Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa2c4e61-4522-324e-acca-2dbd1108ecbb.roa
File:                     aa2c4e61-4522-324e-acca-2dbd1108ecbb.roa (raw, json)
Hash identifier:          Xte/iRgJwrPUWuYhNhhoe52mot/ZT4fcqnijsZFxX8U=
Subject key identifier:   4C:0F:36:B5:3C:42:B6:D2:24:5F:4A:7A:BD:14:1E:BD:D0:19:70:86
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DC995A26462B4605BABC0B400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa2c4e61-4522-324e-acca-2dbd1108ecbb.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c048:2900::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:a2:64:62:b4:60:5b:ab:c0:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=006f0fd3-4002-482b-971a-579c37b66d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6c:9b:8e:fc:81:1d:e0:80:cb:ee:d1:75:ea:
                    6d:1b:b5:91:a0:f0:8c:b5:c8:da:8a:0a:8f:cc:96:
                    6b:81:73:1e:a2:65:e9:4a:13:3d:8b:fd:24:a3:2c:
                    20:ef:1e:1f:a4:7a:e5:fa:f8:32:27:20:a0:d4:80:
                    6c:47:00:4c:03:4e:fa:a6:b2:f5:f6:13:bb:3b:ac:
                    6a:64:7e:de:bd:5a:0d:4c:1d:5f:a0:f2:9d:a8:26:
                    2d:e9:3b:cd:20:98:85:bb:89:15:2f:70:3e:35:89:
                    39:9c:0b:0e:c4:3c:fc:b6:9f:d9:11:56:f1:e7:02:
                    d5:76:73:1b:54:65:dd:2b:fe:49:09:e5:f3:af:09:
                    0b:98:ed:26:cb:b0:cd:ee:c5:ec:67:48:4c:68:3e:
                    30:f3:8b:78:14:13:be:89:27:01:a2:fc:70:72:ae:
                    25:e3:bb:67:05:d8:19:67:72:3b:f9:21:7f:8b:91:
                    00:07:ae:af:15:59:42:9e:7a:d9:f0:e1:ee:6f:5c:
                    8a:e7:c6:ea:38:78:fc:46:a7:be:dc:2a:89:8e:82:
                    f8:cc:e5:1e:98:1b:0a:ab:b1:a1:b6:5c:58:ac:e6:
                    23:ae:c9:8d:75:70:9e:2d:9b:2f:38:2c:5e:1d:ea:
                    9d:cf:ab:76:d0:44:c1:64:7b:9c:6b:37:1d:50:02:
                    92:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0F:36:B5:3C:42:B6:D2:24:5F:4A:7A:BD:14:1E:BD:D0:19:70:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa2c4e61-4522-324e-acca-2dbd1108ecbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c048:2900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ec:2a:25:81:df:aa:86:7f:12:67:8f:0b:1e:b6:57:e1:ff:
         e8:cc:fa:15:63:6d:49:dd:92:35:f1:69:12:1a:14:3b:b1:46:
         fa:79:7a:06:dc:ad:b5:b8:a5:cc:be:23:ec:02:e1:2b:fb:04:
         44:e9:bc:02:54:28:c3:9e:31:a1:18:9a:74:66:0e:df:5c:a9:
         80:aa:c9:f7:2b:ee:7a:a4:52:18:35:31:38:ce:e1:f4:17:d5:
         25:d1:2e:fa:a0:51:83:ae:57:62:5b:c7:5f:d0:ad:2c:5c:39:
         16:47:f8:1f:b5:d0:cd:03:2f:eb:41:ea:03:80:9e:66:36:1c:
         57:f9:e8:83:04:20:bb:85:b0:e8:dd:46:03:7c:9e:3e:56:22:
         b0:45:76:3a:74:61:71:de:c8:cc:3f:f8:98:1d:a6:2e:87:db:
         8b:de:95:33:be:1d:41:03:40:f5:49:93:81:be:eb:9c:1e:00:
         5c:4e:fa:4a:32:2a:c1:48:df:14:bf:24:27:8d:b7:5e:77:3b:
         d3:c2:ca:48:f1:ba:a7:7e:28:9f:c5:2a:8a:84:ed:dc:3e:a9:
         e0:73:a9:b0:2d:68:cb:dd:48:53:99:73:a0:cc:62:d4:89:33:
         a5:99:e1:49:34:34:74:74:dc:b1:5d:b9:b5:a4:2f:b4:80:47:
         b8:63:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:39 2026 by rpki-client