Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/17abdb51-fa92-3376-8bab-96aab3b9d272.roa
File:                     17abdb51-fa92-3376-8bab-96aab3b9d272.roa (raw, json)
Hash identifier:          AVnhSA9Q3dpv9LwhwS2BZcdDegDqbVbR+t7h7l/h7bk=
Subject key identifier:   BC:A2:6E:EA:30:83:41:37:CF:37:7A:B3:42:C3:9A:C8:34:20:CF:A9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AECB022194F5DDA7CF6B01240
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/17abdb51-fa92-3376-8bab-96aab3b9d272.roa
Signing time:             Thu 21 Aug 2025 00:26:25 +0000
ROA not before:           Thu 21 Aug 2025 00:26:25 +0000
ROA not after:            Wed 19 Nov 2025 01:26:25 +0000
asID:                     31898
IP address blocks:        2603:c001:3400::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:b0:22:19:4f:5d:da:7c:f6:b0:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 21 00:26:25 2025 GMT
            Not After : Nov 19 01:26:25 2025 GMT
        Subject: CN=2117371d-9436-4079-8f43-88ef138c213c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e4:8c:58:fa:2b:bb:15:3f:be:60:3c:c3:e4:
                    70:e5:67:f7:94:6f:01:ea:3e:b8:25:79:2f:3a:92:
                    37:77:2a:48:72:dc:26:bc:27:f9:1c:d1:e1:87:c2:
                    3d:1d:18:67:38:c4:e3:ac:61:67:43:3a:0d:66:97:
                    da:24:89:26:fd:03:cd:48:7d:e0:ca:eb:f9:61:36:
                    99:21:f7:f1:3c:7f:66:14:8d:6b:35:fb:b0:78:12:
                    53:aa:f1:bb:34:10:35:d4:b5:81:d4:23:61:f7:fd:
                    b6:3c:11:4a:9d:89:7a:28:4f:d3:74:33:35:8e:51:
                    01:15:c9:d6:14:4f:52:be:bb:82:dc:85:dc:1b:81:
                    6b:4c:e7:1c:e7:d2:0c:8b:5f:13:c6:e6:39:44:0b:
                    6f:90:40:4b:89:d3:7f:a1:fb:e7:45:63:cc:0b:ba:
                    ad:4c:4d:66:23:7b:ca:8c:78:77:54:d3:a0:03:d3:
                    42:25:3a:bd:30:ca:35:0f:7f:af:54:7a:28:4e:e8:
                    c6:64:e0:99:81:26:2c:16:5d:ab:82:87:f3:30:ce:
                    e4:6c:e4:a8:15:4e:8f:6b:11:bf:6f:6b:8d:06:3a:
                    cc:d3:a3:4e:bb:69:4c:af:cb:2e:1d:b1:3c:09:0f:
                    94:a3:5a:8e:4f:6e:b3:b3:9b:6d:cd:46:a4:e6:c4:
                    3d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A2:6E:EA:30:83:41:37:CF:37:7A:B3:42:C3:9A:C8:34:20:CF:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/17abdb51-fa92-3376-8bab-96aab3b9d272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:3400::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ac:2d:83:04:63:9a:dd:b4:ba:58:bf:f1:0a:e0:90:ea:bf:
         4a:0a:6c:c1:80:1a:29:44:e0:e7:6e:4e:62:6c:e9:68:0e:00:
         ca:a5:fe:0a:d9:19:fd:0a:b9:53:06:4b:24:e7:3f:f6:0a:7e:
         10:ae:29:8e:2e:4e:d1:27:74:74:57:78:d8:ee:af:b4:f5:39:
         aa:8d:11:a0:81:a9:02:1d:ac:df:35:20:82:a6:cc:89:3f:1c:
         60:62:e0:29:75:8c:a9:92:e8:e3:22:85:a3:34:8c:0c:b1:31:
         26:34:40:81:38:a7:d4:59:77:c6:6f:c6:80:da:51:73:4f:83:
         1a:71:eb:47:7f:65:1c:a9:e6:f7:89:2e:80:03:a1:a1:b4:e7:
         e9:5d:81:02:94:f2:0c:a5:37:b3:7d:eb:46:5d:7b:e7:ce:ee:
         8a:c7:6a:55:ea:89:68:89:46:a1:9f:71:72:1e:fa:66:2f:08:
         ae:c6:bd:69:dd:65:5d:3d:7a:e9:23:4e:69:09:a0:ac:e2:d6:
         e5:76:5d:fe:08:b1:a9:18:96:bf:ba:f9:fd:12:62:a5:2f:a9:
         28:e1:b0:50:b4:95:5a:56:d0:e8:f1:57:9c:e8:27:f2:16:dc:
         e8:62:8f:7c:10:06:28:d3:de:b1:dd:de:66:5e:88:e3:af:8d:
         b8:40:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:45:00 2025 by rpki-client