Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/792995f9-3b45-3665-a741-d0029a194c7f.roa
File:                     792995f9-3b45-3665-a741-d0029a194c7f.roa (raw, json)
Hash identifier:          7EsUZFubMudPU6Hj89QluW/a+V40JAK4WhsR9YJw2JI=
Subject key identifier:   F4:D9:6B:23:F8:F0:2D:4A:94:4B:2A:C2:1E:12:9C:60:B6:25:B5:B1
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEC91B5B257B2B3A4289A2580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/792995f9-3b45-3665-a741-d0029a194c7f.roa
Signing time:             Wed 20 Aug 2025 23:25:07 +0000
ROA not before:           Wed 20 Aug 2025 23:25:07 +0000
ROA not after:            Wed 19 Nov 2025 00:25:07 +0000
asID:                     31898
IP address blocks:        2603:c02f:8000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:91:b5:b2:57:b2:b3:a4:28:9a:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 20 23:25:07 2025 GMT
            Not After : Nov 19 00:25:07 2025 GMT
        Subject: CN=770cb005-b16e-4cab-abd5-56987781aed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:d5:98:09:b1:da:ef:25:18:50:53:9c:c1:
                    5e:c8:28:de:2f:fa:b3:0b:ba:68:d9:c7:ab:1d:8f:
                    ff:23:8d:75:c1:98:01:a6:ee:22:32:88:3d:2a:bd:
                    6a:ce:e5:97:09:e6:3a:97:e2:c7:c2:66:61:cf:95:
                    1d:4a:74:a7:30:d3:15:f1:d8:d0:a2:75:08:6b:fc:
                    e6:28:10:dd:56:1b:2a:81:5b:a5:43:c8:00:36:4a:
                    18:53:18:33:23:b2:93:65:07:34:ab:eb:cf:0d:04:
                    1f:40:1f:05:0c:48:f5:28:73:29:46:fa:ab:fe:74:
                    f0:b7:b0:fb:18:35:ee:54:63:17:94:bf:37:8d:02:
                    c1:59:aa:fb:dc:15:d5:63:10:6d:95:fa:28:20:a4:
                    55:c0:22:16:3a:3e:65:25:11:56:83:8b:cf:27:df:
                    76:82:ac:78:8f:3b:a4:6f:55:d8:75:e9:05:59:1c:
                    a0:81:75:89:26:fb:6f:61:e4:b3:ea:36:3e:aa:d2:
                    75:74:24:a2:d5:d9:27:d8:17:ee:2b:f2:f8:6d:f3:
                    1c:8e:b7:fa:13:c5:ba:57:ba:ac:40:3c:8a:2a:18:
                    24:2e:c7:97:da:44:7a:58:51:bc:5b:33:43:90:fa:
                    05:7c:a3:7c:4b:4a:ae:bb:c2:57:d0:ff:98:62:58:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D9:6B:23:F8:F0:2D:4A:94:4B:2A:C2:1E:12:9C:60:B6:25:B5:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/792995f9-3b45-3665-a741-d0029a194c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c02f:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a5:c7:2d:9c:1c:3a:a2:91:83:e5:81:b9:dd:b6:47:99:38:
         f9:c8:3b:a7:d2:50:13:66:7d:a1:3d:74:72:2f:08:38:fb:ab:
         a2:be:e4:9a:1e:e2:c8:41:7f:79:e0:03:c5:db:25:85:94:c3:
         81:c6:5e:b3:c1:4c:6d:a0:d4:21:7f:9b:9a:9b:46:43:cb:f9:
         4e:91:80:7c:40:7a:80:dc:33:b7:df:ac:28:1c:bd:2b:51:8e:
         7f:5b:d4:c7:bc:54:1d:84:42:a7:d7:49:75:d5:9a:b4:7a:74:
         0a:f0:85:a1:f8:ec:3d:94:ce:0f:64:d6:85:8b:63:48:b5:ad:
         e6:9e:52:09:12:0d:eb:d8:6a:69:f9:9c:60:66:fc:99:72:c5:
         57:12:8e:05:01:24:ba:a4:27:c8:c7:30:49:48:e6:f1:1d:d4:
         18:1e:d3:1d:f0:a3:93:ac:9c:cc:dc:12:9f:ff:1e:d5:d0:0b:
         cb:df:65:08:69:ad:90:81:ac:3e:c7:d1:88:eb:de:a7:9f:5b:
         25:2c:08:e9:a3:f1:fe:aa:6b:e2:29:8f:45:a2:09:f6:10:f2:
         c9:43:9a:fd:ba:6a:24:94:c5:44:ee:fa:60:2a:cc:61:3d:cf:
         db:48:21:88:02:54:89:40:20:32:8a:c8:f8:08:6c:09:3a:7e:
         6a:2d:ae:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:06 2025 by rpki-client