Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42982f4e-96ee-395d-8bf7-2f63618018bc.roa
File:                     42982f4e-96ee-395d-8bf7-2f63618018bc.roa (raw, json)
Hash identifier:          mVmeEcZVbOcNRXfiHwqfcvpddgm+ES8/I4T9oITSM8g=
Subject key identifier:   31:D6:D7:80:04:84:0E:23:B9:E5:A2:16:4E:E8:A0:C4:22:59:53:A7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F498783BAC57EDB79DDF14340
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42982f4e-96ee-395d-8bf7-2f63618018bc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0c6::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:83:ba:c5:7e:db:79:dd:f1:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f0da7a8c-d4ad-4e16-b535-7b39f15c4074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:52:b6:55:cc:f2:18:94:4f:c7:a0:45:ac:b7:
                    34:da:d2:58:7b:58:70:b9:59:32:a0:51:46:c8:4a:
                    25:37:16:ed:ce:53:e9:cb:7e:a5:e0:bd:a5:79:ed:
                    38:b6:91:d6:dd:7c:3f:5d:ef:d8:13:5f:83:a5:95:
                    c3:0b:50:99:38:e1:d8:d2:7e:a5:95:bf:4b:05:3b:
                    b1:f6:97:9e:f2:bb:20:98:22:c8:74:c2:44:4d:91:
                    a1:f8:05:3a:c4:aa:b8:8d:de:37:b9:2e:a6:09:2b:
                    fb:66:4a:f8:ea:65:46:fe:27:7a:c6:ad:83:1a:c3:
                    d3:2b:8a:de:0e:3c:3a:e5:1c:bd:88:07:68:df:f9:
                    e3:e5:ba:e1:77:d7:af:df:47:a8:8d:f7:67:e5:e9:
                    c6:1f:29:35:3e:ff:e5:5b:b5:5e:b8:57:fc:6e:e9:
                    46:63:fd:85:41:e9:c1:cd:ad:2a:0e:53:e6:8d:65:
                    c8:d3:ac:61:9c:9e:e1:94:d1:06:14:d8:41:a7:3e:
                    e6:21:45:d8:b8:0b:6e:85:f1:63:a6:7f:6f:98:3b:
                    ed:bf:01:0b:a5:0c:a2:74:46:18:1f:72:a8:99:70:
                    75:3f:d0:3d:6d:36:42:92:04:68:5e:04:d9:84:98:
                    6b:8a:26:d2:56:e7:db:55:25:9c:05:00:c0:d2:a3:
                    c5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D6:D7:80:04:84:0E:23:B9:E5:A2:16:4E:E8:A0:C4:22:59:53:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42982f4e-96ee-395d-8bf7-2f63618018bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0c6::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:ee:28:28:35:bf:15:9b:c0:82:ec:1e:aa:d0:c9:c8:04:
         8e:91:ac:63:ac:cb:90:3e:de:56:05:d1:ba:94:44:fe:98:21:
         83:62:8d:3a:6a:34:37:03:b4:2b:d0:8b:c1:e7:48:97:e0:fb:
         78:06:8e:bc:e7:c6:7c:94:6f:6d:27:d4:6d:69:ae:da:18:c2:
         ef:c3:6c:c3:77:b9:1b:f5:10:81:ca:ff:64:4d:89:1f:4a:c4:
         42:a6:c4:54:99:b9:05:86:49:a4:61:36:77:ed:b4:65:2e:f9:
         6d:57:f1:1a:56:99:61:fc:25:d4:0c:78:ea:f1:d0:72:10:ff:
         ca:1d:83:4e:3f:11:c3:30:f8:7c:fc:86:54:cd:fa:f5:fb:af:
         23:cd:ef:fd:d9:bc:d4:bb:fa:10:09:20:ef:62:42:09:9d:d9:
         98:92:6c:ac:a7:70:59:b0:60:8a:69:80:a7:7f:2b:50:75:da:
         06:d1:d7:7b:f0:68:b8:fa:2b:9f:c2:79:05:e0:9e:52:99:a1:
         4f:d5:43:58:7f:20:69:c3:7b:86:18:e3:1d:ac:82:76:5f:8c:
         c9:70:06:da:1b:b1:e3:c0:27:09:3b:7d:5d:a5:e1:3b:8f:dc:
         07:51:ee:aa:2d:95:9b:93:26:a0:17:64:76:30:d1:b8:c8:0d:
         2e:77:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:57:33 2026 by rpki-client