Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61c1e80e-3109-3f1f-93f9-4689c6041dbd.roa
File:                     61c1e80e-3109-3f1f-93f9-4689c6041dbd.roa (raw, json)
Hash identifier:          b+JNECi46Bpyz59lhl36Gi3XRCu5sUBfipE0qD+ZmvA=
Subject key identifier:   B8:19:E6:36:48:FB:F9:64:6D:B3:42:11:CA:BF:BE:91:C9:7F:7E:DB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF54A2AE1BE5178F8F21740
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61c1e80e-3109-3f1f-93f9-4689c6041dbd.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        2603:c021:c000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:4a:2a:e1:be:51:78:f8:f2:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=509dcc20-f809-4e72-a1af-c498687151b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:90:b6:5b:9f:3f:8b:c3:f7:e8:9f:ec:a8:02:
                    46:67:76:a3:75:a6:c7:ae:75:63:1f:e2:10:23:1c:
                    56:2b:66:57:d8:6c:b2:e0:b1:dd:80:ef:9c:d5:08:
                    dc:16:c3:7d:a6:97:7a:27:7e:9c:1e:fb:57:87:5b:
                    41:59:a5:4d:8b:52:07:14:63:ed:38:6b:5f:85:2d:
                    a7:44:2a:2d:62:e1:e1:cf:27:a1:e4:f6:b7:f8:b3:
                    62:e9:2f:b8:f5:b6:bd:d8:7a:bc:31:87:01:c1:01:
                    bf:ab:a4:86:41:37:74:0a:b6:40:f6:f7:03:e9:a1:
                    d8:ad:36:9d:19:bb:66:f4:8f:05:c5:9b:90:ec:f1:
                    5e:eb:9d:87:16:9a:60:9c:5b:dd:fb:82:ca:ec:71:
                    71:a8:aa:e8:18:2d:31:01:f2:38:67:ea:6a:c8:86:
                    a7:c5:04:da:0b:b3:b3:96:4e:ef:96:3a:75:c8:17:
                    74:cc:b2:e1:d3:16:62:f0:f4:10:67:3e:26:09:8d:
                    8f:aa:50:a5:46:e6:4a:f5:b0:d2:09:ab:2d:7c:06:
                    40:4c:98:34:bd:42:63:6f:cb:47:bd:4d:f5:03:e4:
                    22:59:bc:ac:17:8c:69:76:6a:27:8a:ea:12:05:80:
                    4b:b3:36:65:2c:df:80:a2:7d:5a:c5:e6:90:15:0c:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:19:E6:36:48:FB:F9:64:6D:B3:42:11:CA:BF:BE:91:C9:7F:7E:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61c1e80e-3109-3f1f-93f9-4689c6041dbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c021:c000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e5:22:03:55:ec:3c:4d:c9:81:11:30:20:4b:9a:d4:7f:7a:
         e3:fe:3f:5c:13:fb:7e:b7:c0:f2:29:30:fa:0b:7c:7b:d0:2b:
         27:c4:da:09:27:ce:a3:b1:7b:c2:7f:c4:68:15:01:0b:d3:b8:
         da:45:dc:26:58:92:6f:40:91:4b:1f:f7:32:ca:73:83:cb:c8:
         20:a7:0a:85:6c:4d:2d:c7:9f:29:7b:8a:4f:68:30:9b:cc:be:
         46:00:bc:f1:4f:e3:24:8b:7b:4d:83:6e:3c:8c:0f:e1:27:ff:
         44:2f:cc:8e:80:cf:53:e5:eb:1b:9f:27:ca:98:9a:60:de:56:
         9b:02:c0:38:82:4f:d1:2f:66:44:65:5f:18:07:4f:aa:39:ac:
         2c:68:35:97:9c:27:ea:8e:55:12:95:c7:02:54:d4:a4:49:32:
         e7:3b:17:35:a9:85:d4:6d:a9:da:ff:58:ab:dc:59:74:16:79:
         d7:6c:18:0d:b5:36:e4:76:a0:3a:76:da:75:c2:ab:bd:c4:18:
         df:25:f2:95:00:76:5b:59:a0:3a:a0:04:76:57:bf:e2:09:ff:
         3b:63:80:d2:96:2a:1c:c6:ca:5f:b4:a6:70:62:f7:6b:c6:85:
         bf:c1:22:46:b6:76:c1:06:b2:e9:a5:34:22:82:d5:5b:e5:3c:
         ba:e7:96:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:26:42 2026 by rpki-client