Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/05146236-7efd-3ef6-bf38-4015483a88f2.roa
File:                     05146236-7efd-3ef6-bf38-4015483a88f2.roa (raw, json)
Hash identifier:          VAv/G+mbYo278ApSaTY31Ohb6+BxmkDiPNgeKXz2eTM=
Subject key identifier:   4E:AA:98:B3:5E:D7:48:45:B0:53:26:D8:BB:17:8F:80:B3:38:80:09
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E7E94DDA338800B894B7C6780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/05146236-7efd-3ef6-bf38-4015483a88f2.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:2410::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:dd:a3:38:80:0b:89:4b:7c:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=c5c78a42-8168-43f7-b83e-be7266c54e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:46:f9:55:18:2a:08:c3:e9:3c:4a:30:97:79:
                    a2:81:65:24:b7:9b:a6:57:85:80:59:ff:20:f4:ad:
                    c1:c0:a1:04:ab:a4:fd:55:5e:93:4d:6a:b6:3c:f5:
                    0a:62:7f:18:65:33:d8:00:2f:0c:09:ae:f6:a7:8e:
                    ae:f2:55:69:24:28:7e:8c:ea:28:33:53:9b:f6:5d:
                    2d:f0:08:53:40:09:e8:03:3d:d5:26:b0:5e:61:db:
                    3d:3a:1e:aa:ca:7a:58:b3:f9:60:bc:df:04:72:ad:
                    1e:cf:16:26:5d:b2:ea:81:d6:5e:d1:fa:1a:9b:d2:
                    47:4f:05:58:8e:fa:c2:43:52:f3:f8:d0:02:8b:7e:
                    46:b9:62:a9:e5:77:15:b4:50:93:3b:cc:55:af:37:
                    74:43:f1:91:02:c5:01:fe:a9:58:c4:76:ed:3b:06:
                    9b:9f:1b:af:2a:0f:3c:ae:41:40:26:10:a3:38:f4:
                    55:d1:cc:18:38:21:74:0e:a6:d4:3f:f7:a0:97:1d:
                    e2:55:e1:61:c5:6d:4a:80:0d:88:10:23:45:dd:37:
                    b4:ad:7b:f9:95:bc:02:9a:15:0a:04:33:d4:55:25:
                    66:57:e6:a5:11:4d:c4:09:9a:34:15:f5:5f:60:dc:
                    31:23:9f:3f:79:c9:84:aa:f6:c2:c0:86:13:0e:06:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AA:98:B3:5E:D7:48:45:B0:53:26:D8:BB:17:8F:80:B3:38:80:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/05146236-7efd-3ef6-bf38-4015483a88f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:2410::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:e7:3b:86:17:35:db:da:bf:0d:6f:bd:45:dd:91:c0:f7:ac:
         ab:56:43:58:6b:9b:eb:b3:c1:2e:f4:4f:c7:b4:aa:79:68:f6:
         41:7f:1c:e7:41:f7:46:79:6f:30:d7:f6:13:64:67:45:37:a6:
         83:25:bf:40:9f:2b:0b:4f:99:22:58:f1:a0:61:9a:f6:47:a0:
         b0:7b:3e:51:70:20:2e:7c:54:38:ff:bb:69:21:32:4b:e0:af:
         79:50:33:ca:eb:05:07:81:4f:95:4b:fc:33:24:6b:4c:e3:fb:
         7d:9e:a4:c0:ff:02:c7:bf:9b:3c:1b:42:7b:9e:e4:0f:b9:fc:
         cd:fa:e7:04:d3:03:d8:ac:63:eb:00:71:b6:de:9f:fc:6e:1f:
         03:f5:72:bc:cb:a6:09:64:c4:6c:9a:d1:8f:0e:32:a7:2e:a2:
         b8:ed:de:0b:0a:e8:d5:d4:0c:1d:aa:8b:c3:cd:f2:5f:0d:7c:
         29:7a:14:31:88:72:11:52:2b:8c:f1:6f:e8:b1:48:d3:4a:3f:
         35:a6:dd:00:0d:fb:b1:31:ba:ea:03:54:8e:69:0f:af:1a:0b:
         76:ea:82:f9:b7:08:f4:89:53:fa:b0:4c:e6:1a:26:a9:cc:1f:
         e4:68:5f:c2:57:25:8b:17:10:f3:60:d6:66:46:69:79:dc:b9:
         9f:27:aa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:40 2026 by rpki-client