Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a31ff1ae-befb-3b74-9c35-1231153f8524.roa
File:                     a31ff1ae-befb-3b74-9c35-1231153f8524.roa (raw, json)
Hash identifier:          0EYnBMIllmwUzGH2hW2j3KIaVw+JCqLmnHFLO+MV1HM=
Subject key identifier:   DA:FE:31:A7:41:7E:BD:A6:73:59:37:95:27:18:8B:84:B4:A1:F4:19
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEC7811635E0AA1BB4B496200
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a31ff1ae-befb-3b74-9c35-1231153f8524.roa
Signing time:             Wed 20 Aug 2025 22:33:27 +0000
ROA not before:           Wed 20 Aug 2025 22:33:27 +0000
ROA not after:            Tue 18 Nov 2025 23:33:27 +0000
asID:                     31898
IP address blocks:        2603:c002:9000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:78:11:63:5e:0a:a1:bb:4b:49:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 20 22:33:27 2025 GMT
            Not After : Nov 18 23:33:27 2025 GMT
        Subject: CN=15d56ef8-db28-4605-9087-f439a1644484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:4b:f9:66:9e:0d:f7:4b:d1:2e:db:d1:60:
                    e2:2d:06:dd:5a:ba:be:d7:ff:b8:fa:7d:70:9d:75:
                    73:8c:c0:bd:6e:15:86:f1:81:ff:6e:2b:e7:88:06:
                    32:79:b4:24:a7:f4:68:16:3f:e4:9b:f5:ee:d0:16:
                    8d:51:2c:d9:41:92:84:c1:54:f5:df:80:d3:95:eb:
                    ab:a1:c4:87:75:9e:85:94:9e:69:4d:63:fa:ff:b3:
                    bf:f1:bc:16:41:e6:49:dc:8e:36:67:22:c0:44:fb:
                    0b:1f:84:2a:cb:90:8a:b2:68:6a:48:e6:08:a3:bf:
                    c8:a8:e4:40:cb:f3:59:c9:a7:51:f5:1b:e3:8b:67:
                    5a:52:9e:15:13:57:b6:98:e5:0b:b6:4c:83:fb:22:
                    b1:2d:49:b5:f6:e7:65:74:41:b8:e5:fa:37:33:0d:
                    70:b0:23:2b:86:a8:21:de:a8:0f:f8:3a:cd:ba:e0:
                    5a:fd:0c:f9:7b:5e:78:b7:fc:ce:c4:65:d2:34:12:
                    ad:58:c8:aa:06:be:de:28:37:6f:43:31:4d:18:5e:
                    a6:9a:ba:d6:33:6b:a9:c8:ad:d9:3c:b7:0e:e0:b6:
                    8d:68:26:c7:a0:d9:c2:cd:fa:3d:65:f7:09:cf:37:
                    aa:02:cc:85:61:3a:a3:a8:2d:56:fc:02:0e:53:71:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FE:31:A7:41:7E:BD:A6:73:59:37:95:27:18:8B:84:B4:A1:F4:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a31ff1ae-befb-3b74-9c35-1231153f8524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:9000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ea:d8:2b:d5:8a:b6:d6:a9:c7:8d:99:4d:92:ab:5b:08:b8:
         ee:8a:13:31:26:da:17:94:52:77:00:dd:f5:66:8b:f1:21:98:
         dc:e1:bd:de:9b:02:ad:10:bd:38:2c:3c:94:f0:a3:e9:ba:ab:
         f4:87:eb:e1:99:39:f8:8d:f5:57:45:20:2d:2f:31:3f:19:5b:
         83:37:c1:3b:a4:74:48:19:34:91:ed:35:3c:e5:02:40:8d:5a:
         ba:f7:f4:6c:17:bf:06:df:16:e0:63:59:ae:fa:9d:3f:f0:d3:
         81:2c:86:bb:20:87:6d:03:4c:6c:c2:aa:18:3d:50:73:a7:0f:
         b7:78:02:ae:36:c8:60:d1:49:1f:62:a0:65:14:c5:1e:1a:f1:
         04:2e:95:24:83:62:66:7c:e8:7a:fd:02:c3:6b:32:65:cd:70:
         73:ee:a2:b0:0d:62:e3:08:46:35:96:13:17:f0:d0:ff:9e:da:
         44:a4:65:69:fe:1d:d0:70:2d:65:f3:9d:7b:23:25:39:a4:50:
         53:1e:df:06:92:18:37:d1:50:8c:b8:10:fb:8e:16:cd:cd:5d:
         04:65:e8:56:f8:79:70:60:bf:9b:5d:39:cb:65:db:4c:04:4e:
         38:6f:79:e5:90:42:8b:7b:09:e3:6a:6d:e1:17:12:f5:01:c4:
         20:9d:23:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:50:14 2025 by rpki-client