Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/375fe562-4de3-3795-acd4-2035b5a537b7.roa
File:                     375fe562-4de3-3795-acd4-2035b5a537b7.roa (raw, json)
Hash identifier:          rN8VCjiJlWby+2wzT2+8+RK/AeDB3zfcZcNlahFrXCM=
Subject key identifier:   CC:3E:EB:C1:33:07:18:44:14:94:F7:DF:B4:30:BB:33:6A:C0:34:7C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D932568F8601B47948F633C00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/375fe562-4de3-3795-acd4-2035b5a537b7.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        2603:c030:4000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:68:f8:60:1b:47:94:8f:63:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=6f9c4f60-f256-4db9-8ed8-0b8c4a630647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:1c:f1:37:0c:8f:92:f6:65:b1:38:8d:6e:
                    1e:9e:85:5b:c7:57:89:38:df:25:bf:61:e0:38:f6:
                    55:9c:fb:2f:b9:8c:9e:ba:75:27:b7:86:e1:53:04:
                    9d:ec:c6:47:a9:f8:8f:b2:93:bb:ef:4f:15:91:f0:
                    39:c9:64:24:30:25:84:2b:64:4f:4a:c1:2c:9d:ce:
                    bd:fd:c5:52:bf:71:d8:0f:2e:a8:44:12:ce:a2:2d:
                    db:3c:df:ab:d6:b1:c7:f0:f2:be:16:b5:cd:48:f0:
                    5f:cf:ad:52:a0:47:9e:38:7d:be:04:4b:85:17:6e:
                    8f:da:ff:ec:81:65:52:4f:db:52:eb:36:cf:c5:6a:
                    77:14:3f:ff:ac:f4:d3:8d:c9:e1:6d:6f:22:1b:1b:
                    28:a4:eb:ed:3e:61:5d:fa:3d:b9:1d:53:fb:fe:a0:
                    57:dc:c2:1f:c9:c9:8c:6d:57:f4:f5:65:42:4d:5f:
                    71:37:5e:16:bd:4b:b2:38:30:df:1b:2c:cf:55:a8:
                    89:db:61:e8:94:cb:e5:b6:31:59:ce:84:f3:97:75:
                    d6:33:bb:00:fc:c5:35:e2:72:2d:24:2c:17:e8:b6:
                    e0:9d:09:f4:12:50:29:7e:e8:4c:97:e8:e1:8c:32:
                    23:6a:0a:d8:a2:d5:13:e2:0e:41:e2:39:91:be:a8:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3E:EB:C1:33:07:18:44:14:94:F7:DF:B4:30:BB:33:6A:C0:34:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/375fe562-4de3-3795-acd4-2035b5a537b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c030:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:2c:e7:bc:ec:e4:38:97:21:7d:6d:4c:d0:1f:72:42:cf:df:
         01:0b:cf:d7:70:6f:2d:d4:04:ef:79:ae:97:67:5d:d1:08:e9:
         68:2a:d0:ed:9a:6a:57:0f:e0:f2:7e:4e:94:ad:43:a0:a2:5b:
         a7:d7:55:25:10:70:89:2e:2a:a5:91:aa:2b:a8:b7:de:51:16:
         d0:ae:02:c9:de:70:ed:07:48:3e:64:c9:e9:2e:04:68:69:f4:
         a7:42:ad:d3:20:08:f2:b5:0b:22:be:8b:d4:36:76:69:a9:2b:
         82:02:7e:77:2c:22:d1:77:63:a1:fd:a0:32:31:ea:a2:72:31:
         c6:85:e2:db:bf:08:40:48:81:2f:69:e5:d1:9a:18:a8:f0:ce:
         f0:dc:32:69:2e:06:a2:16:67:90:3b:e0:68:63:e4:08:ba:af:
         b0:d2:18:1a:59:f8:7d:74:c2:b7:49:25:48:e7:a3:4a:bd:11:
         7f:81:93:7f:85:ca:c5:78:e1:79:d6:a8:c7:79:79:2b:93:58:
         26:bf:1c:68:0b:c0:b5:a6:e6:f8:aa:cb:f7:33:9f:79:a5:4d:
         5a:8b:ee:4a:4b:55:fd:94:dc:8e:3d:96:cd:cc:83:b7:f1:bc:
         5d:2a:17:0c:f8:21:b6:00:4d:4a:8b:5c:7e:df:41:4a:33:9e:
         39:ce:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:55:22 2026 by rpki-client