Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cce8f18a-8f8a-3508-9eab-ced0b09666a4.roa
File:                     cce8f18a-8f8a-3508-9eab-ced0b09666a4.roa (raw, json)
Hash identifier:          XUY8LQJqC91x0dT8xKGQtkNSuGTD5Q2w1aVw3uyhywU=
Subject key identifier:   B4:6C:2A:02:DC:01:8B:A9:35:67:70:4B:86:C9:CA:89:71:D8:52:5E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F103791D79D07D2895876BBEC
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cce8f18a-8f8a-3508-9eab-ced0b09666a4.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:9100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:91:d7:9d:07:d2:89:58:76:bb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=45fe7fe7-dc6c-4685-a499-43325f96995d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:12:ff:49:19:78:eb:d3:1e:85:f3:21:c4:
                    3d:60:17:b9:1a:80:a0:6f:24:ee:5c:72:8e:a1:b0:
                    a1:18:04:11:c8:25:91:79:e9:88:15:bb:32:68:42:
                    e2:ef:48:6a:2b:b4:a8:07:14:a9:00:58:56:bc:20:
                    e9:4b:61:33:a2:cb:ab:80:d0:28:73:b2:9e:4a:88:
                    8d:7e:c5:65:0e:37:d7:33:e3:b8:23:52:2d:e5:77:
                    6b:77:54:48:ef:46:dc:0d:e2:cf:83:cd:b4:bb:a4:
                    96:3e:d0:d5:64:85:4e:00:dc:6c:8b:a6:b2:34:43:
                    fe:19:90:c7:c8:49:25:94:6f:52:c0:6f:ec:3f:40:
                    29:5a:2a:73:09:b4:45:92:4f:2a:32:11:a4:bf:05:
                    61:ef:8b:57:2a:b1:1a:7d:77:23:88:ed:1e:c4:3a:
                    63:a8:d0:d4:76:09:cc:9a:3d:04:e7:87:d0:04:a0:
                    eb:9b:8b:e6:35:30:9c:f9:fe:bd:f3:85:d6:a3:d5:
                    f2:12:23:a4:8d:9e:ab:e5:5e:42:88:d2:7f:b2:88:
                    ff:8e:dd:9c:80:51:f7:2d:78:2a:1b:a1:b6:cf:85:
                    0d:50:a4:22:0e:b9:8b:c1:69:43:91:24:db:7f:57:
                    d6:bc:cc:ce:10:54:da:f0:1b:42:5f:c1:a7:4c:fe:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6C:2A:02:DC:01:8B:A9:35:67:70:4B:86:C9:CA:89:71:D8:52:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cce8f18a-8f8a-3508-9eab-ced0b09666a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:9100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:3d:87:21:49:04:d7:b6:9f:eb:f4:5e:79:4c:bb:a4:ed:ce:
         fa:38:c4:28:14:a4:89:cd:d3:ef:95:e5:85:19:d7:23:b9:ff:
         bb:b6:2b:34:24:c4:bf:d4:38:e5:99:f5:b3:b9:fa:61:24:5e:
         b0:5c:86:ee:5e:db:38:2c:38:b7:5e:f2:67:df:8d:50:e0:2b:
         e8:23:cb:77:63:8c:ee:1c:0c:e7:9a:ab:76:ed:5d:4e:ec:ef:
         1c:da:16:61:f6:70:da:b1:f0:0a:72:2e:44:b9:40:5c:78:b7:
         e1:af:36:bf:cf:61:2e:12:21:aa:ed:2e:2c:c4:27:f3:ff:f2:
         6a:d7:cf:d5:cc:6a:65:43:8f:53:ab:c9:cd:4e:ce:26:d3:f0:
         c5:48:aa:d1:d3:13:bd:95:f3:e3:95:a1:dc:be:c9:25:35:cf:
         b8:d3:2d:15:88:dd:e3:8e:d8:af:75:9b:76:a8:2f:1c:65:f0:
         04:c2:c7:9e:50:b9:65:62:00:1b:bd:1a:29:77:d6:eb:ba:2b:
         22:3d:f3:c9:d6:42:e7:7d:43:c6:e0:f9:5d:6e:03:a8:cd:08:
         5d:36:35:52:b6:7d:9f:2f:a2:d6:60:c4:ab:c2:6e:bd:e3:6e:
         3f:84:50:bd:4d:fc:7c:13:d5:78:ff:2a:42:8a:e0:e9:a6:2c:
         48:57:d7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:58:26 2026 by rpki-client