Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b6fd459c-6aef-3d67-8f6a-90902133fb68.roa
File:                     b6fd459c-6aef-3d67-8f6a-90902133fb68.roa (raw, json)
Hash identifier:          v3TMLeSzQMdMoj+CTIPNGd9eRA1gRScvUzVHmnicwFs=
Subject key identifier:   99:C4:A4:D2:71:A0:CD:B2:79:BD:38:0D:E9:91:DB:7F:B4:33:E2:52
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8D8FFEF351112D2F5333C380
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b6fd459c-6aef-3d67-8f6a-90902133fb68.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     31898
IP address blocks:        2603:c01a:a000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:fe:f3:51:11:2d:2f:53:33:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=1e431ade-b12a-4c34-8c07-4284f6cf0cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:01:5b:95:77:24:53:54:0f:60:27:48:b5:
                    92:a9:6e:b3:f5:e4:0c:ec:a4:6c:09:97:dc:23:bb:
                    12:77:66:0d:73:5b:53:95:3e:b8:a0:61:54:ee:ed:
                    92:e9:2e:89:db:16:27:70:2e:52:22:1f:25:39:d8:
                    6d:6e:be:4b:35:37:9a:b3:3f:d1:ac:bf:fa:b9:fd:
                    ef:1c:d1:70:13:d3:b9:e9:2b:99:8b:1f:89:2b:54:
                    72:98:f3:39:9e:85:fe:e1:0c:e5:cd:fc:3c:e1:2e:
                    e9:d7:41:72:57:3d:fb:9a:9a:49:35:17:21:6b:24:
                    76:b4:85:db:0f:14:a0:dc:48:6d:e8:ee:c7:3d:eb:
                    11:77:36:34:df:32:0e:f4:11:5d:16:18:e6:33:c9:
                    3f:5d:73:35:1e:8c:0e:d4:5c:67:e0:c2:40:4b:be:
                    de:50:7d:be:8f:b5:3d:d5:4c:0c:be:8a:e2:34:fe:
                    ed:8d:c4:bc:d9:d3:63:59:3c:64:4d:bf:d2:c4:d4:
                    bf:8e:19:38:80:fb:4e:e8:d4:fa:80:cb:7c:84:b9:
                    f5:07:e3:83:6f:e0:dd:c0:fd:43:af:a9:a8:d0:8e:
                    f2:8c:18:4d:a2:85:91:ec:72:7b:89:98:72:5a:ae:
                    53:5d:2e:76:f1:d0:79:26:b2:f1:b0:38:85:06:c2:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C4:A4:D2:71:A0:CD:B2:79:BD:38:0D:E9:91:DB:7F:B4:33:E2:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b6fd459c-6aef-3d67-8f6a-90902133fb68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c01a:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c3:84:24:b3:0b:20:c1:23:cd:3f:11:3a:44:5e:dd:23:c4:
         41:c9:23:a8:d5:62:24:02:02:83:67:d5:fc:a9:2f:cb:13:57:
         ca:57:e2:8c:55:b5:38:1a:fb:bd:12:a9:e9:04:d4:b3:2b:ea:
         01:b7:a0:69:94:61:80:ef:19:77:ab:d6:01:b2:45:0a:57:97:
         94:a6:50:19:ed:87:a9:53:b0:30:f8:38:c6:89:b1:42:75:d2:
         24:4c:4f:be:0a:6a:88:75:3c:93:9b:30:3a:9e:b1:73:8b:5f:
         02:06:15:f2:94:7a:a4:cc:3c:1c:0b:1e:8a:05:da:0b:b0:7c:
         26:50:29:3c:42:02:a9:17:ce:1b:39:87:1b:ca:ba:de:32:ba:
         74:ae:95:1e:88:73:fd:d0:41:4e:11:87:37:3a:c7:dc:c3:31:
         5c:87:ab:a6:62:34:88:e2:81:b1:9c:39:09:e0:3a:7f:a8:cb:
         f5:2e:d3:73:22:29:6d:36:3e:7c:b3:b7:0f:64:46:5d:72:12:
         1d:12:0e:5f:c2:89:22:60:29:b4:c8:66:aa:21:b7:f5:7e:c6:
         73:40:e6:fe:99:97:7a:5f:ad:85:0c:18:2e:36:2d:72:a6:90:
         05:ce:9f:84:c2:ff:8a:ab:05:78:00:55:f4:d2:f5:d8:b4:88:
         11:de:4e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:28:19 2026 by rpki-client