Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b48085f4-cff0-380c-af66-157bf3b79567.roa
File:                     b48085f4-cff0-380c-af66-157bf3b79567.roa (raw, json)
Hash identifier:          QVOQbTqxCNwsrFXSleZEE/mzfd5z8zr1EnDiKSdw0mo=
Subject key identifier:   5A:3A:00:D2:FE:B0:63:88:43:6E:17:F0:59:8E:3B:80:CE:DB:5F:27
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF5548CCBF0C93B2FF3A960
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b48085f4-cff0-380c-af66-157bf3b79567.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        2603:c001:400::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:54:8c:cb:f0:c9:3b:2f:f3:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=be5d5b9f-57bf-41d0-bae6-c72454c43b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ca:23:31:27:de:c5:3d:2c:20:4c:23:c9:21:
                    a3:02:6f:47:76:b1:14:72:da:64:78:8e:b1:60:ca:
                    b9:84:5a:a0:24:a4:3a:10:eb:18:e5:1b:da:ca:71:
                    50:ad:f2:bc:d7:26:f0:d7:b7:2f:f4:8e:df:74:e4:
                    31:a1:62:f8:5d:75:d9:80:e3:84:fc:9d:be:ca:7d:
                    e7:49:70:2d:2a:65:bb:9d:45:6d:1b:61:09:33:a1:
                    ea:3a:e6:e1:4d:2b:08:fa:cb:0d:f8:e0:a2:83:d5:
                    71:e2:b6:8c:15:4d:87:41:27:16:74:da:5c:7a:73:
                    0f:5a:89:63:61:1e:53:d9:08:7c:81:9e:6a:9f:07:
                    d2:4e:b1:9b:0d:99:40:56:31:ed:de:1b:a2:f7:74:
                    0f:8e:f1:8a:c2:7c:1e:ed:fb:fd:e9:9e:9e:af:29:
                    6f:b1:9a:82:a8:0f:80:d2:9c:2e:7a:ef:c2:c0:5e:
                    54:4b:74:1d:ee:43:9c:0c:0e:b2:38:f7:43:3a:c0:
                    91:fc:53:5b:3a:20:34:8b:e7:f9:66:1f:17:66:32:
                    3a:fc:f1:60:38:e7:3c:96:e1:57:42:8f:43:22:24:
                    8a:f9:08:b0:45:4c:16:24:af:30:14:a1:02:7f:08:
                    47:61:07:b1:76:22:6d:e7:3f:87:9f:5f:9f:91:7e:
                    67:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3A:00:D2:FE:B0:63:88:43:6E:17:F0:59:8E:3B:80:CE:DB:5F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b48085f4-cff0-380c-af66-157bf3b79567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:400::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:0d:1f:fa:73:26:57:22:db:91:3e:4e:4c:21:4a:01:26:83:
         21:8a:75:38:e6:c2:39:28:b6:aa:62:71:a8:05:c1:30:b7:19:
         54:43:5c:e0:81:b7:e6:c2:b5:6e:dd:03:f6:bc:90:19:cd:91:
         50:f2:0e:f2:09:29:91:97:52:b4:01:92:d4:88:02:65:51:aa:
         ba:88:5c:77:d7:11:2b:63:f9:f3:2c:da:0d:b8:29:63:3f:e3:
         22:2e:07:4a:f2:cf:f5:65:ff:be:67:74:10:f8:3e:c1:f2:bf:
         ae:35:2a:5e:0b:de:7e:f5:a0:9e:39:f0:6a:55:4c:1b:96:f2:
         ef:2d:7c:9d:ab:4c:da:aa:32:94:5e:6e:d1:68:3f:cb:7a:1f:
         01:9e:d8:ff:6c:a7:a8:67:9a:fb:52:8c:a3:52:b5:1b:47:76:
         3b:f0:f9:84:45:cf:77:e6:88:dd:e4:e1:59:be:82:d4:92:8b:
         17:7a:78:55:40:77:a2:16:1d:53:de:63:9c:3a:ca:ad:f8:77:
         7a:4f:05:3b:50:a1:d3:ba:9f:88:ea:1d:5f:83:ce:47:b8:31:
         e9:7e:ef:1d:68:0a:bc:eb:f9:bb:5f:01:0f:d5:95:fd:f7:89:
         8b:e2:4b:7f:f8:4a:2e:28:4b:49:11:e9:ad:87:d2:a3:30:ee:
         16:61:64:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:36:00 2026 by rpki-client