Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63f264c2-300c-3000-ac29-3b5465c40845.roa
File:                     63f264c2-300c-3000-ac29-3b5465c40845.roa (raw, json)
Hash identifier:          qIO5FME6IZ50Ku+VXvtKR4Tk4K9plIA0IArchgQxFWE=
Subject key identifier:   22:37:B5:1C:9C:D6:42:3B:5B:6B:CF:58:93:13:93:3B:D1:C9:5A:34
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D9A20060CA666998108F7803A
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63f264c2-300c-3000-ac29-3b5465c40845.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     31898
IP address blocks:        2603:c014:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:06:0c:a6:66:99:81:08:f7:80:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=cfc62c25-41f4-468d-8138-bc667cfedae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6c:fc:0c:e1:23:99:85:16:b2:ca:a1:4a:3c:
                    12:6b:61:05:0e:1b:1b:73:bb:21:85:b6:8b:50:42:
                    ed:2b:98:ab:f5:61:e1:e4:df:ad:1a:6b:9b:a6:00:
                    bb:10:33:86:10:a5:90:eb:d5:eb:6f:16:b8:e4:58:
                    e3:27:bd:b8:21:00:92:dc:57:c7:2b:04:54:61:af:
                    f9:db:03:09:84:f3:16:c1:12:1d:a5:19:97:0f:28:
                    24:30:c0:da:92:49:76:d1:2d:20:fc:20:bb:ed:e2:
                    e9:24:e4:2d:25:38:cf:c5:ca:75:6c:4f:4c:8b:e5:
                    9c:fe:80:9e:7c:5d:c3:09:6e:3d:3d:9c:26:da:2f:
                    c8:6f:1d:d7:dc:20:ae:d2:c0:9d:71:d0:00:42:eb:
                    24:03:f3:5f:77:81:bd:56:40:4c:61:a2:45:97:b7:
                    28:e6:24:4f:e0:ba:73:a2:19:b3:a3:fb:7b:4b:5c:
                    46:0d:49:53:6d:9d:8a:d4:ce:c9:f7:ad:bd:3f:2e:
                    2c:0f:42:d5:db:de:cb:8b:94:7c:d6:0c:d4:9e:d1:
                    38:3c:a9:1e:e0:e2:21:08:30:02:5d:fd:7b:d4:d9:
                    92:8e:8b:28:18:b4:77:33:a6:2d:86:a0:5d:08:bd:
                    8e:fa:bd:38:dd:14:e4:47:64:0b:08:67:ef:64:ee:
                    d4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:37:B5:1C:9C:D6:42:3B:5B:6B:CF:58:93:13:93:3B:D1:C9:5A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63f264c2-300c-3000-ac29-3b5465c40845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c014:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:67:4c:84:40:f6:7d:e5:27:6d:43:a4:66:e4:81:d0:dc:9c:
         52:09:91:0f:72:2a:11:bf:c5:78:9e:9f:3f:3d:87:84:40:1f:
         2f:46:2c:b7:41:3d:37:b9:aa:1f:dd:51:04:35:42:a0:a1:45:
         ab:c6:a3:4d:5e:bf:e8:de:75:61:2c:b3:de:69:57:2d:1d:a4:
         24:57:79:e1:15:8e:e8:d1:63:8d:4f:69:23:9c:57:a7:69:d9:
         91:5e:ef:b9:d6:23:49:08:39:81:83:ae:4d:d3:75:e5:44:a8:
         43:89:09:94:b0:18:2f:fc:25:56:1c:f8:37:93:21:91:27:b1:
         a6:3e:b9:87:56:74:2a:f3:78:60:2f:66:f5:26:34:55:16:1b:
         5c:0a:e9:b3:5e:03:80:a7:b2:b7:8a:1a:6e:1f:f0:93:93:ee:
         77:d8:ae:19:71:96:a6:69:e4:5f:8d:2d:3a:3e:84:90:6b:1e:
         9b:e5:aa:1f:3b:e8:08:22:67:ca:6b:b4:2a:83:7d:ce:37:79:
         f5:26:90:72:04:64:2a:f1:3f:09:f6:1b:e2:05:c9:86:52:86:
         38:43:38:53:7b:93:57:50:84:ae:07:9c:19:91:dd:95:a9:6b:
         0a:72:a5:b2:6c:6a:05:ef:e1:f7:20:ad:b9:1f:93:80:67:d6:
         68:83:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:32:56 2026 by rpki-client