Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/51453d85-a115-3fa5-ad21-2178c8f20d33.roa
File:                     51453d85-a115-3fa5-ad21-2178c8f20d33.roa (raw, json)
Hash identifier:          mPEu65ztllTVIwgteREg5VA2gBrTFLx7sTztYktvZoI=
Subject key identifier:   EB:ED:34:D8:22:4F:F1:60:00:E7:32:B4:85:32:5B:8C:2B:D9:3B:CD
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEC095BF1766E8A87757A4F80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/51453d85-a115-3fa5-ad21-2178c8f20d33.roa
Signing time:             Wed 20 Aug 2025 18:50:23 +0000
ROA not before:           Wed 20 Aug 2025 18:50:23 +0000
ROA not after:            Tue 18 Nov 2025 19:50:23 +0000
asID:                     31898
IP address blocks:        2603:c02b::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:09:5b:f1:76:6e:8a:87:75:7a:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 20 18:50:23 2025 GMT
            Not After : Nov 18 19:50:23 2025 GMT
        Subject: CN=6d5b6b83-e0ac-485d-aaf7-7e14a934f9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:72:33:9d:4b:eb:9a:0a:0c:bf:8f:27:65:
                    9c:4d:a5:8c:33:c7:2d:7f:5d:8a:20:31:1b:85:17:
                    36:c0:ec:1b:73:37:76:49:a0:02:fd:ec:04:e2:e7:
                    ad:ba:b6:8b:c8:e6:05:56:1e:9a:d1:c0:06:83:e5:
                    a2:bd:da:c4:f0:b2:a3:16:28:63:1d:3e:eb:43:d1:
                    44:b7:d2:ad:68:d1:00:4f:d1:b2:bf:79:3e:3a:a8:
                    b1:7a:7a:2f:cf:0a:45:89:b2:ac:8f:9a:25:de:5c:
                    26:71:52:69:30:6a:69:29:82:19:66:02:9a:01:c0:
                    19:e2:21:2b:9d:75:15:e7:0c:a6:67:1b:a0:c9:87:
                    56:d8:71:ea:e6:f1:1c:1a:8a:ec:0f:9b:9f:64:01:
                    6c:01:dd:19:5c:6a:1c:b2:09:56:a1:0e:39:0c:3e:
                    f3:c4:76:7f:af:7d:ba:48:41:58:99:12:59:ca:89:
                    9d:54:50:d6:34:45:e6:fc:7c:ca:71:12:be:a2:7c:
                    66:b9:66:d7:6e:bc:7d:e5:3a:45:76:3a:a1:74:d5:
                    3a:b7:63:ae:a7:53:37:b8:4f:c0:52:e0:bd:ef:71:
                    ee:b0:1c:3a:7f:1b:5b:0f:aa:46:51:14:37:5b:ca:
                    a0:05:37:fb:ae:16:6b:af:52:fc:50:6b:80:fc:a0:
                    03:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:ED:34:D8:22:4F:F1:60:00:E7:32:B4:85:32:5B:8C:2B:D9:3B:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/51453d85-a115-3fa5-ad21-2178c8f20d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c02b::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:95:a2:a2:0d:99:4d:31:ba:65:d7:ac:b8:3f:42:05:17:1d:
         88:53:6a:e0:11:83:3f:6d:0f:58:ce:f3:84:79:e0:1b:98:0e:
         54:33:47:b4:6c:1c:23:68:03:5c:60:27:8c:ae:97:b3:f5:bf:
         55:7b:9a:df:e3:59:f9:cc:48:3c:c5:67:6b:b6:dc:53:de:03:
         cc:f5:07:01:97:b4:23:1e:c7:a8:a3:8b:a7:62:6a:17:2b:ba:
         32:16:82:0a:b4:b9:b2:77:5f:87:80:73:cb:5f:c7:90:e2:af:
         7c:e7:1c:00:fe:e2:dc:62:f0:6c:c5:65:1c:2e:86:86:79:ed:
         cc:90:40:fb:d7:a3:ac:85:f5:90:20:ad:a4:1f:19:34:bb:e8:
         13:b7:37:8b:90:06:05:cc:be:7f:74:9c:ad:50:c8:96:0d:4f:
         af:01:75:c2:35:48:79:fa:e2:26:70:48:98:66:68:da:b7:3b:
         fa:c1:7a:87:f3:82:0c:bb:6a:2f:5f:a9:1a:10:d2:7c:59:49:
         fa:04:74:1a:78:cd:b5:01:ce:ce:24:21:3c:18:16:15:5e:b1:
         52:78:38:47:3a:6f:66:3e:0c:d1:6d:68:02:af:0a:01:fb:22:
         64:6e:85:0c:c7:69:ad:47:28:5b:6c:1d:ba:3f:cb:cd:2b:57:
         ef:11:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:12 2025 by rpki-client