Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/56741f49-7858-3177-a2b1-746ff634ef4a.roa
File:                     56741f49-7858-3177-a2b1-746ff634ef4a.roa (raw, json)
Hash identifier:          rutgPZXHgjhZ50NuCqELZixbI4kPaC/Tks1A5gIWAaM=
Subject key identifier:   A6:8C:7A:2E:8A:34:92:E6:AD:9C:84:E5:9C:06:14:2C:E3:65:25:D5
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEDDB9D7BEFCD442E30B64480
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/56741f49-7858-3177-a2b1-746ff634ef4a.roa
Signing time:             Thu 21 Aug 2025 10:29:50 +0000
ROA not before:           Thu 21 Aug 2025 10:29:50 +0000
ROA not after:            Wed 19 Nov 2025 11:29:50 +0000
asID:                     31898
IP address blocks:        2603:c010:e000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ed:db:9d:7b:ef:cd:44:2e:30:b6:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 21 10:29:50 2025 GMT
            Not After : Nov 19 11:29:50 2025 GMT
        Subject: CN=e0e6b3e7-035d-4a58-90c4-f31ab6133d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f8:a2:c1:97:50:95:fd:fa:89:0c:a0:68:4a:
                    3c:c1:7c:2f:f8:57:20:8b:f9:a9:06:91:f4:ac:b4:
                    10:6b:8e:dd:6e:da:4e:61:aa:c2:8d:5b:ce:2d:12:
                    3a:4f:79:82:72:15:41:64:63:7a:ba:da:7c:94:d5:
                    08:f3:30:60:bc:81:1c:89:bc:1f:c1:78:f5:8e:d1:
                    62:b4:ce:10:20:83:fb:4c:04:72:5c:49:4f:d8:f3:
                    99:87:7d:80:87:e3:d5:48:0a:fd:05:46:ed:d8:2b:
                    81:95:e8:5a:ef:eb:72:62:f8:65:93:e9:83:1e:ef:
                    36:da:0c:14:5d:26:2c:43:87:94:b1:7b:a9:0b:fc:
                    bf:99:4a:f4:28:aa:81:43:05:73:52:2c:6f:e3:33:
                    f2:bb:a9:67:7d:3a:10:4e:f2:c5:f3:a8:a5:ee:7b:
                    c5:94:e4:55:3f:14:4f:81:72:2b:c2:26:bb:82:fc:
                    d8:64:d6:b0:e7:2a:17:23:52:9c:23:4e:6b:ed:05:
                    6c:80:8d:92:a9:f9:e4:1c:ec:15:c0:31:0a:3f:70:
                    ed:69:60:af:31:ed:1b:2a:66:83:76:ad:81:27:e6:
                    22:4c:cb:61:c9:6f:46:a1:41:10:af:89:a8:bf:60:
                    83:37:d2:31:16:6d:87:4d:15:f9:5e:13:f8:97:f0:
                    4e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8C:7A:2E:8A:34:92:E6:AD:9C:84:E5:9C:06:14:2C:E3:65:25:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/56741f49-7858-3177-a2b1-746ff634ef4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c010:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f5:bf:1f:58:84:29:f2:19:23:f1:a7:e2:e3:10:b5:b2:71:
         6e:62:50:1a:20:0f:49:c1:d7:12:75:f8:2e:9d:8f:9c:b4:16:
         2d:ab:5c:30:36:24:6b:0b:22:be:e0:c4:85:4f:b6:ff:6a:c8:
         4b:b5:57:f5:34:23:ce:4e:96:d7:31:5d:38:9e:91:a7:82:1a:
         70:8a:0e:8d:22:49:ba:65:09:0c:5f:e1:44:f9:5c:f2:b8:25:
         c3:11:78:ec:ad:9d:eb:d2:c4:8e:7c:92:8b:85:d9:a5:07:49:
         db:3b:f7:40:66:d6:23:71:ff:09:c5:0a:d5:cc:68:a4:5a:63:
         cf:65:7f:34:db:8f:1a:27:a9:33:0a:27:05:ff:52:ad:cf:24:
         27:89:8e:f3:f3:68:b2:df:7b:c3:58:37:2b:08:5b:28:c2:3d:
         af:8c:5c:47:5c:07:f4:91:4e:59:7b:14:46:da:95:fa:2d:fd:
         61:49:ba:8c:50:c6:93:b9:b7:d7:b3:ac:9c:58:77:3e:4d:14:
         ea:87:84:ca:c0:fe:26:5f:3f:d1:46:6d:56:fa:a8:24:0a:85:
         12:92:01:b1:b4:27:c0:2b:bc:af:f2:a6:fd:7c:83:16:0b:5e:
         38:fa:fb:23:72:26:95:1e:71:7d:ec:91:27:65:34:2a:cb:5b:
         17:6b:67:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:16 2025 by rpki-client