Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ba2b349-176e-3857-8292-a1d88ec42b6e.roa
File:                     0ba2b349-176e-3857-8292-a1d88ec42b6e.roa (raw, json)
Hash identifier:          hQqies6nidEf67syaZ36qtkaU/OB/MLJ5PV0AnpzlCo=
Subject key identifier:   7B:F6:A0:AC:76:4B:75:EC:97:3A:17:4B:A9:1C:EC:3E:CF:48:B7:C7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF56BC0A2540DBD54DB6700
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ba2b349-176e-3857-8292-a1d88ec42b6e.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        2603:c000:200::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:6b:c0:a2:54:0d:bd:54:db:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f9912642-fb52-49c4-a19a-0747f0f79f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9a:95:cc:83:78:b0:be:9e:26:c5:db:c8:a1:
                    61:1c:57:db:69:49:e4:0f:ce:82:64:ec:a7:1e:23:
                    28:2e:44:09:37:3d:67:bf:78:6b:f1:f6:27:da:35:
                    09:11:a3:32:28:ec:28:72:16:79:cb:3d:07:7a:7d:
                    7b:96:20:e2:5c:68:5e:de:dd:81:72:7a:58:10:08:
                    e3:f4:6c:b2:d0:1a:64:5e:ff:bb:5c:77:20:0a:ae:
                    3b:43:e1:fb:7d:c6:73:d7:ea:a9:c6:b4:5f:03:2e:
                    9a:f2:46:46:73:fb:15:08:13:26:7a:7d:31:3a:e3:
                    cc:41:4f:90:68:2b:57:a1:d6:f1:d0:7f:56:44:b2:
                    31:e7:30:0d:e4:c8:27:e5:96:fc:85:25:00:49:b6:
                    af:93:ce:79:0d:16:a7:8f:cd:21:f5:41:cb:7c:26:
                    6a:76:d0:6a:bb:dd:af:6c:fd:51:75:66:a9:9e:34:
                    2b:d7:3a:ff:3d:ad:f1:26:32:24:e0:80:ea:8c:c1:
                    98:5d:54:34:0a:6d:ef:e7:2a:e3:92:28:58:44:0f:
                    d3:e2:36:82:dd:b5:e2:74:ad:72:4e:0c:a3:e2:ad:
                    a0:fc:54:17:66:d5:c1:4e:73:32:f3:c9:03:df:d6:
                    c4:8e:29:b2:80:71:6e:5e:a7:67:a4:67:9a:23:ee:
                    81:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F6:A0:AC:76:4B:75:EC:97:3A:17:4B:A9:1C:EC:3E:CF:48:B7:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ba2b349-176e-3857-8292-a1d88ec42b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:71:30:d4:f4:ab:6b:52:1d:6d:b7:59:bf:25:ae:89:29:7f:
         20:ed:97:35:76:a5:af:92:a6:07:f2:e5:46:f3:88:fb:59:c7:
         75:94:0e:ff:b3:05:bc:20:e0:ba:ab:42:9c:69:5f:f9:5f:4a:
         61:66:20:f5:59:3b:7e:98:58:b3:33:b3:01:ac:3d:a8:71:90:
         59:7d:5f:93:0f:2c:48:8c:7b:c1:61:d0:0b:4f:7d:6d:2a:e2:
         93:06:5e:df:33:23:f8:83:2e:43:6f:91:3b:97:8f:42:cb:59:
         93:2e:00:bc:b7:18:1f:30:6d:d1:d5:ec:49:b7:1b:7d:d7:b0:
         5f:de:1e:8f:69:fa:32:8a:4d:90:dd:77:10:b6:a7:35:42:cc:
         b8:c6:da:18:fa:f6:c9:62:0c:c1:12:61:25:4e:af:b2:b9:28:
         23:e3:d9:04:f5:c4:04:d3:44:f8:31:10:15:54:71:ff:57:2b:
         d0:ca:0c:0f:90:85:db:37:af:30:35:30:60:86:66:c0:b3:29:
         8c:13:73:e4:2d:1a:4e:bc:03:14:3d:e0:39:ed:47:45:1b:6c:
         cb:83:10:24:8c:ea:d8:df:28:b3:58:c6:3f:20:84:7a:ac:b2:
         fd:24:09:58:f4:38:56:7a:90:f9:a9:d7:f0:04:dd:8a:89:cb:
         ff:d8:1b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:05:01 2026 by rpki-client