Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4721ce1e-db3c-323a-81b9-82a9284f2c47.roa
File:                     4721ce1e-db3c-323a-81b9-82a9284f2c47.roa (raw, json)
Hash identifier:          ZabZOilMj3Qr+hADecKXPEKzgr7hy9uiF3Z5KrY/jHY=
Subject key identifier:   16:E2:05:49:CE:83:BE:75:CA:3F:49:24:15:EB:E8:7A:D7:6D:DD:8A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8D8FF33E925F21DC4BFA8E48
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4721ce1e-db3c-323a-81b9-82a9284f2c47.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     31898
IP address blocks:        2603:c002:2800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:f3:3e:92:5f:21:dc:4b:fa:8e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=3bffff6a-9537-4544-98c9-ece322333daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:3b:82:ee:53:75:70:98:26:6b:5e:66:df:
                    e7:fb:17:03:00:62:e0:e0:76:41:dd:c2:96:0b:df:
                    c8:68:28:32:07:ca:90:e6:2a:93:f9:88:b5:47:66:
                    98:b6:92:a4:b1:dd:c9:9d:e9:9d:f4:6c:da:f0:9c:
                    99:fd:03:29:64:e0:2b:30:52:35:38:2a:16:95:87:
                    3b:f0:5c:51:00:2d:45:e8:01:66:a6:24:eb:fd:f1:
                    78:8c:8d:88:94:71:06:59:fa:37:28:4a:65:9e:e6:
                    fa:8a:41:64:f1:f5:67:77:79:ed:32:06:d0:81:25:
                    62:c6:2b:c9:41:80:be:b7:8b:3d:c4:e2:20:92:d3:
                    4a:ed:73:15:38:6b:c4:5f:0f:6d:f7:9c:af:ff:75:
                    aa:3d:f1:69:c8:df:39:cc:7b:f7:52:e6:6b:ab:6d:
                    f7:36:b9:4b:cd:86:69:55:22:13:32:8d:c9:04:41:
                    32:27:f1:ea:c5:b5:48:44:bf:69:a9:7c:8b:11:3b:
                    57:06:b8:18:4f:e6:83:1f:f2:5d:47:d8:69:e6:0b:
                    d7:66:d9:d5:a5:f1:23:8f:49:ac:44:c3:1c:f9:f6:
                    ea:0e:dd:32:0d:fb:52:b5:01:c0:4d:fc:d6:82:59:
                    7b:80:66:72:2f:24:70:7d:91:e8:3a:e1:65:1b:5a:
                    81:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E2:05:49:CE:83:BE:75:CA:3F:49:24:15:EB:E8:7A:D7:6D:DD:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4721ce1e-db3c-323a-81b9-82a9284f2c47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9d:9a:d3:e7:43:c4:aa:7b:d4:82:2f:6d:98:9e:55:87:93:
         00:1d:28:25:2f:a6:c9:a3:76:7c:55:a4:93:61:f9:ea:be:ff:
         15:86:c6:22:31:0d:9f:01:c2:35:3f:3e:44:51:42:85:5f:d5:
         70:cb:84:b7:99:96:60:6e:16:2c:73:01:e1:6d:1a:23:44:a3:
         9c:16:45:66:fd:cb:f2:b0:f4:f8:5f:1d:18:a5:bc:d5:ba:74:
         33:ca:ff:eb:85:da:a1:f2:a1:46:01:45:92:c8:23:50:d0:b8:
         36:82:65:76:4e:49:c8:91:f7:32:e1:ff:48:21:48:b2:11:58:
         20:93:61:a9:7b:c9:15:02:5d:c8:8a:26:73:00:27:fd:cd:dd:
         93:cf:a6:bf:cf:16:ae:05:1c:23:b0:18:07:7d:1a:31:7f:be:
         de:a2:a2:a3:91:8f:d4:d7:8f:46:e2:86:b1:66:be:88:84:ea:
         7e:97:10:31:03:5b:dd:89:2a:ad:66:dd:ef:83:40:57:a7:bc:
         86:11:e1:9d:8a:ac:cb:5a:8f:19:f7:fe:69:e7:28:43:e0:9a:
         41:65:74:3f:3d:21:4d:2f:2c:de:56:21:fe:e0:8a:97:73:f4:
         5e:aa:80:66:66:f4:3f:a5:3c:d9:4c:b0:91:6e:a9:55:3b:62:
         b2:10:53:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:55:10 2026 by rpki-client