Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08f6aa16-461b-3fb9-9426-623d068e71e1.roa
File:                     08f6aa16-461b-3fb9-9426-623d068e71e1.roa (raw, json)
Hash identifier:          33ey+sgiHYPyUCx77tH4OmUfI/SQliy/ztgB5Sigc8Y=
Subject key identifier:   48:9A:E5:6D:0E:48:E7:D1:40:0F:A1:C0:F3:46:F5:0D:61:8B:1A:69
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8AC555A020DA142881472500
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08f6aa16-461b-3fb9-9426-623d068e71e1.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        2603:c002:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:55:a0:20:da:14:28:81:47:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=5e3f1fb2-d276-4e87-9d8c-b17b86ecce7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b3:df:b2:bc:f6:a7:cd:a7:e6:c8:8f:1e:0b:
                    73:3d:f1:55:ab:ab:08:23:51:70:b2:e3:18:78:c9:
                    83:7a:e2:74:0b:64:59:7b:c5:46:7a:fd:46:f8:4f:
                    71:00:55:1d:82:55:ce:5d:2e:f2:73:52:ed:0a:e9:
                    95:92:e2:c2:44:51:18:06:ac:15:95:1e:e2:f8:1c:
                    fd:62:80:79:b8:da:d2:3c:f9:55:ad:10:35:3e:a4:
                    2e:5e:c5:8f:f9:8e:18:81:63:14:c5:5f:da:3f:38:
                    35:5b:91:4b:e3:82:68:cd:40:16:a7:5f:f0:03:e7:
                    c8:f4:c0:63:c0:4c:1c:3c:f6:5a:14:a0:e4:8a:95:
                    ba:c0:24:67:69:ae:be:b4:64:41:d9:29:16:31:c8:
                    f6:8a:f7:ce:16:e7:28:b1:ba:7b:22:bb:bc:58:4f:
                    c4:03:8f:47:fe:3c:b8:43:b9:70:d3:f8:60:d4:d0:
                    eb:3c:9a:44:4c:03:97:95:db:8b:db:ad:20:b9:64:
                    ac:61:52:c5:29:37:28:22:5d:60:7d:75:25:91:46:
                    89:85:2f:10:4f:b3:ea:4b:ff:f5:e0:7b:48:38:52:
                    f9:0e:ac:8d:18:52:ef:ef:84:00:63:e4:03:60:04:
                    d4:a0:c5:83:3c:66:62:51:5f:da:6c:85:fc:c3:41:
                    6c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9A:E5:6D:0E:48:E7:D1:40:0F:A1:C0:F3:46:F5:0D:61:8B:1A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08f6aa16-461b-3fb9-9426-623d068e71e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3b:cc:af:54:11:a2:15:bd:35:be:38:04:fb:b5:98:92:be:
         87:e0:19:5e:a8:19:93:92:c6:1d:6e:f8:26:2b:99:0e:91:b5:
         f4:f1:21:a7:6a:6a:08:61:4c:a9:f3:ff:ac:87:d0:7a:27:c7:
         75:00:cb:4d:ba:3c:94:ba:a4:ce:47:57:7b:87:7f:2d:9f:d2:
         76:4b:8b:d1:cc:7c:02:e8:c4:e0:68:0c:94:b3:94:6d:09:d6:
         4d:7a:65:11:2d:6e:89:81:15:9f:0d:e1:31:87:06:f7:3a:3d:
         e5:ad:af:b4:a0:35:b7:d1:25:5e:52:a1:dc:4f:be:27:1c:a0:
         34:e0:77:5c:57:6d:0b:ad:b0:db:bd:66:a4:05:0f:d0:b4:20:
         25:a2:5a:9e:55:13:a4:59:dc:b5:38:e6:0b:a3:a4:0b:59:a0:
         25:5b:98:eb:ae:74:68:0a:87:8b:b9:23:13:34:d1:56:36:a0:
         a8:d2:05:d7:c3:a3:a1:9b:00:e1:41:6a:16:6f:3b:c9:9b:7e:
         8d:16:c8:e1:b5:3e:3e:90:c4:2d:46:c2:3e:aa:d7:ff:cc:28:
         ec:ae:e1:56:4d:38:9d:55:67:55:f7:0c:eb:00:f0:a9:b6:b1:
         de:8a:88:3f:3a:48:f7:18:9c:10:41:3d:82:d5:ff:33:f5:ab:
         fc:7e:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:23 2026 by rpki-client