Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/67894585-2aed-3e94-aa56-a31e26509be6.roa
File:                     67894585-2aed-3e94-aa56-a31e26509be6.roa (raw, json)
Hash identifier:          VaER90EUfUD8LS2cjCEMwZPu8vuxryvCfsz4vE0DrO8=
Subject key identifier:   57:68:3B:1C:FA:1E:1A:3A:3A:BB:46:AB:84:31:A4:2D:D3:B7:A9:EE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEE1AF6159764C1E0AA5E7740
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/67894585-2aed-3e94-aa56-a31e26509be6.roa
Signing time:             Thu 21 Aug 2025 12:37:28 +0000
ROA not before:           Thu 21 Aug 2025 12:37:28 +0000
ROA not after:            Wed 19 Nov 2025 13:37:28 +0000
asID:                     31898
IP address blocks:        2603:c000:1700::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:1a:f6:15:97:64:c1:e0:aa:5e:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 21 12:37:28 2025 GMT
            Not After : Nov 19 13:37:28 2025 GMT
        Subject: CN=c98c0d6d-3edf-4c79-81a2-7abd991be502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:fa:a8:be:70:21:25:00:59:0a:72:d6:2f:
                    f1:c7:03:2c:c8:75:e1:08:9f:e0:74:36:c9:29:78:
                    34:04:7e:38:83:3d:1a:00:62:a6:db:a2:d6:cb:48:
                    64:ca:17:6c:9b:54:c8:f2:75:36:20:40:6f:07:b9:
                    22:d8:f9:dc:39:33:8c:7a:9b:04:4c:ca:0d:91:5a:
                    d3:ae:b2:37:37:24:e6:a7:a6:6b:45:2d:91:ec:2c:
                    2d:28:2f:8e:2f:5f:7a:8d:f6:bf:01:40:a5:5d:24:
                    56:96:08:23:b8:b1:46:02:15:49:56:ed:a4:db:d8:
                    bb:71:7f:5f:0b:6e:06:98:46:48:b2:c8:9b:f1:79:
                    90:13:57:75:6e:22:c7:e1:6a:94:0d:f8:2a:78:2f:
                    84:49:cb:a5:03:4f:a2:2e:6f:1b:80:14:d7:7d:c1:
                    3a:63:d7:c5:0c:84:b2:ef:9b:15:3c:99:6f:55:90:
                    1a:1d:f3:b1:f1:09:5c:ba:61:0c:11:a7:29:04:71:
                    59:6d:5c:d2:5f:30:6c:af:3b:8b:31:fa:f7:54:ef:
                    71:43:7b:cd:c6:39:97:f8:72:c6:40:b2:bf:88:ed:
                    48:4c:15:ab:f9:d1:1d:4d:d0:e9:95:cd:04:39:ca:
                    c9:6e:75:ac:26:00:49:d5:94:f5:f6:af:f8:38:57:
                    c5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:68:3B:1C:FA:1E:1A:3A:3A:BB:46:AB:84:31:A4:2D:D3:B7:A9:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/67894585-2aed-3e94-aa56-a31e26509be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:1700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b8:80:1b:cd:88:aa:d4:7c:ce:2e:c7:25:31:80:b3:e1:bd:
         c9:5d:16:d1:21:1c:ec:de:e0:14:87:1d:db:0f:bd:d5:df:fa:
         6e:b5:c1:38:4e:52:8f:2c:46:c3:b8:40:23:db:49:c9:1f:24:
         a3:7d:36:ee:5e:ae:3c:c0:61:dc:a7:fb:20:8f:c8:16:b1:90:
         28:f8:32:23:da:f9:25:ca:e5:f3:96:0f:41:87:74:fd:fd:e0:
         d6:2c:ac:4a:98:c7:b7:13:83:69:cd:ca:29:60:8b:b4:c4:b3:
         cc:a6:ed:af:b0:9a:2d:86:eb:98:5b:24:ab:80:75:d7:34:9f:
         4c:47:82:b8:95:73:05:76:6f:97:3a:7f:69:e4:1b:99:39:8d:
         a1:2b:2a:4b:e5:4c:38:fa:41:24:fa:d5:25:91:eb:55:90:9e:
         a4:89:e9:20:f2:96:39:7c:d5:db:28:53:d0:81:6d:2a:f7:19:
         15:83:42:39:cd:6b:95:b7:57:fa:ef:08:d4:0f:85:b0:b8:49:
         ab:07:56:29:39:80:4d:a0:29:5b:49:f2:82:68:61:7d:80:b9:
         47:d0:aa:3d:4c:c2:0d:2f:45:a5:40:cc:16:8a:68:cf:1e:f4:
         b6:e7:9a:e0:65:da:98:4d:34:c4:b9:bc:af:fa:f6:03:99:fe:
         8a:4a:bb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:56 2025 by rpki-client