Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b42d272-6ec4-384d-9594-ffacd70c2acd.roa
File:                     0b42d272-6ec4-384d-9594-ffacd70c2acd.roa (raw, json)
Hash identifier:          PrjBynOn9KbwXUwv2hvAGvQMyLLN18xbe+L+Ykh/XJA=
Subject key identifier:   F7:A2:D8:08:91:A5:18:6C:8D:B9:62:5B:F5:12:FA:BA:92:BB:B0:7C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AECB02CFD55D72BF609D16D40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b42d272-6ec4-384d-9594-ffacd70c2acd.roa
Signing time:             Thu 21 Aug 2025 00:26:30 +0000
ROA not before:           Thu 21 Aug 2025 00:26:30 +0000
ROA not after:            Wed 19 Nov 2025 01:26:30 +0000
asID:                     31898
IP address blocks:        2603:c026:8000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:b0:2c:fd:55:d7:2b:f6:09:d1:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 21 00:26:30 2025 GMT
            Not After : Nov 19 01:26:30 2025 GMT
        Subject: CN=e0d88f94-329e-47dd-b902-72a4a22760b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:50:1d:8e:b7:77:fb:ee:1e:10:80:75:29:
                    3e:18:09:36:49:c6:57:c9:f9:55:2c:69:46:f6:54:
                    f1:4f:7d:ac:c3:3a:82:d9:e8:d6:e9:eb:d8:0d:91:
                    e8:45:b2:22:8d:61:ba:81:41:b6:c6:c0:5a:e4:f8:
                    96:df:90:33:ee:4f:7c:97:e7:4b:e6:38:a9:c4:af:
                    fc:e2:42:63:94:af:24:6b:f6:92:bb:17:58:9e:f6:
                    f5:25:c6:c2:4e:86:7b:ce:63:6d:2b:06:14:a9:b2:
                    ab:f0:c2:a6:76:39:a4:b8:b6:5f:03:03:d2:e7:d5:
                    94:93:65:8f:e3:26:04:02:7e:a5:87:84:14:25:91:
                    e7:38:8d:eb:e2:e8:38:2a:ef:72:84:e2:49:f8:f3:
                    20:19:0e:84:47:b5:ab:12:98:04:b3:0b:1c:0d:ad:
                    57:43:28:ad:86:e1:af:3b:cd:c0:73:2a:85:2e:2b:
                    a3:9a:80:33:55:b8:79:6f:91:52:b7:ad:cf:e6:bb:
                    55:7d:8f:2e:43:2e:c9:9d:b7:03:fc:92:d5:7d:f1:
                    ac:c0:38:ad:05:47:e1:65:b7:8b:b4:e0:b9:e2:09:
                    b7:7a:2b:58:5e:be:2c:e0:b1:d4:0f:1a:07:4d:b5:
                    a9:68:4d:7f:8d:a0:55:60:a3:f7:fd:04:90:ed:8f:
                    e7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A2:D8:08:91:A5:18:6C:8D:B9:62:5B:F5:12:FA:BA:92:BB:B0:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b42d272-6ec4-384d-9594-ffacd70c2acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c026:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:e2:77:be:a6:13:9c:ef:9e:f4:a1:4b:48:4f:44:ee:6f:f3:
         e1:37:9d:1c:14:fe:3f:b7:04:3c:27:31:e8:e5:cc:e6:b1:f8:
         7b:41:91:1d:07:31:f6:b2:da:74:23:fe:79:93:18:04:0e:dd:
         3d:74:99:ec:36:d3:c0:22:3c:2d:70:00:2a:4d:5b:0f:51:50:
         5b:ab:8a:6f:bf:19:39:c5:51:ea:9f:94:a9:07:a4:a8:73:9f:
         85:84:b8:35:00:8f:04:00:3f:5b:5f:5e:c1:37:f2:48:dd:67:
         14:52:c0:a6:80:63:60:5a:1b:57:5e:19:12:a2:36:3b:db:8e:
         5f:2e:af:69:21:48:8a:e3:cc:7b:31:f1:86:73:48:9b:e6:94:
         8a:32:af:62:a8:5f:05:69:35:ed:c0:6a:71:51:bf:5d:fd:3e:
         ff:51:8d:5c:4b:45:a4:5e:ce:4f:be:1a:7c:1d:67:91:bc:fb:
         02:58:eb:0b:1e:1b:62:98:13:62:84:3d:98:9f:d4:e7:28:14:
         10:97:28:27:14:fc:8d:a6:b9:64:19:be:0f:65:80:bb:a0:2e:
         aa:4c:76:c7:c4:9d:d5:8f:1d:4b:dc:7e:e3:90:49:15:55:b5:
         81:96:9d:78:62:06:9d:69:0f:ab:35:29:8a:e4:23:ea:59:4c:
         18:da:43:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:08 2025 by rpki-client