Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc695724-630a-3465-b181-4ada53f919d8.roa
File:                     cc695724-630a-3465-b181-4ada53f919d8.roa (raw, json)
Hash identifier:          jfvHJ5yQQuMF455LRYD6wanwV4vKGJ3Zd2Z4cRO4q7I=
Subject key identifier:   EC:E7:4F:25:A5:E0:30:29:BE:68:D4:64:74:FF:87:A8:E7:2D:00:CA
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F093D0CC1E26CC06EA587F200
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc695724-630a-3465-b181-4ada53f919d8.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:1f00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:0c:c1:e2:6c:c0:6e:a5:87:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=94dacebb-2e26-4b4a-8500-6162e21e9fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:77:a4:b2:4e:eb:9f:9a:a0:b0:6a:3d:f0:
                    35:7c:3d:ef:34:7e:6d:ea:54:9f:5c:70:7d:c4:79:
                    f8:b7:ff:7a:02:12:c4:e8:df:a7:80:d8:2e:04:f0:
                    f5:74:77:f8:12:ff:81:7a:5d:63:ae:1b:41:e3:1e:
                    5d:25:67:10:99:04:2f:98:af:9c:c9:53:93:43:c2:
                    14:46:8f:bf:50:93:2e:32:08:73:5e:c3:e4:dc:68:
                    47:ac:6d:fb:a6:6d:c4:b8:d9:4c:00:67:6e:25:80:
                    d8:59:64:93:bf:e2:a0:1b:e1:77:e7:0c:7f:e4:05:
                    51:b1:32:c4:7f:f0:89:4b:51:d1:6d:e9:0a:fd:e6:
                    b8:2b:87:ad:5d:f0:d2:72:5d:22:5f:22:a8:f1:f7:
                    dd:59:88:0b:f1:6a:5a:98:a8:a2:21:2e:3d:aa:73:
                    e5:22:e0:8f:66:63:5c:f4:a6:39:ed:e9:77:69:ab:
                    68:b8:e7:70:ab:5c:77:27:34:43:de:24:2e:3c:70:
                    d7:0e:a0:57:3f:27:a3:75:a3:db:52:63:f7:13:fa:
                    ca:00:16:45:f5:76:66:f8:d0:62:25:51:36:c6:7c:
                    76:49:f4:7f:0c:c5:0d:d8:2f:02:47:46:ee:64:59:
                    98:3a:08:fb:8b:d0:85:fd:d2:10:ff:71:a3:9b:ce:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E7:4F:25:A5:E0:30:29:BE:68:D4:64:74:FF:87:A8:E7:2D:00:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc695724-630a-3465-b181-4ada53f919d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:1f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9d:0f:18:3f:7a:0c:cc:1e:f7:4b:b1:d4:cc:a0:8c:6b:b1:
         ff:80:eb:2f:33:bb:1a:5f:b4:c8:fd:45:2d:ce:cc:80:8a:19:
         9d:a4:bc:23:19:43:e7:48:9d:f7:a7:43:f1:d3:ae:af:e8:34:
         48:55:67:5c:fb:19:cf:5c:70:e1:51:5c:d4:b2:80:ce:ed:c5:
         8e:6d:51:14:75:d4:21:2d:d2:62:46:ff:47:74:b9:ac:33:95:
         47:48:00:ec:8d:bf:d9:bc:db:f6:3b:57:a0:6e:1d:61:ff:c3:
         0a:e3:43:47:70:72:79:27:b2:de:26:f9:0a:59:46:db:ed:cb:
         3a:8f:37:55:b4:07:26:84:cb:9a:03:c7:f2:ae:fa:f0:42:11:
         64:d5:48:ce:2a:2a:b0:db:94:3f:0b:db:cd:a9:91:41:92:ca:
         38:27:ce:0f:7d:13:b4:15:7b:55:5f:2b:66:5c:e2:aa:f5:12:
         a0:7c:6d:98:3b:02:14:e3:c5:59:c8:9f:10:d3:85:ad:8a:03:
         d7:cd:26:54:83:d0:f0:42:05:99:3f:c5:e8:a5:70:b8:72:06:
         8e:7a:46:ca:20:46:b8:53:7c:22:ef:11:6a:b1:fc:67:7a:1b:
         a1:e8:eb:6f:06:9b:75:4a:c6:2f:78:08:d4:29:c6:79:9b:de:
         91:70:43:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:55:43 2026 by rpki-client