Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3886be9c-8697-3af7-bf05-1b0b0567a6ca.roa
File:                     3886be9c-8697-3af7-bf05-1b0b0567a6ca.roa (raw, json)
Hash identifier:          fiSMy9mnuhO6+K90/f1u8zzgAdCrKu8w3d29tRSxFD8=
Subject key identifier:   26:A0:9F:23:DC:C4:3C:A6:17:06:A1:59:C6:ED:0F:5C:FC:89:6D:60
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F498748D18600894B4D9B80C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3886be9c-8697-3af7-bf05-1b0b0567a6ca.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c049:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:48:d1:86:00:89:4b:4d:9b:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=26165b53-dd6b-4520-a8b1-f84dbe819a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ea:62:d2:3d:7f:b5:b7:fe:71:97:2b:2f:ef:
                    b7:a7:e2:3c:d7:9a:fa:18:c4:eb:75:78:aa:a7:8c:
                    7b:0f:24:7a:2e:b4:19:4a:30:8d:47:52:15:23:32:
                    b0:a7:28:be:95:17:e8:08:a3:5b:d1:8e:37:a8:95:
                    99:06:c2:a7:3f:25:ec:f0:30:7b:19:2f:1e:5d:00:
                    0f:a2:2d:8f:45:00:e8:e9:87:e2:39:23:fa:34:6b:
                    71:52:5f:64:50:0f:40:90:8a:93:b9:7c:fd:cd:d5:
                    ae:f1:b2:29:b5:03:47:32:bd:2a:2b:ab:4b:a1:55:
                    48:43:86:52:b4:7c:b8:36:99:1a:a3:b6:3e:69:50:
                    28:92:ff:bc:da:f8:5c:e5:3c:84:c7:3b:55:1f:56:
                    92:12:f7:63:36:ec:8c:c9:a3:16:1e:bb:13:40:fe:
                    71:96:08:e8:23:f0:8d:44:32:6e:62:89:a7:ae:c4:
                    47:5e:6c:97:c8:ac:b6:16:be:88:29:0b:7e:77:53:
                    1a:c3:69:7f:7a:c3:77:ce:3f:35:70:74:13:52:b2:
                    89:3d:45:dc:cc:a6:9e:c4:67:19:7c:3f:a6:de:5f:
                    59:a5:9e:79:6a:53:f9:1a:d9:87:76:ae:8a:ab:50:
                    90:13:9b:43:41:41:97:19:5b:ed:3b:ea:59:e3:a2:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A0:9F:23:DC:C4:3C:A6:17:06:A1:59:C6:ED:0F:5C:FC:89:6D:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3886be9c-8697-3af7-bf05-1b0b0567a6ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c049:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2b:58:2f:4b:56:f6:3c:e7:1e:10:f8:07:b3:93:4b:8a:60:
         67:8e:1a:a9:8c:ec:f1:87:1a:6d:38:8d:b2:72:e2:bc:9a:32:
         bf:8a:d1:6d:7b:aa:cd:a6:3e:28:1c:4e:fc:64:5e:1c:d5:c1:
         ad:1a:cd:33:2d:d1:c7:8a:26:52:40:2f:3b:00:a5:76:3e:f4:
         07:56:c1:28:e8:38:97:a1:73:ce:e0:66:d6:4f:d8:1b:27:39:
         5e:a4:4a:a5:47:51:44:2e:b8:53:8e:20:fb:13:29:af:3c:25:
         df:8d:09:08:a3:c7:b0:12:4f:5d:0c:8a:17:fd:34:85:5b:6d:
         e3:39:1c:cd:bb:d4:76:cb:5b:e6:20:55:3a:ae:7f:da:bc:2d:
         87:5f:9f:31:94:9e:82:52:b5:cb:87:0c:b7:c2:4e:f0:65:2c:
         49:a3:ed:ee:ac:de:3e:f6:c6:80:6f:6a:21:41:20:8b:88:ee:
         31:4e:c5:1e:31:45:6b:86:bb:0f:98:61:3a:ac:18:9c:b7:a0:
         ce:ed:89:9b:b0:d0:92:f5:09:cb:c1:8e:7c:ba:b8:6d:2f:13:
         0f:b6:41:44:a9:92:57:9a:91:74:99:35:ce:b3:99:77:a3:1d:
         cb:88:56:f3:d1:93:24:eb:42:32:02:fa:7e:26:22:88:db:5a:
         fb:d3:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:36:43 2026 by rpki-client