Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8eca5b72-60e0-30d8-b0be-ca0d9477d1c9.roa
File:                     8eca5b72-60e0-30d8-b0be-ca0d9477d1c9.roa (raw, json)
Hash identifier:          xpVcEZcUiOrgA1YHeBO72CcsKFqkEtk229AjITLOUXM=
Subject key identifier:   07:85:3E:FA:B0:2D:BB:31:6A:C4:5D:AA:7D:44:FC:7F:FD:5C:12:47
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DCC605FA9A74AE3039170F880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8eca5b72-60e0-30d8-b0be-ca0d9477d1c9.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c0bc:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:5f:a9:a7:4a:e3:03:91:70:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=0a7e1c19-670a-49dc-82a9-5383ba0745c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:ca:10:2c:16:93:e9:6c:d0:40:bc:36:51:
                    aa:3d:b0:3e:00:3f:3b:10:21:a2:d7:7a:64:a0:b9:
                    02:49:fc:9c:08:e8:8e:ac:dc:97:97:2f:0b:6a:16:
                    67:c4:1d:be:d3:4b:87:43:1d:83:8b:96:7a:a5:30:
                    86:2d:c7:a4:ff:0b:79:66:ad:c9:f9:74:a2:5d:89:
                    71:bd:a0:f2:d8:8d:6b:18:0f:89:10:5e:d2:84:92:
                    d1:8a:10:81:40:10:e6:29:e1:77:56:f9:21:50:ce:
                    fe:3d:59:57:da:51:2e:15:5b:57:74:29:96:1d:b1:
                    01:29:c0:43:2a:b5:c9:e0:74:5b:0e:53:aa:4e:48:
                    39:1f:77:fa:71:8a:b3:2b:f2:b0:59:26:5f:11:ff:
                    80:02:bc:01:dc:e2:dd:73:da:d2:6d:82:72:52:67:
                    fa:41:23:1f:d2:61:69:37:40:9d:c0:17:60:14:6f:
                    3e:00:5a:97:70:da:82:75:d2:0c:ae:aa:5c:6d:3c:
                    c4:0d:0b:c2:62:4c:98:59:24:24:a2:ab:34:fd:f7:
                    09:be:84:9b:4a:49:a6:8f:c7:2a:cb:0a:94:68:09:
                    45:9b:2e:4b:44:fc:d5:d1:6a:c5:22:da:ca:c2:b1:
                    94:cb:96:3a:6d:22:d7:87:2b:5b:30:c7:c5:fa:86:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:85:3E:FA:B0:2D:BB:31:6A:C4:5D:AA:7D:44:FC:7F:FD:5C:12:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8eca5b72-60e0-30d8-b0be-ca0d9477d1c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0bc:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:0d:d6:e3:c5:02:9d:89:9d:ac:52:d1:8f:93:43:54:76:e7:
         85:06:cc:1e:6a:59:eb:1a:a2:bf:93:17:c7:a1:eb:d7:c4:2f:
         95:ee:ce:16:ad:1f:48:7f:07:24:c3:95:9c:31:55:fc:10:d3:
         7c:97:01:4b:ca:9a:2a:df:2b:1b:15:0d:25:97:d6:14:93:69:
         5f:a1:19:ee:fb:25:d6:5e:43:3e:83:4a:79:d1:11:b1:d6:61:
         cf:f1:dc:00:ac:d5:f5:c8:0d:fd:f8:06:d1:cb:05:ec:a8:3e:
         3f:a2:a3:4b:38:39:b6:d2:e4:77:a7:ac:d8:14:5a:16:65:0a:
         9e:ac:b0:3e:4f:ca:3f:38:c9:a1:aa:03:a4:d7:19:34:b4:b8:
         33:36:9a:f0:8e:59:26:d2:b4:ad:0f:f8:a8:8f:23:8d:12:9c:
         e6:b4:ec:cb:91:3a:5d:70:a2:9d:6f:03:3c:1a:cb:7e:81:bc:
         42:eb:58:78:81:d2:6e:e4:d7:2a:87:8f:20:0f:6c:48:54:42:
         a7:8c:ee:70:c7:dc:f5:c9:7d:d5:e5:52:a5:66:66:95:88:a6:
         69:91:83:81:da:d4:4f:8b:46:e0:ac:17:2d:31:b6:24:7a:2a:
         8d:ad:b6:4f:07:b8:01:84:de:9e:fa:56:0d:86:45:94:63:f1:
         f7:9a:0c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:45:12 2026 by rpki-client