Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/555b4120-14bb-3215-942d-ae5b3387a784.roa
File:                     555b4120-14bb-3215-942d-ae5b3387a784.roa (raw, json)
Hash identifier:          Tusvu5fbOGKzlcjBjI0l1csSnL40rNEBlGTjNyxkJjI=
Subject key identifier:   C5:97:D6:44:89:6A:0A:EA:D0:10:1F:52:68:8E:81:33:FE:4D:4C:C2
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F02423FD3B963357CFF0E7800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/555b4120-14bb-3215-942d-ae5b3387a784.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     31898
IP address blocks:        2603:c011:e000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:3f:d3:b9:63:35:7c:ff:0e:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=c54d030e-bee6-42bb-baee-039ddee7e8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8e:00:08:f3:0d:68:fd:8c:d5:69:3e:f8:f2:
                    1d:af:be:f4:1d:d9:55:df:b7:46:73:67:78:ef:90:
                    33:4d:af:de:71:86:80:1e:ff:30:4c:cc:47:76:b1:
                    73:97:52:6e:d4:cb:11:b9:bf:ea:bb:78:cd:4d:e7:
                    f1:c8:05:2f:f7:77:61:5f:40:cf:8b:53:65:7c:8f:
                    96:73:3e:41:33:11:97:74:3a:72:05:c0:36:bd:6e:
                    6e:82:37:fe:83:99:b7:73:90:6c:d5:bd:af:cf:d7:
                    1b:58:d8:22:6a:a5:00:22:ce:3b:92:b3:23:fe:f6:
                    78:c2:86:6e:c7:d4:4d:ae:cc:e8:9e:1d:88:19:f8:
                    2f:39:15:f2:55:e8:84:24:85:57:3a:db:3d:ec:95:
                    13:d4:61:07:ca:94:ef:e2:08:23:76:28:9e:0e:66:
                    18:be:a7:f4:10:e0:05:7f:9c:e4:f8:e1:4c:a0:54:
                    b7:a3:e1:22:0d:d2:ac:d7:1f:e5:6c:7c:ca:fb:71:
                    fb:9a:af:d4:12:8a:8f:13:2d:04:4a:07:36:c6:87:
                    1f:92:b0:e5:8a:3d:3a:88:14:44:10:f6:19:2d:89:
                    df:0e:41:28:b7:fd:f4:a4:76:55:45:3e:cc:8c:02:
                    2e:79:3b:4b:6e:5d:aa:16:12:e7:56:d8:a3:c6:da:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:97:D6:44:89:6A:0A:EA:D0:10:1F:52:68:8E:81:33:FE:4D:4C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/555b4120-14bb-3215-942d-ae5b3387a784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c011:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cb:a5:fd:77:6c:17:03:e9:a1:59:94:39:15:5d:05:c1:0f:
         25:9f:43:d2:67:b8:55:3b:90:c3:9c:9d:a9:ef:f8:09:eb:08:
         1f:44:18:7b:71:48:ea:61:be:c5:3b:14:49:a4:ef:c3:b9:9a:
         80:d8:c5:3d:bd:dd:4c:ae:f4:61:d5:f9:a9:37:e0:c0:d1:cb:
         62:0c:23:e6:69:44:a9:cd:a5:41:80:89:0e:0f:bd:7c:3a:7c:
         09:1e:b6:29:fd:87:21:d0:de:03:66:d8:d4:22:a2:f6:33:e9:
         25:ea:35:83:4d:e2:16:e1:fc:e2:36:4f:d5:4e:12:2f:80:ed:
         a8:9f:87:35:df:8d:54:ea:f5:6c:69:3d:ba:c6:b6:bb:8c:c9:
         f3:4c:72:d3:db:70:d5:1a:f9:9e:83:2a:6c:7a:d0:d5:63:34:
         f7:83:ae:e9:36:f4:a9:aa:17:ac:2c:5a:13:77:a8:11:ea:f3:
         67:c2:f0:54:0e:6a:d7:12:93:e9:8f:04:9e:e4:26:b3:d1:bf:
         0c:83:ef:cc:80:ea:3d:6e:ec:dc:f3:10:a6:61:54:ca:22:5a:
         75:ac:b0:7d:fc:3d:a5:29:68:fe:b6:dd:7b:28:e0:a9:06:92:
         ad:ee:6b:7c:d0:44:84:83:d9:e3:dd:3c:34:39:2d:6a:9a:71:
         bf:f8:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:20:54 2026 by rpki-client