Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa
File:                     c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa (raw, json)
Hash identifier:          OLG7XwDYV+IZWF2nG1Atbjdne9oX9RSnfzMA6zdU5Cg=
Subject key identifier:   7E:AA:FF:8A:5F:38:8D:B2:09:51:AF:FB:7F:0A:FC:98:19:31:04:D3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DC995A40662BF822C09751D00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c088:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:a4:06:62:bf:82:2c:09:75:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=2c634035-12ac-4044-85dc-04afbd8165d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:89:17:4a:f7:a4:3f:1d:c0:34:a2:c8:d7:
                    cf:8a:24:49:b1:ba:d4:16:14:53:35:8a:5d:49:1f:
                    80:5f:c8:23:d7:8b:15:d9:3c:ac:b2:a9:fd:60:15:
                    de:ff:b8:df:c1:70:35:47:40:b6:d6:ca:6b:a2:8a:
                    83:1f:98:54:58:e6:71:19:57:d9:6d:9f:23:15:0e:
                    a8:38:dd:9f:6d:23:3e:c5:12:8c:a5:3d:cb:1a:77:
                    59:5c:cf:37:9a:94:b6:27:32:d4:90:09:69:15:22:
                    52:04:8a:58:a4:0d:71:b7:d3:82:49:aa:bf:6d:40:
                    63:1d:d0:bb:4e:e3:4b:ae:83:30:a2:68:99:c8:a4:
                    26:59:89:e9:1c:fd:b7:62:fd:2e:8d:03:fd:c4:63:
                    92:32:c1:5e:46:4c:4a:99:02:a7:12:fa:90:b8:93:
                    8f:7c:ff:2e:1d:61:70:08:d1:7a:33:32:d0:ae:cf:
                    b1:ca:0d:1b:c5:0e:71:2c:09:98:e9:64:bb:d5:9a:
                    0b:42:ac:f2:e2:99:c8:c1:1e:3d:ab:33:5b:22:40:
                    8f:ba:e4:f9:8a:94:13:e7:b9:95:07:ee:60:5a:04:
                    23:1d:c8:f4:d1:19:f5:ca:c4:e3:54:47:a8:48:36:
                    e2:6d:5c:a5:2a:9e:5f:c5:a0:ba:bc:5b:a5:d2:fa:
                    12:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AA:FF:8A:5F:38:8D:B2:09:51:AF:FB:7F:0A:FC:98:19:31:04:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c088:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:eb:59:83:3f:dc:cc:d8:32:da:73:80:a4:d8:12:11:b3:62:
         fc:9b:c7:68:58:c5:ec:8f:f8:9b:c2:0e:4c:4f:df:63:73:3d:
         73:81:60:c6:0e:83:58:a6:19:0f:de:73:81:39:ae:fb:c5:c4:
         b9:0e:71:af:4d:51:e2:e6:1d:13:fb:73:f3:fe:4e:1a:ad:3e:
         4a:0e:e3:97:56:d8:31:fb:f4:1e:07:92:e1:ab:5f:f7:d5:64:
         0a:a4:a0:d8:ee:f9:12:60:01:f8:1d:d4:8f:76:1b:f5:dc:d9:
         f7:a0:4c:04:ac:3c:46:c6:d5:09:89:1a:3f:c8:7e:33:8f:95:
         d0:4d:a5:93:4e:c1:bb:66:fa:98:09:ec:e6:2a:64:13:08:54:
         c1:11:6d:16:0a:99:9e:60:3d:39:2b:4d:50:3b:99:58:cb:fc:
         b5:fc:43:04:71:d4:52:54:77:43:84:d4:6b:af:83:e7:af:ff:
         5f:3f:9e:b4:21:41:08:51:44:53:7d:32:79:3b:0b:77:72:3f:
         5e:7e:db:41:63:5b:ba:3d:69:47:e7:19:75:19:87:4b:30:7e:
         62:b1:57:4e:29:3c:28:69:29:8f:87:7f:c1:47:bb:3c:17:8d:
         b2:7e:ac:bb:7e:1d:59:b3:1a:59:10:4f:d6:43:ed:ee:42:9d:
         e8:85:5f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:30 2026 by rpki-client