Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa
File:                     c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa (raw, json)
Hash identifier:          XNQWvjofMP/4kU7rEh3yOuLApeWGtpguQELhXHow1k4=
Subject key identifier:   9F:30:24:28:F8:6F:08:EF:28:CB:AD:B7:E0:4F:6F:2E:FF:27:D2:93
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F4972E11AE04A1E3350D83400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c088:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:e1:1a:e0:4a:1e:33:50:d8:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1857ad73-8e6e-46ac-909c-010ca2ad7491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5f:70:32:ac:5f:d1:ca:aa:4a:27:f9:0f:a2:
                    48:a7:5f:08:f5:31:06:f6:44:f0:78:02:d7:61:47:
                    8a:fe:b1:2d:53:f5:75:c7:d7:5a:db:16:75:65:0d:
                    c0:3d:04:57:cb:ea:42:85:78:69:02:7f:71:e9:99:
                    59:c5:e9:82:67:2c:ad:79:bd:63:a6:1e:35:35:21:
                    dd:03:c8:65:2b:e1:bb:f6:76:7e:cd:32:bc:56:0b:
                    c4:78:14:c5:0b:12:d8:6f:13:44:23:6c:0e:d9:36:
                    d1:70:8e:be:89:77:f7:c7:ab:06:dd:bb:79:58:a1:
                    f7:77:46:cf:91:e9:ea:36:09:f0:cf:9c:a0:64:71:
                    bc:86:dc:1f:b4:2b:99:ef:49:02:c4:eb:b8:cd:6c:
                    c4:2e:7a:a7:12:19:26:49:0b:3f:66:6e:af:25:26:
                    0d:c0:4a:46:52:35:40:f3:ba:08:0f:40:ff:de:c0:
                    e2:ae:99:79:cd:f5:83:5c:38:f2:05:36:10:08:c1:
                    7c:ad:ff:dd:51:04:ad:01:6a:0e:21:66:9a:cc:8d:
                    5d:20:3d:8b:c3:0c:b5:91:6b:1b:63:4d:ff:b9:e2:
                    28:ac:8b:56:61:b3:65:3a:57:f8:0a:ea:cf:7a:d3:
                    ae:97:46:93:b9:97:f4:8b:cd:a4:46:3b:6b:26:2b:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:30:24:28:F8:6F:08:EF:28:CB:AD:B7:E0:4F:6F:2E:FF:27:D2:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c088:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e6:dd:9b:34:f1:a4:b3:1a:ae:ee:f8:c7:40:8f:96:b0:2d:
         b6:d5:c3:98:7f:a0:2e:df:1b:bd:04:88:12:9c:6e:9f:2c:4e:
         d4:46:e4:66:4a:65:23:c2:69:1c:11:8e:3a:ac:9a:19:ab:bf:
         9b:7d:24:58:d1:b5:fe:73:ae:83:1d:f3:0e:2a:8f:10:a6:77:
         ec:0f:41:f4:46:81:da:0f:1f:3f:be:2d:a4:95:24:29:a9:23:
         a4:01:b2:0d:ec:5c:59:f7:25:cb:de:7c:55:be:ba:b0:57:ff:
         ed:f9:d0:3f:40:2c:56:23:68:a1:b1:b9:2c:0a:f9:af:f5:4f:
         86:7e:fe:5d:f3:5d:72:97:43:f7:54:81:1d:8a:fc:a0:d9:3c:
         4c:5d:93:3b:3b:fe:98:0d:2f:1e:b3:1f:b0:78:f0:b8:6b:5b:
         14:7f:21:4f:8a:30:7b:7e:45:3d:a6:b8:01:aa:bd:b3:27:a2:
         f7:d8:4c:c9:d5:ad:d2:dc:20:17:0e:9a:e1:96:b9:20:2e:d6:
         23:70:b5:22:fd:5e:72:5f:23:72:37:bf:35:57:ce:e8:8a:f7:
         0c:2f:d2:02:fc:25:ad:71:e0:2b:81:83:22:40:10:fd:57:f4:
         70:a9:cf:35:45:70:5e:f8:98:28:3c:58:3c:29:ca:82:0a:93:
         6c:9d:c8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:16:45 2026 by rpki-client