Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e3841b4-a0c8-32de-9716-518415329152.roa
File:                     8e3841b4-a0c8-32de-9716-518415329152.roa (raw, json)
Hash identifier:          CHIVKqYmsThJdBX73a26dTPlEFW2YZmK/PIbyJsNS/o=
Subject key identifier:   83:E6:87:F1:30:03:C4:FC:96:5E:89:AE:15:6C:73:C1:80:4F:63:C4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEEA082A6134538D5D2621280
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e3841b4-a0c8-32de-9716-518415329152.roa
Signing time:             Thu 21 Aug 2025 17:06:33 +0000
ROA not before:           Thu 21 Aug 2025 17:06:33 +0000
ROA not after:            Wed 19 Nov 2025 18:06:33 +0000
asID:                     31898
IP address blocks:        2603:c002:8400::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:a0:82:a6:13:45:38:d5:d2:62:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 21 17:06:33 2025 GMT
            Not After : Nov 19 18:06:33 2025 GMT
        Subject: CN=91df326e-2899-4503-bbee-4d9a097f4446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:59:c3:e6:cf:4b:86:6f:e2:6a:42:d9:96:
                    db:bb:ef:76:22:16:13:f7:2c:67:82:3a:3c:4a:01:
                    1f:18:4e:16:73:c8:b1:70:52:29:fc:30:76:72:1f:
                    8f:dc:e5:22:c3:1d:14:3d:89:43:fa:3f:b3:cb:29:
                    5e:1f:22:c7:34:b8:ff:1c:7b:3b:01:03:a9:98:7f:
                    84:48:b5:f3:90:47:da:17:47:c5:ad:06:6e:85:7a:
                    ea:75:27:2e:28:fc:bf:2d:35:1f:74:3a:5b:d7:5c:
                    79:b0:af:77:2e:f7:41:06:32:12:9a:31:ec:08:ac:
                    f1:20:e4:b6:06:97:a1:3f:b1:a2:7d:50:73:b7:0b:
                    0b:8b:ca:17:4f:dc:93:4d:41:56:98:e8:b4:07:17:
                    a0:9a:c4:cd:4b:78:2e:b1:4f:33:b7:d9:96:d5:62:
                    07:dc:1e:38:9e:3a:c5:82:f6:f9:4e:f2:42:b2:fe:
                    e9:2f:70:b0:07:02:55:47:52:37:ef:d0:eb:73:b0:
                    5f:a8:d4:fb:d4:ad:ee:a6:3e:d4:c6:59:ff:f1:62:
                    d9:b8:06:fe:99:24:11:17:b1:aa:58:20:9e:c1:aa:
                    ea:c9:f7:3f:56:a0:98:3c:82:6c:d6:5b:09:93:6c:
                    37:69:15:ca:44:92:7d:6b:cf:6b:16:74:6e:78:26:
                    35:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E6:87:F1:30:03:C4:FC:96:5E:89:AE:15:6C:73:C1:80:4F:63:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e3841b4-a0c8-32de-9716-518415329152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:8400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:73:72:05:2e:20:34:71:02:40:0d:ca:39:a1:df:7e:fa:07:
         5b:e6:71:d1:e4:d5:fa:61:fa:be:dc:02:86:77:3b:dc:5c:0d:
         18:3d:fe:31:86:a9:d7:b4:02:fa:07:f9:a5:2e:f9:4c:83:70:
         20:69:95:22:8d:31:f4:fc:47:42:6c:3c:d8:59:f7:cd:1e:7a:
         7d:91:ff:14:64:3a:50:7b:27:c8:33:4c:ab:4b:56:bd:bd:e6:
         cb:81:95:37:4b:aa:a2:57:a3:78:df:71:96:ce:7f:39:7f:b2:
         d9:51:b2:71:e8:14:50:c3:4c:55:24:36:d4:91:88:4f:4f:20:
         ad:3c:e9:fd:d1:7e:b0:d6:fb:1a:4f:91:90:3f:93:20:a6:3c:
         a2:e5:cc:f5:63:4f:3c:59:60:d8:8b:43:89:8a:9a:03:ab:b9:
         07:30:e1:14:19:e5:7a:af:a2:a6:b1:70:32:80:71:55:43:6e:
         46:7e:af:a7:96:43:cb:dd:f7:ef:38:7e:30:14:38:85:31:f5:
         8a:72:e2:9a:82:ca:82:76:d6:7e:06:81:f3:c2:36:c5:64:c7:
         39:80:fb:f4:6b:31:e4:73:4d:a2:cc:13:e9:4d:38:38:27:63:
         0f:5b:c5:7e:f7:40:b2:54:ed:90:b5:93:84:cd:8c:81:19:7b:
         09:9d:a9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:25 2025 by rpki-client