Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b727a0bc-f518-3d7b-8cfe-2af39c647d98.roa
File:                     b727a0bc-f518-3d7b-8cfe-2af39c647d98.roa (raw, json)
Hash identifier:          Un9tJM8Odo1rA/ELZIEdVLpOD5dzM6S939earZruVFQ=
Subject key identifier:   7E:1F:1D:FF:60:A5:92:E7:F9:94:32:4E:E4:DD:5A:31:9C:58:65:57
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F20F7B5AB36B0BA0D4F0A6400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b727a0bc-f518-3d7b-8cfe-2af39c647d98.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:2310::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b5:ab:36:b0:ba:0d:4f:0a:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=4cf8b0fc-3df9-40f0-8e33-95a8088644a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:fe:b0:e7:fe:70:b4:f4:63:6a:83:18:cc:
                    9f:8d:1b:69:70:a7:39:21:6e:35:c2:8e:74:a4:68:
                    64:59:1b:6b:2d:96:03:2c:35:02:b6:a8:18:58:de:
                    58:85:cd:e4:4a:27:30:37:77:51:3d:99:17:8a:42:
                    3b:f8:b8:3e:5e:b0:a6:2d:cd:b5:54:2b:06:1e:80:
                    dd:0e:f1:2a:e7:91:07:77:b7:c7:d5:1b:f4:4c:ba:
                    cf:9e:78:ad:99:39:f2:b0:51:6a:76:34:f6:a1:cd:
                    fb:6a:c5:c4:0f:0a:0d:54:ca:71:77:dd:c2:20:50:
                    54:67:d3:41:92:5f:c5:32:17:4b:99:da:c0:4a:1f:
                    92:67:8d:cb:a5:2d:d2:28:93:f6:7c:15:4d:29:10:
                    95:02:3d:07:1e:04:eb:b2:14:49:62:8d:50:fc:24:
                    51:cc:9d:6d:26:b8:31:a2:e9:d0:d6:4d:cb:ab:51:
                    b1:ba:ae:be:b9:d3:ed:31:7f:18:7d:1b:39:43:28:
                    a7:1b:bb:a7:96:63:bb:b2:f4:55:49:0f:58:9b:2f:
                    f1:9f:e4:21:d1:d5:98:24:07:35:20:cb:cc:1f:34:
                    42:a7:93:f3:a1:07:b9:2b:c7:72:c0:b0:6a:04:1b:
                    49:5a:9f:65:0f:4d:0f:55:56:3c:d9:01:03:7b:44:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1F:1D:FF:60:A5:92:E7:F9:94:32:4E:E4:DD:5A:31:9C:58:65:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b727a0bc-f518-3d7b-8cfe-2af39c647d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:2310::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f9:4f:0f:73:f2:d5:12:9f:f2:6e:29:f3:f6:dc:a3:23:9c:
         74:07:96:d6:36:70:e5:bb:c5:bc:fa:83:77:28:5d:24:7b:82:
         95:6f:1a:fa:c8:61:e0:66:a7:1c:39:c0:3e:6d:7a:89:c7:20:
         f2:79:5d:ad:ea:02:cb:c3:d8:ba:3d:9b:a7:76:a1:20:b8:c5:
         0f:1f:9d:99:04:c2:3a:a6:a3:41:9b:3e:c0:36:fa:58:4c:0e:
         80:3c:da:2a:be:32:08:07:d9:7b:1c:88:32:8c:39:59:aa:1b:
         b8:f2:2e:ee:1e:67:5e:e7:d8:43:2d:15:ce:a8:ce:62:f4:83:
         41:3c:77:b8:e8:93:34:52:9e:35:18:f1:fe:89:c6:02:14:84:
         f2:0a:62:cf:53:ae:6e:0a:0f:dd:ae:f2:12:96:91:37:4a:cb:
         bd:2c:eb:18:7e:6a:b0:8c:24:96:89:b9:c9:39:46:43:a2:dd:
         c0:de:de:1d:0c:44:cb:83:ff:20:a2:cc:20:78:fe:67:24:13:
         7c:a6:e5:79:b1:24:ca:0d:e7:65:e2:db:a3:3f:ee:d9:34:a0:
         1b:00:3f:db:56:47:f5:01:94:a4:7c:b2:ef:ec:32:e1:dd:cf:
         b5:64:98:72:b0:1c:37:0f:5c:75:ed:18:8a:b3:2b:61:17:01:
         dd:2f:96:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:03:34 2026 by rpki-client