Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f0393c9-581d-3602-9115-75fba2643b4f.roa
File:                     1f0393c9-581d-3602-9115-75fba2643b4f.roa (raw, json)
Hash identifier:          H7rW9MeS/k0sEP1R7STmqhr5uPkdiSEG4nthwh8O1DE=
Subject key identifier:   8A:22:45:5F:EC:AF:C8:B9:F8:3A:91:5D:D6:FE:9E:67:71:41:21:17
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EF9E207C736ECD6D08D94E060
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f0393c9-581d-3602-9115-75fba2643b4f.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     54253
IP address blocks:        2600:200c:2100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:07:c7:36:ec:d6:d0:8d:94:e0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=1da72169-6c9d-4a11-8ca0-bbef91b60b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:bb:71:ad:28:5b:a9:31:20:05:31:ff:24:
                    b5:b5:df:84:56:74:1b:05:7b:58:83:c5:9c:a6:f5:
                    99:99:7d:5e:b4:f5:20:42:f4:48:55:10:cc:bc:cd:
                    4c:cf:c0:ed:1c:1b:d7:b2:79:35:6e:40:d3:23:0c:
                    20:b2:c0:8f:43:59:f3:72:93:db:91:48:0d:c0:13:
                    7c:85:fd:0d:36:35:56:1b:e9:70:58:43:a1:10:c0:
                    d4:b1:04:c7:32:0a:01:fc:e9:47:29:78:43:94:b2:
                    5d:78:91:75:4f:f3:07:2b:5d:44:8a:84:1d:44:a2:
                    49:47:06:1d:e4:b3:c4:df:18:2e:b1:09:b9:b5:8e:
                    44:a8:89:47:04:eb:87:a9:c5:e5:86:f4:54:66:3c:
                    77:5e:5a:a0:5a:69:f7:cd:f1:2c:28:c4:c4:ce:1e:
                    ad:10:41:87:9f:8c:79:a7:a4:65:e4:22:5b:13:27:
                    45:3f:b3:a3:ae:6b:b9:23:4e:cf:ae:93:f2:db:9a:
                    9a:4a:49:9e:0c:c1:66:c3:eb:4f:e0:e1:48:19:c2:
                    74:c8:fd:72:da:c0:11:28:9c:1e:43:ff:55:05:cd:
                    67:7e:5c:25:9e:3b:e3:3d:d8:fd:33:36:62:e4:9e:
                    44:5b:ac:51:62:21:3a:73:7c:97:31:f0:dc:d3:59:
                    d7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:22:45:5F:EC:AF:C8:B9:F8:3A:91:5D:D6:FE:9E:67:71:41:21:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f0393c9-581d-3602-9115-75fba2643b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:200c:2100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:08:b6:44:2d:e5:c3:f3:b0:5e:f4:ef:04:e2:13:34:dd:1b:
         e3:21:0e:a4:9f:b3:5b:a3:65:a4:52:f6:af:c1:47:a3:6f:1a:
         a4:25:8d:20:d8:6b:4b:f4:19:f2:4c:db:b9:09:cf:06:bd:de:
         96:12:cd:d5:e8:3d:f0:8d:20:55:e5:31:f7:00:69:e1:12:a9:
         c4:a7:7a:c7:c2:3b:9e:e9:a3:ae:89:70:55:4d:c9:a0:9c:78:
         aa:61:85:35:93:d9:ca:8f:3c:31:2b:a1:34:a5:34:c4:a4:9c:
         06:6b:08:6a:22:9a:45:fb:5a:05:7a:96:3d:45:20:6e:59:94:
         42:6f:f1:ff:ce:60:e3:a4:82:62:84:05:45:be:98:ce:a2:b0:
         b9:f3:64:37:0a:16:f2:23:08:27:99:45:ea:f9:eb:ee:d0:23:
         2c:aa:d4:85:b5:5c:f3:2c:68:9b:d2:cc:d9:43:ec:02:96:ee:
         60:e6:21:b1:ec:a2:ff:60:61:c4:7b:34:97:02:d9:2f:65:5b:
         e7:6f:5b:56:60:93:a5:dc:5a:39:95:51:9d:eb:58:ce:c5:41:
         75:bd:c1:b6:b5:f2:4a:29:f1:ac:83:54:cf:6a:6a:92:74:74:
         e8:98:e4:7c:89:b2:06:9a:48:5d:83:5d:a4:5a:5d:a2:21:16:
         69:f6:aa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:58:03 2026 by rpki-client