Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a379460c-7046-3a2b-9b7a-ea9c83047f58.roa
File:                     a379460c-7046-3a2b-9b7a-ea9c83047f58.roa (raw, json)
Hash identifier:          95V2k0QSRVts3F2qbvLIGuJh4JAqJ8HALryVCuCXEqY=
Subject key identifier:   69:6D:7C:1C:46:E0:5B:BB:6A:36:64:78:86:10:75:C7:4A:58:42:E6
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AF0161D4C3AF9C2628D199100
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a379460c-7046-3a2b-9b7a-ea9c83047f58.roa
Signing time:             Fri 22 Aug 2025 05:39:19 +0000
ROA not before:           Fri 22 Aug 2025 05:39:19 +0000
ROA not after:            Thu 20 Nov 2025 06:39:19 +0000
asID:                     31898
IP address blocks:        2603:c001::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:16:1d:4c:3a:f9:c2:62:8d:19:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 22 05:39:19 2025 GMT
            Not After : Nov 20 06:39:19 2025 GMT
        Subject: CN=b08bf1cb-b9ec-478e-ad5a-8e0b1a9fbace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:35:4c:c2:cb:8b:e1:b2:e9:8b:ef:46:46:91:
                    67:2b:3b:5f:fd:d7:4b:a9:c1:0a:3a:7f:4b:dd:a6:
                    28:e1:03:b4:6d:62:e1:70:31:17:a5:2e:2e:39:20:
                    15:bf:92:48:dd:da:a4:36:0e:ad:4b:43:09:61:27:
                    2c:ba:4b:19:87:01:74:91:ae:ea:b7:51:80:61:29:
                    4b:40:d3:5e:85:86:c9:0d:31:86:ff:50:a7:da:dc:
                    08:ee:86:76:94:6d:66:4f:5f:01:9d:6f:fe:ce:3e:
                    e7:45:8b:14:72:11:a0:98:b1:43:43:fc:ab:7e:64:
                    9d:18:4f:45:18:11:13:6c:f4:79:37:6f:e6:e6:1d:
                    1f:e4:ae:79:e7:cd:94:5d:b3:3c:1f:f7:cf:1c:f0:
                    be:32:8b:89:7f:ec:9c:a1:47:20:e8:85:21:a9:bb:
                    33:8a:aa:d9:5b:b6:f7:7e:d9:0a:3c:08:9b:31:c7:
                    2b:cc:a2:b0:ad:81:8e:01:9d:c5:70:b3:46:1f:fd:
                    19:b6:88:b6:c9:ab:88:3c:03:ed:f5:30:42:23:27:
                    fc:ca:29:d6:69:d7:4b:4b:6e:99:de:a4:52:97:79:
                    2d:1e:1a:7b:dc:b4:8e:c8:94:2b:69:22:6c:de:d6:
                    09:50:83:d9:ff:91:61:12:56:78:a9:33:53:d4:a6:
                    03:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6D:7C:1C:46:E0:5B:BB:6A:36:64:78:86:10:75:C7:4A:58:42:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a379460c-7046-3a2b-9b7a-ea9c83047f58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:cf:3d:81:6a:ce:45:d2:2b:2b:dd:d2:c0:8a:1c:aa:51:cb:
         28:60:a2:50:93:ff:71:bf:ed:44:6c:e9:c6:79:04:e9:b7:ca:
         aa:fa:d6:c9:f2:e5:30:45:e3:05:47:f7:c8:08:4d:62:f8:16:
         50:98:c5:51:b1:1f:8c:cd:ea:a6:0f:26:b8:dd:53:30:07:2c:
         f4:65:c1:6f:72:f0:13:0a:15:16:8e:7b:15:9f:76:73:53:b0:
         e8:b4:cd:ae:16:57:87:4f:ad:44:fc:ee:36:3f:01:72:70:3d:
         e1:40:95:d3:46:c4:d9:a2:db:bb:fe:f7:50:19:77:31:ce:6b:
         97:3e:a7:ed:33:53:85:f9:4d:5d:5c:cd:84:fd:fd:01:85:c8:
         e9:56:40:d0:1f:d7:72:04:76:08:24:e6:2b:49:cc:8b:f2:46:
         a3:ee:2f:cd:a9:d7:ea:8e:c1:c1:d2:44:b2:40:6e:11:8f:8b:
         e0:47:02:08:67:96:33:7f:87:92:f1:d2:d1:5d:42:e7:e4:83:
         01:56:0e:9b:29:46:5d:8b:a4:53:51:e0:1f:67:38:d3:1d:6b:
         af:cc:06:ca:0a:b9:39:d8:eb:26:5c:61:21:f5:f0:78:b6:90:
         f5:d4:13:7e:27:7b:97:d4:84:9f:81:2d:95:33:97:7f:cd:3f:
         b4:73:a5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:33 2025 by rpki-client