Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef28081d-92c6-320b-a6db-65c16b095e31.roa
File:                     ef28081d-92c6-320b-a6db-65c16b095e31.roa (raw, json)
Hash identifier:          cuN5+J3vTvg6fLqgRtwCp6cnmJLsroNevX7TkawhJG0=
Subject key identifier:   29:8E:1B:9B:3E:DB:CC:9A:5F:3F:62:C8:00:22:BF:3F:1D:17:8B:E4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F119D023E845BEF424772E600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef28081d-92c6-320b-a6db-65c16b095e31.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        2603:c001:5e00::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:02:3e:84:5b:ef:42:47:72:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=ef114a1e-e71f-4a30-ace7-80b7a93f19a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:d3:7b:1d:d4:53:07:b3:07:7c:de:26:1d:
                    24:b3:f8:dd:b0:8b:15:e0:ad:cf:46:4e:e6:a8:35:
                    f9:6e:0f:31:13:8e:c3:50:2e:64:28:33:d9:55:c4:
                    1b:fa:58:b5:8f:44:11:f6:72:17:78:c1:c9:b5:e3:
                    2e:7b:43:8a:6b:44:7b:58:14:79:66:bc:53:f8:46:
                    3d:a9:1c:6b:01:a4:d3:d7:05:90:2a:7d:55:68:28:
                    c2:b3:a4:4b:b4:cb:82:18:f5:45:4b:8b:be:4f:d6:
                    f1:44:af:25:37:60:5b:e9:40:a0:14:dd:f9:7f:cf:
                    87:55:26:77:2c:37:12:70:34:8e:fd:85:a7:10:db:
                    30:76:31:66:28:58:01:43:f8:74:71:d7:91:41:09:
                    03:a5:f1:a2:54:df:bf:51:35:67:cf:8c:dd:cd:91:
                    7c:1c:99:ba:82:a4:aa:53:0e:e7:b9:60:80:61:8e:
                    aa:02:66:c9:33:f2:39:78:a1:97:38:62:40:93:fc:
                    56:ba:76:5f:14:95:04:cf:ac:9f:ea:bc:88:98:74:
                    5c:9b:89:57:60:b4:03:e1:b5:96:5d:da:24:3d:61:
                    95:a4:d6:35:63:d3:79:79:20:dd:34:d2:42:36:2c:
                    87:e5:0d:48:69:22:8b:b6:ef:29:12:38:72:d4:f1:
                    46:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8E:1B:9B:3E:DB:CC:9A:5F:3F:62:C8:00:22:BF:3F:1D:17:8B:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef28081d-92c6-320b-a6db-65c16b095e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:5e00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:93:e2:b8:c7:c4:3c:f2:48:ec:7b:08:9c:69:7d:0e:6b:88:
         19:ec:0a:26:29:3d:33:da:c6:f9:11:cc:1e:ff:f4:d0:37:3a:
         9d:05:aa:4b:63:3e:c1:e5:9e:02:95:6d:58:c1:3f:01:39:73:
         ba:a5:16:5a:4d:91:ba:94:db:a5:18:5c:25:52:2b:04:a8:a8:
         d8:d4:e9:87:ee:02:aa:56:67:83:6a:38:81:e7:cc:4d:fb:42:
         ce:98:0f:ed:12:55:0f:1a:e2:8a:13:82:79:39:4a:ea:89:1a:
         08:c9:2f:ab:21:75:10:b5:1f:71:f6:3f:ee:d3:d2:ac:81:a6:
         93:46:17:c3:69:3b:e6:31:37:5d:82:43:4d:0b:e5:82:b0:d2:
         14:c6:66:fc:41:95:54:ef:cf:4e:4d:da:ee:ed:1b:82:2a:45:
         c1:80:b1:0c:9a:04:87:c1:e8:db:fa:33:22:3d:e7:5c:14:55:
         8f:94:55:d9:2f:84:a8:17:7a:63:e4:84:33:0d:59:23:ce:c3:
         2f:35:3f:12:4c:ff:42:99:21:87:0c:d2:2e:33:b1:4d:a3:65:
         0c:bb:09:b7:d5:d5:eb:74:4d:7f:0e:20:b6:ae:d9:f3:bf:13:
         1a:da:bc:bf:71:a0:25:14:69:03:0f:26:8a:d2:60:d4:57:8b:
         ec:bf:be:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:46:08 2026 by rpki-client