Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/454eaed4-550c-3c14-8c8e-11169e0c8974.roa
File:                     454eaed4-550c-3c14-8c8e-11169e0c8974.roa (raw, json)
Hash identifier:          ezkKxa480tdtGL+kvR1UjCR5+jOAWyazppFo6iuxk18=
Subject key identifier:   B9:04:95:BF:24:C1:8B:14:04:12:45:4C:9F:F7:E2:BF:94:1E:F4:2F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D3670BDC0DA8F2D52AB8DE300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/454eaed4-550c-3c14-8c8e-11169e0c8974.roa
Signing time:             Wed 18 Mar 2026 20:02:23 +0000
ROA not before:           Wed 18 Mar 2026 20:02:23 +0000
ROA not after:            Tue 16 Jun 2026 20:02:23 +0000
asID:                     54253
IP address blocks:        2603:c0d0:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:70:bd:c0:da:8f:2d:52:ab:8d:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Mar 18 20:02:23 2026 GMT
            Not After : Jun 16 20:02:23 2026 GMT
        Subject: CN=83feb011-37fe-4f9d-84c6-de1954545218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:27:ba:06:c1:83:7d:f6:ea:9e:76:07:e9:c9:
                    dc:17:c0:81:aa:83:4b:b5:26:43:27:67:90:1f:9c:
                    2d:33:21:10:cc:ba:92:32:3a:56:b6:5a:cb:21:78:
                    41:69:ec:47:4d:34:be:4f:ad:e2:0a:e9:fd:ca:ea:
                    3a:75:b9:8e:c8:92:30:6d:99:68:09:4e:a9:c6:93:
                    c6:9e:6e:4b:bd:ed:20:21:4d:ce:ad:9d:61:d3:d9:
                    82:b4:bd:98:d3:d1:61:80:96:e1:bd:69:4c:73:74:
                    9d:9d:d5:0e:45:ce:cd:71:76:77:9f:61:26:e2:6b:
                    99:99:4d:c3:f4:d1:03:20:2b:2e:07:d2:29:63:54:
                    40:00:46:7c:97:11:28:a5:7a:6f:fb:92:8c:5e:32:
                    80:54:c8:74:e1:2f:b5:d3:a2:62:99:ab:7d:e7:c9:
                    ca:77:25:40:12:e5:64:31:63:4d:18:d3:b9:ee:8c:
                    f6:27:5b:be:87:50:5b:6d:7e:24:d0:4e:2e:23:e2:
                    9b:71:de:ec:c9:04:53:5d:e4:6a:97:c0:eb:36:4a:
                    f6:16:44:b0:82:71:86:a8:45:24:c1:4b:10:85:69:
                    0b:02:85:7c:fb:c9:07:55:10:52:ff:c8:74:03:33:
                    ff:06:d2:35:c5:6c:e7:ce:f6:36:4a:c8:98:d5:c3:
                    f7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:04:95:BF:24:C1:8B:14:04:12:45:4C:9F:F7:E2:BF:94:1E:F4:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/454eaed4-550c-3c14-8c8e-11169e0c8974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0d0:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:9d:48:f5:fc:55:40:25:8f:12:7f:fb:06:44:0c:f9:86:d5:
         d6:70:b8:84:73:7a:a9:34:9f:ff:f1:17:e8:7a:70:22:b3:6b:
         72:75:c1:72:57:b8:c2:e7:84:e0:f5:be:e4:55:99:39:6d:7e:
         3e:58:51:c3:ea:2a:d0:1b:af:76:ff:2d:e6:b3:a8:5b:92:b0:
         b7:53:80:c5:36:de:28:e9:fb:fa:22:1f:82:81:46:32:ce:2e:
         48:f4:08:94:01:50:9e:36:66:f0:30:e7:54:77:8a:74:58:65:
         a2:1f:8c:b1:b0:dd:99:b8:ff:96:f8:db:c0:e0:fd:95:ba:a2:
         35:3b:8c:a0:58:09:72:78:43:ee:3d:9e:84:d5:02:bd:48:5f:
         f1:af:36:64:2e:4a:0d:08:59:e1:23:c5:a6:cb:2d:55:62:89:
         0f:f4:d3:20:52:21:ac:d6:3c:33:13:16:34:da:05:7b:78:86:
         a3:a6:51:82:ed:4e:66:49:99:e4:f9:09:15:6f:94:27:d1:56:
         1e:98:f5:22:00:89:a7:0b:e9:c6:88:15:de:95:e2:08:be:b0:
         e0:07:05:af:5b:7a:6b:5a:b1:07:94:a2:c4:ce:1d:41:e7:65:
         c4:0c:72:89:7b:8a:19:b2:db:b6:92:e5:d4:bf:2c:62:b6:3f:
         48:e5:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:53:51 2026 by rpki-client