Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f63947a5-20cb-32eb-a7b4-3d59a6979b52.roa
File:                     f63947a5-20cb-32eb-a7b4-3d59a6979b52.roa (raw, json)
Hash identifier:          vYuhGUJjtb4PRPaP1OgqBtthlq1dKPBX/wvSAX/NtJs=
Subject key identifier:   C6:4B:E9:E6:CA:C5:DE:0B:82:88:88:34:26:C6:CA:90:E1:34:D3:57
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F1302383A6774C9F7155BB5C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f63947a5-20cb-32eb-a7b4-3d59a6979b52.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c000:d00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:38:3a:67:74:c9:f7:15:5b:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=9ca2d243-efa9-413d-99f6-6eab15304412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7c:d2:a6:f4:0e:66:fa:fc:6b:49:a7:77:9a:
                    80:a2:0f:80:b2:d6:06:e4:0e:ef:f6:7d:82:7d:28:
                    4f:39:c9:b3:12:f5:fb:f0:d6:70:64:33:20:95:a6:
                    89:09:ed:3b:f7:2a:66:29:ee:9f:a4:7c:f4:a1:58:
                    5c:51:b7:fb:ae:81:04:4a:18:52:a1:50:47:6f:52:
                    c8:c5:1c:23:b3:3f:ed:d2:23:96:96:c5:cf:8e:cc:
                    a2:8f:b2:ca:85:2d:7c:b1:92:61:a6:19:1e:c5:13:
                    7b:1d:ff:27:bd:9f:78:b7:36:db:f1:68:68:40:10:
                    36:c4:b7:98:6c:1a:f5:fc:1d:29:37:ac:57:bd:58:
                    d9:16:92:ef:2f:2a:67:51:5e:19:86:6e:d9:eb:55:
                    13:42:8f:ba:96:3d:0b:57:3f:b3:c9:7c:ce:ed:85:
                    8c:2e:21:33:f2:d3:62:fd:b3:ac:66:1c:9d:4f:eb:
                    71:29:4e:af:f5:37:e5:1c:79:7d:11:5b:77:dd:39:
                    5c:07:15:57:0d:4a:d7:81:7e:13:60:84:ad:5b:bd:
                    07:e1:eb:24:ea:ad:24:ec:55:11:49:aa:f3:90:55:
                    50:36:f2:cc:22:0a:43:c5:b7:50:99:88:8c:64:06:
                    a9:91:78:c3:2e:dd:b3:3b:00:35:fe:37:50:43:f3:
                    6c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4B:E9:E6:CA:C5:DE:0B:82:88:88:34:26:C6:CA:90:E1:34:D3:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f63947a5-20cb-32eb-a7b4-3d59a6979b52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:73:74:6e:5d:bb:67:5a:c2:d8:88:51:e4:86:80:a0:0a:19:
         24:97:0d:1b:4d:82:77:ec:64:1b:38:3f:2e:ba:01:56:8e:22:
         f7:14:79:a3:c1:fb:6d:c8:60:e0:85:35:86:cd:de:34:78:a8:
         45:0d:70:81:b1:ff:8c:76:63:df:d7:d3:9f:82:23:d5:8c:86:
         ae:46:bc:42:db:ce:62:33:40:40:23:52:7a:1d:a8:eb:f3:ca:
         4c:e8:07:42:31:ea:03:38:23:dd:5a:9c:63:7b:99:77:81:fd:
         f9:0c:5f:10:21:2b:11:0c:5d:b7:c4:f6:43:42:e0:2a:f4:34:
         a5:f8:15:ef:c4:57:85:ad:f7:ac:53:bf:f7:e9:95:da:fd:01:
         49:b6:75:dd:ab:6e:eb:35:d6:99:a9:af:02:5e:c0:2b:e3:1d:
         33:7d:b3:6b:c1:94:ee:0f:0f:e4:dc:1d:6d:9b:45:25:3d:76:
         68:db:f8:6d:1e:50:39:cd:9c:93:03:3d:d7:8e:7d:e4:a6:0f:
         3b:b7:48:b4:f3:32:16:78:14:86:8a:4a:22:10:7e:f6:99:24:
         99:4f:2e:a8:99:8b:fb:38:1a:4e:24:e5:78:54:1a:c9:76:80:
         3c:41:ce:e6:48:f8:d0:bf:a9:86:7b:f5:f4:b6:d3:16:2e:b7:
         5e:42:e8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:44:00 2026 by rpki-client