Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfc81a38-e383-3c07-826a-f8aa9dd3d698.roa
File:                     bfc81a38-e383-3c07-826a-f8aa9dd3d698.roa (raw, json)
Hash identifier:          XG36lZAseZD+YSjXPA/QMQiyI74RSjFGySl+h6M/k30=
Subject key identifier:   7E:DB:46:28:7A:94:33:16:59:46:64:08:7E:46:A9:82:9C:64:19:BE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8D8FECA338A903AD021B2180
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfc81a38-e383-3c07-826a-f8aa9dd3d698.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     31898
IP address blocks:        2603:c002:9600::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:ec:a3:38:a9:03:ad:02:1b:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=4bf3149f-0ae1-4769-b25e-a66bdf81337f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:75:85:24:4a:eb:74:e3:7f:59:15:d0:91:
                    7c:42:77:bd:50:da:24:ef:58:c7:15:97:2a:8c:90:
                    58:8e:03:f6:d3:bc:12:a3:1f:a7:a9:a1:7d:59:32:
                    8a:27:22:96:0c:8c:e5:eb:84:f8:7d:ba:0e:7e:27:
                    27:87:e1:28:4d:60:34:5c:1e:2b:fc:84:83:06:47:
                    aa:17:48:1e:94:c5:a9:c2:60:ae:57:6f:ab:aa:b2:
                    27:61:33:58:7a:84:ce:46:a1:0b:6b:b2:b8:c1:e3:
                    3d:df:d6:67:3a:24:d2:b0:e3:3a:56:50:b8:8e:93:
                    0c:4b:00:44:bf:87:36:4c:2c:7b:de:3f:26:0f:89:
                    3b:77:c0:a2:16:77:e6:32:24:6d:96:87:f6:bd:a2:
                    42:99:3e:16:a6:f5:39:89:bf:4b:e1:5f:47:a4:03:
                    7a:57:b6:d9:3d:f3:df:17:89:c5:58:c2:c9:0f:3a:
                    0a:3f:a3:d8:b3:a0:5c:36:de:35:ae:c2:8a:6e:32:
                    a4:50:a8:c2:15:85:2b:e4:9e:61:d0:ac:63:53:db:
                    19:3e:3c:75:34:ac:60:84:76:04:fb:a1:a2:75:ae:
                    15:f1:22:35:e1:2e:b3:2d:a8:7a:30:50:9c:34:aa:
                    4b:95:ff:e4:6e:35:13:65:e8:74:64:95:f1:3b:a1:
                    c0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DB:46:28:7A:94:33:16:59:46:64:08:7E:46:A9:82:9C:64:19:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfc81a38-e383-3c07-826a-f8aa9dd3d698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:9600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1b:be:a4:ff:b2:65:1f:c8:94:7d:9c:e1:53:9b:21:fc:31:
         4a:08:5e:37:ad:b3:36:49:f3:f5:a5:e8:60:7d:d1:e3:a5:ed:
         f1:95:53:73:ca:07:6b:e9:35:36:29:81:a2:76:65:22:0e:42:
         84:40:1f:87:af:08:3e:60:f3:45:a2:8d:05:7d:d0:1a:a0:74:
         84:1a:8e:58:bb:4b:62:3d:e2:e1:70:9c:89:ef:08:e9:e0:2a:
         97:6a:5c:56:1b:c9:15:d0:2f:dd:dc:49:4a:7d:22:fa:e7:1c:
         80:72:0d:5a:7f:71:8b:14:2f:30:f0:c8:0b:d2:df:ea:75:79:
         92:34:57:0c:44:25:b5:a3:b3:65:70:c1:5f:68:cd:95:0e:74:
         64:ef:8c:6f:0f:80:3a:b0:ff:ed:15:69:1d:22:e7:b1:8b:b6:
         09:22:83:63:49:ce:93:53:96:68:0c:b0:85:e2:bf:a0:50:32:
         ab:e6:89:12:8d:f7:45:a4:50:00:96:72:33:a0:6b:f9:0c:f6:
         1b:56:50:74:02:70:f2:fe:84:d9:48:96:fe:da:61:58:c0:57:
         0f:cf:f8:8b:29:32:f4:ac:fc:42:12:31:0d:0f:b0:e8:c1:6e:
         cc:88:3b:84:bc:8f:da:06:0f:b3:36:2b:08:e8:f2:1e:c5:a3:
         1a:0b:3e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:46:57 2026 by rpki-client