Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb57a82b-f867-3db7-9fe1-2e5b290dcfb5.roa
File:                     cb57a82b-f867-3db7-9fe1-2e5b290dcfb5.roa (raw, json)
Hash identifier:          CT1o/vIUNogssNgL2YN7iomz5nJ+XiJEdi3u2zlawPY=
Subject key identifier:   50:6C:C4:9D:4B:45:13:B3:C0:9A:6C:1C:DE:24:75:DE:F1:90:DD:62
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF99CAE3BBDCEAA9BC97900
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb57a82b-f867-3db7-9fe1-2e5b290dcfb5.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        2603:c000:300::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:9c:ae:3b:bd:ce:aa:9b:c9:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=b9c88d6c-c7a3-443a-8a07-fef4c29a5905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4c:77:1d:53:73:bc:25:5f:6c:b6:b6:02:5b:
                    9a:b3:72:c1:1d:dc:25:c8:76:63:f0:e3:4c:43:ab:
                    bb:1f:c8:e7:ed:bf:47:90:89:dc:f4:48:3c:06:b6:
                    42:0b:4e:0e:df:b1:ea:32:42:39:9c:ea:82:45:76:
                    74:de:de:c5:0f:58:36:a3:f6:6c:af:4d:db:09:0f:
                    b3:fd:ea:40:50:f2:54:d9:95:53:5f:65:c0:bb:7b:
                    3a:42:b1:aa:cb:46:dd:21:fa:b7:da:2c:47:64:19:
                    5d:3c:d0:3f:2c:17:fb:b5:cb:af:0c:46:c1:8b:57:
                    b9:27:78:41:f4:e5:35:01:ba:39:88:1f:3d:7e:bb:
                    b4:28:22:36:98:7e:e5:35:89:7a:5b:d6:7e:70:32:
                    54:e7:6a:1d:c3:e5:98:5b:a4:86:82:d6:50:7d:61:
                    c2:42:b0:c6:ce:5c:9a:36:5f:da:80:b1:e6:3a:e8:
                    25:a1:6e:d6:5e:bd:ce:b8:73:8e:c8:fa:05:1b:38:
                    27:1c:44:4b:63:96:f9:7f:61:1c:33:60:f1:bc:37:
                    50:68:d3:30:64:00:28:84:e1:4c:fb:fd:2e:46:77:
                    2b:6d:4d:d0:64:ab:6b:b0:06:8e:ee:c1:22:4e:35:
                    f0:0c:75:52:c1:36:57:9a:e9:69:62:7f:9e:a0:88:
                    d3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6C:C4:9D:4B:45:13:B3:C0:9A:6C:1C:DE:24:75:DE:F1:90:DD:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb57a82b-f867-3db7-9fe1-2e5b290dcfb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:0e:85:37:9e:9c:31:e7:8d:fa:6b:4e:2d:3e:e3:13:05:38:
         61:f7:f7:a3:cc:88:4c:18:95:36:27:85:bd:e4:3d:3d:a1:e2:
         80:67:69:71:3a:e3:4b:78:86:0b:b8:cb:94:cd:c5:f1:de:44:
         22:34:c4:1b:d0:ac:51:2e:9b:51:5c:25:12:34:be:6f:a4:b9:
         8a:3e:a2:d7:2d:1d:b5:be:cd:41:d1:99:e3:a9:51:27:55:56:
         94:42:2e:b4:f6:10:d8:fe:43:6f:0a:08:50:27:d7:82:22:df:
         fe:ed:20:e0:db:5e:4e:7a:57:55:f9:55:6f:04:f0:e9:bc:30:
         79:8f:8a:c3:27:05:72:5c:ae:b8:5f:67:e2:fc:10:a1:40:3f:
         2a:91:8f:a7:e8:ec:3f:82:c3:10:53:17:51:b6:18:b2:11:06:
         65:6e:4b:7a:09:5d:08:6b:c2:3a:1d:0f:96:db:d7:02:91:cc:
         56:ef:75:f5:3d:11:4d:34:98:b8:b3:1f:06:9f:61:f7:e3:6a:
         be:ed:ab:b5:b5:f8:bd:39:4b:eb:bc:74:c8:f7:ae:dc:88:38:
         62:f6:24:00:f6:aa:b2:dc:94:59:ab:8c:60:d9:56:f7:e0:a5:
         25:55:05:aa:cc:85:1a:69:7d:c7:5c:6f:4c:0e:9b:77:8f:1b:
         5e:69:f8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:40:42 2026 by rpki-client