:3A:84:93:F7:FB:AB:4B:BC:A4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F103797FAA3834B7BC9B03F80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e44889cf-b938-3efe-a098-ea13734a990d.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:b00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:97:fa:a3:83:4b:7b:c9:b0:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=701725e3-5c2b-4f8c-879e-a2b2df8d5c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:04:8a:0e:76:cd:b3:77:d0:1f:30:a8:e4:17:
                    f3:d4:ae:36:3f:46:16:cc:8c:c7:95:c0:d7:fb:d9:
                    bb:d3:3e:6b:8c:6f:3b:c2:bc:d5:14:bb:2b:6a:eb:
                    cd:79:aa:ab:44:ec:74:9e:c5:c1:52:22:fa:3f:e1:
                    83:31:a0:86:a6:5f:4c:6a:30:9f:a9:ca:38:c9:35:
                    14:7f:b4:77:45:dd:59:8e:d6:08:cf:f9:ed:c4:33:
                    44:20:4b:71:44:a0:01:9f:b4:73:22:ee:0b:00:a5:
                    22:ea:d7:d4:c6:df:dd:da:4c:ed:b1:49:97:f2:79:
                    2d:73:03:97:d1:81:d7:7b:49:40:7a:b2:8a:a9:3f:
                    22:26:5a:4d:94:4a:97:35:20:7c:9b:53:1c:da:4d:
                    8e:32:ab:b7:5e:44:da:b6:1c:9c:b4:6e:d5:94:63:
                    e9:d5:56:89:1e:82:e1:73:fc:f3:a8:6e:e5:f6:54:
                    36:c9:0b:b1:52:50:d1:2b:84:4b:8c:16:3e:57:44:
                    08:2d:23:ce:8e:9c:23:e0:11:0f:d8:aa:98:e2:6a:
                    ca:fa:c5:24:90:90:fa:04:a5:4c:c3:ab:0f:ea:a4:
                    ae:1c:f6:aa:91:c9:32:32:2e:f9:ad:0d:a2:7d:52:
                    36:80:75:b5:6e:29:8d:f9:87:f7:94:6e:0b:9e:2a:
                    a5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BE:81:AA:EF:71:57:94:DA:68:7E:3A:84:93:F7:FB:AB:4B:BC:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e44889cf-b938-3efe-a098-ea13734a990d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:72:1a:d5:e7:7b:0e:21:f1:fc:bf:af:79:14:47:5e:83:fc:
         8b:7b:38:e0:93:d8:7a:35:08:71:f3:6b:b5:49:67:38:b8:0e:
         10:3d:d7:b9:39:36:a7:79:58:90:db:51:d4:93:16:eb:91:98:
         13:93:2a:74:3b:e4:37:48:ae:a5:d7:40:62:a8:8e:4e:50:6c:
         33:25:1a:52:68:84:3b:1b:15:4e:48:eb:37:69:83:2c:54:e7:
         7e:8e:03:87:75:9f:e3:d9:b5:df:3c:a7:84:3e:78:e1:ec:52:
         9a:2e:b8:63:74:46:de:a4:a3:0c:5b:0c:bd:2b:20:41:58:e5:
         de:3d:2c:1f:28:9c:70:d8:63:99:34:e6:8a:0c:cc:e7:6d:2b:
         6e:a8:9f:7f:6a:9a:bb:c0:39:db:e4:2a:36:40:8e:77:3d:d2:
         73:d6:1a:4b:bd:85:d1:30:fe:39:1f:40:f4:38:c6:78:fa:03:
         b5:8a:03:9a:4c:82:58:7f:0a:c4:e4:8a:ac:76:be:90:46:b8:
         0e:0b:ce:33:b5:67:b9:58:0e:b9:9c:04:76:45:b6:fc:e0:8d:
         7e:7c:7b:f3:cb:b5:9c:61:58:8d:eb:cf:94:f8:35:5b:56:df:
         3d:b4:b9:eb:3f:c4:79:3f:13:f4:18:98:78:12:02:91:ea:ba:
         ea:68:ae:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:07:22 2026 by rpki-client