Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/451a7265-dca6-3750-83cb-98777e45de87.roa
File:                     451a7265-dca6-3750-83cb-98777e45de87.roa (raw, json)
Hash identifier:          EaGvr6aPMKe3/mhOp/xC86ysmRTC3Ze56HBWcJsji+o=
Subject key identifier:   3B:84:9F:85:4E:75:D7:9F:CD:D7:44:FB:EE:C2:00:C5:5A:B8:B7:B5
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E7E9503915774279060266100
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/451a7265-dca6-3750-83cb-98777e45de87.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:a900::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:95:03:91:57:74:27:90:60:26:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=ffa96878-5686-4b31-ab2d-30e255b77762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9f:5a:5a:d0:81:ae:9a:0e:7a:c1:60:b2:da:
                    e2:d6:5e:c9:8a:23:00:2c:b2:81:3d:1a:b0:3b:a2:
                    dc:19:6e:5e:91:bd:45:f5:f8:e0:ed:9d:e5:bc:04:
                    ba:d0:99:7f:b3:38:2a:d8:0d:51:09:ad:89:1c:86:
                    5c:04:14:16:1d:86:a0:6b:f8:24:87:d7:ce:2c:59:
                    33:e1:61:f3:66:83:fd:1e:e4:90:bb:ce:8d:b7:89:
                    b8:b8:13:e7:00:7c:c0:92:20:78:14:72:80:93:a6:
                    da:b6:9b:60:83:f8:af:bd:ce:fb:30:a5:dd:3b:20:
                    05:26:f7:7b:71:0e:8d:cb:72:f5:97:e8:6d:a0:60:
                    b4:5c:ca:83:71:7f:b3:0c:eb:16:80:b1:81:8f:ba:
                    c1:f3:3e:8d:0b:a4:70:fb:4a:ea:54:06:df:60:a6:
                    c7:a8:8b:d3:b9:ac:ef:7a:51:b7:a1:df:41:cb:ab:
                    93:93:f5:3a:be:d4:2e:cd:5a:8b:c2:ca:d3:7a:1a:
                    dc:8c:db:5b:b2:63:e0:d1:db:16:69:9c:d3:bf:7d:
                    fa:6b:4d:ec:a8:63:e1:78:48:48:84:81:7d:59:11:
                    dc:33:11:d4:75:83:d2:57:8c:d4:84:ec:47:64:42:
                    88:e8:f7:36:92:7d:33:c7:db:e6:99:c5:b2:97:48:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:84:9F:85:4E:75:D7:9F:CD:D7:44:FB:EE:C2:00:C5:5A:B8:B7:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/451a7265-dca6-3750-83cb-98777e45de87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:a900::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8c:30:be:d0:1f:25:dd:f6:95:0a:1d:ca:7c:38:0b:69:e2:
         85:af:30:86:da:b0:f1:41:3e:f2:68:1c:19:ee:29:c4:5a:ba:
         5f:96:23:8c:03:13:9e:0d:c9:33:63:08:c6:21:a1:6a:fd:8a:
         7d:45:71:3b:96:6b:bc:b5:02:81:80:a7:fd:19:94:ee:11:66:
         09:3e:98:36:09:4e:a7:31:1a:b6:89:dd:3b:67:1b:02:d4:47:
         35:6a:d3:04:6b:22:11:a5:b2:6a:be:eb:fe:3b:d4:9b:3a:67:
         c9:a9:00:09:e0:c1:03:c2:99:75:69:bc:3a:0d:33:4e:f4:ac:
         90:28:76:98:a9:1a:10:13:74:20:3c:93:a9:de:83:1a:7d:3a:
         c9:52:83:50:f7:8c:82:b5:57:24:f8:2c:f1:4a:06:b5:4e:56:
         cf:5a:7a:fc:b6:88:77:c5:eb:b5:1d:40:d9:48:57:96:88:dc:
         cd:50:88:f5:de:7e:e2:8e:6a:d7:78:5d:01:86:5b:60:f1:e6:
         e4:81:af:65:73:f8:3f:3f:a6:04:32:08:03:5f:7e:48:40:1a:
         0b:bc:da:fd:5e:98:49:de:96:ed:ec:9f:67:6f:54:67:b5:9b:
         72:18:ca:d2:40:24:5e:ef:fb:d6:7e:5e:09:08:93:3b:37:ca:
         ab:04:21:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:09:22 2026 by rpki-client