Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d8887fa-47ec-3f9a-8306-921ba26462c8.roa
File:                     0d8887fa-47ec-3f9a-8306-921ba26462c8.roa (raw, json)
Hash identifier:          ghsR0hnLkYrJ7b8Q2N12xuJkExPRw6LywRY8saNwDIk=
Subject key identifier:   BE:47:D6:5C:C9:FA:60:E1:72:C8:24:CE:4C:59:41:1C:25:D3:82:3A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DCC606DFA3E0745D50F8F2FF0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d8887fa-47ec-3f9a-8306-921ba26462c8.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c0bc::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:6d:fa:3e:07:45:d5:0f:8f:2f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=1592a2ea-195f-421f-b87a-2a3bdc9639f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:01:76:28:88:61:04:27:e5:2a:43:ba:33:e1:
                    f9:34:76:ac:7b:ec:0e:d0:07:3a:02:10:b2:c2:48:
                    1b:49:3f:2c:bf:f1:5c:a2:98:0b:fb:ff:76:4b:a7:
                    02:f8:25:ed:e2:41:6f:19:e7:cb:66:fa:10:25:50:
                    66:9b:18:c5:06:b1:f4:4c:ed:09:65:9c:f3:80:b8:
                    22:3b:84:bc:32:34:2f:5d:83:12:12:d7:f9:20:3a:
                    a6:56:2f:68:f7:df:be:c3:b9:9c:94:d5:5b:20:9a:
                    0a:9a:a5:6f:54:af:78:49:c9:a7:65:9f:40:aa:78:
                    93:a4:2f:63:bf:f8:76:48:ca:7e:2f:a9:50:ab:99:
                    66:fe:48:7c:b9:33:55:4d:dd:b1:80:3c:90:48:a5:
                    75:cc:61:11:34:61:77:ca:bf:40:59:1f:d3:a1:03:
                    f2:b9:05:a5:d3:1f:52:4a:45:c9:07:22:b5:6d:ae:
                    08:b4:5a:b8:71:b5:aa:40:5e:c6:c4:65:59:ad:8a:
                    01:93:55:5f:f0:47:ce:61:41:08:45:92:1e:f4:39:
                    18:6b:ca:97:80:00:19:4d:54:e8:5a:c4:22:31:dc:
                    65:67:4c:f3:e3:7e:6c:5a:e1:55:58:98:03:6d:67:
                    cf:d8:05:df:c2:da:8e:49:b2:5a:60:e7:22:95:70:
                    76:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:47:D6:5C:C9:FA:60:E1:72:C8:24:CE:4C:59:41:1C:25:D3:82:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d8887fa-47ec-3f9a-8306-921ba26462c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0bc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:52:13:df:99:3e:27:d2:02:b0:ac:25:1f:c4:92:34:dc:70:
         29:04:2e:b0:45:94:7e:1d:47:a6:8e:22:a7:2a:64:4b:97:4a:
         9b:5e:30:65:8b:41:40:94:e0:26:e9:a5:19:f1:6d:af:1b:00:
         c3:ff:b6:2d:8d:6c:7d:9f:87:ac:6a:95:1e:25:08:17:83:94:
         ec:dc:36:87:c9:87:3c:16:df:31:fb:49:4f:14:47:44:d7:5b:
         d1:46:7d:33:0d:c0:ea:3b:26:3d:3c:2f:b7:73:ff:82:0d:7d:
         54:4b:ac:69:bb:06:ff:da:bb:9c:0b:5e:76:1e:db:71:5d:21:
         5c:55:b5:d1:81:34:68:e1:ca:63:5f:b1:f4:10:aa:c4:ba:70:
         b3:c9:ff:1c:1f:b6:25:e1:76:3f:7e:65:4f:67:f9:8f:62:44:
         63:af:cf:f3:ae:34:a1:8c:12:f4:3a:33:af:6d:43:46:71:39:
         46:e4:8d:e7:33:0f:bd:66:7d:ea:52:c7:76:89:a6:f5:20:8f:
         b5:5a:c3:81:9d:e7:71:0b:4c:4f:9d:e9:6e:38:a8:4c:d7:dd:
         0c:38:9a:46:6a:d1:56:2e:c5:a1:6d:b7:da:21:de:d7:d2:c2:
         0e:1a:10:26:50:dd:e8:ff:68:82:5a:89:c3:9a:3f:6d:53:1b:
         da:2e:a6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:52:38 2026 by rpki-client