Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7f7971-035f-3486-98ad-da8f331cbcf5.roa
File:                     cc7f7971-035f-3486-98ad-da8f331cbcf5.roa (raw, json)
Hash identifier:          EL+QWN0XRzrnNuYpKfhHcz6Pf4BVe6LEwibA6d92NbQ=
Subject key identifier:   AF:D0:DB:2E:00:C6:FC:0F:E1:5D:17:D0:AA:27:61:1A:10:2F:45:68
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DC995AEC728708990B735DF40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7f7971-035f-3486-98ad-da8f331cbcf5.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c048:1200::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:ae:c7:28:70:89:90:b7:35:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=ba1d46e4-ebc4-4dae-bec3-76bb432a18b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:ee:52:13:46:a1:0b:89:5d:00:5b:12:68:
                    86:48:98:4a:1b:9d:28:f6:d9:99:75:41:68:e3:5a:
                    30:9e:15:47:19:57:11:0a:5e:73:c9:fc:13:85:9b:
                    1c:fc:e8:5f:37:9f:b5:cb:e3:ac:10:84:d9:bf:34:
                    32:35:9d:d4:6a:5b:16:c9:ad:9b:1b:c5:c6:60:77:
                    18:17:3c:f7:32:0e:f7:aa:39:ce:45:b3:c6:de:22:
                    94:94:cc:9d:fc:86:cc:32:69:50:97:15:2e:c3:69:
                    a9:5d:9b:d0:be:46:c4:a6:a7:75:88:33:01:89:3e:
                    e2:d4:6c:91:84:34:1f:61:5f:04:e5:a3:8b:c1:15:
                    2f:37:10:d8:47:fb:37:0b:66:25:65:f6:ed:7f:3d:
                    4c:0b:5f:6f:c7:19:f1:3e:8a:76:57:63:18:35:fc:
                    55:e9:31:8b:62:6f:fd:7e:77:39:d9:0b:7b:d8:87:
                    57:3d:87:1f:fa:f6:db:ca:1f:a7:f1:d5:05:f1:28:
                    f7:bc:94:0f:2d:2c:4a:4b:3c:79:fe:cb:ae:83:02:
                    27:c2:07:6a:4d:b4:97:ae:7c:6c:06:d2:4a:0f:f4:
                    85:ec:10:11:6d:28:11:74:7a:e1:05:14:39:c3:5e:
                    91:b9:af:66:c1:1f:ac:5e:83:05:b4:c5:cd:eb:39:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D0:DB:2E:00:C6:FC:0F:E1:5D:17:D0:AA:27:61:1A:10:2F:45:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7f7971-035f-3486-98ad-da8f331cbcf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c048:1200::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a6:a4:13:43:f4:1e:0a:65:b5:37:d0:e9:cf:52:20:4d:3e:
         44:fc:1d:e4:f5:f4:7d:d6:39:23:d7:18:66:b6:f5:15:4e:1a:
         c4:b1:ec:55:f5:c8:68:9e:d0:cd:a6:63:0c:c4:c1:a2:f4:9e:
         6d:75:a5:7d:b8:71:72:4c:e4:86:c4:30:88:b3:01:b7:8d:d7:
         00:26:9e:20:1a:87:cf:04:75:cf:dc:e4:47:08:0e:a1:33:ef:
         43:76:ae:25:25:40:86:04:95:94:ec:d6:36:af:51:e5:12:5d:
         aa:2b:7e:20:dd:32:c4:11:c8:5c:a8:b1:7f:79:4d:a2:78:84:
         24:02:15:49:9e:ea:21:7c:9f:c3:0b:18:ab:7d:c6:ba:3b:77:
         53:5d:b9:91:34:77:79:aa:8a:51:1c:64:ac:e4:01:27:ea:e0:
         52:8f:a4:ed:b9:72:fe:be:18:3e:21:2e:c3:31:f2:06:7b:ca:
         f1:37:a2:69:b2:dd:b9:20:26:c6:c1:d9:e6:64:43:9b:64:d8:
         b1:2a:5a:05:c9:8f:2e:f5:dd:4e:e5:ad:ac:5a:b4:9a:37:11:
         68:d9:92:2f:db:ef:9f:3f:54:4e:7d:70:b5:cd:8f:97:fe:38:
         bf:f4:8f:cd:94:e7:60:90:ed:bc:98:91:e9:6a:da:c7:11:5f:
         11:55:1b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:17:09 2026 by rpki-client