Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce0f1b42-1e58-3092-a373-eba23cae1659.roa
File:                     ce0f1b42-1e58-3092-a373-eba23cae1659.roa (raw, json)
Hash identifier:          KRYh0AAsb9ejnDP6mNEuQuQqyRyPGf7y2dO/PMU851A=
Subject key identifier:   E0:DB:2A:74:36:48:FD:F7:42:54:65:D5:42:6F:8C:C7:B3:8E:41:EE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF568E88D0C3AE2E8E27310
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce0f1b42-1e58-3092-a373-eba23cae1659.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        2603:c001:600::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:68:e8:8d:0c:3a:e2:e8:e2:73:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=6b2799d6-a56e-46e4-832b-51c21a1f47ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:81:4f:7d:94:05:7f:37:75:bc:5b:d5:bf:97:
                    39:7d:b2:ed:a2:51:bd:78:a7:af:39:e5:3f:07:40:
                    c0:41:a1:22:7f:44:cd:c5:e7:47:56:77:0b:27:ed:
                    bc:2b:cc:ad:31:9b:b8:58:21:8d:28:38:7e:59:89:
                    e8:67:6c:11:bc:5f:9b:c4:fb:17:e5:e2:61:80:b9:
                    34:8e:5a:12:21:99:87:f7:6a:e0:5a:2c:e3:60:5a:
                    cd:d8:e6:56:91:a1:67:66:ee:a3:4a:52:71:ad:b0:
                    53:f4:ea:d8:24:9a:ed:8e:19:97:51:e5:8f:2a:34:
                    55:30:c7:9a:be:b7:2b:2d:27:88:14:b8:2c:0f:11:
                    e1:45:07:54:ce:b7:8d:3d:c2:f6:02:35:21:a5:25:
                    c0:1b:52:bd:00:e3:e0:e9:97:81:96:04:5e:46:fa:
                    73:2d:cb:85:a3:3e:52:72:fd:4b:5f:3f:45:9c:1d:
                    32:c3:b4:c8:f8:10:58:58:30:fa:84:61:92:74:1f:
                    1f:16:27:3e:53:e1:b6:df:25:25:d0:40:22:08:36:
                    fc:db:e1:8c:e3:21:22:d3:bb:85:ea:7e:3d:d7:c7:
                    fa:1a:4d:c9:ef:cb:d3:de:ae:68:5c:45:d4:c4:ba:
                    de:6e:e5:82:0a:65:f4:51:01:84:b7:e2:cf:f3:34:
                    70:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DB:2A:74:36:48:FD:F7:42:54:65:D5:42:6F:8C:C7:B3:8E:41:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce0f1b42-1e58-3092-a373-eba23cae1659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:600::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:0e:6b:19:04:b1:bf:d5:7b:a6:8e:b9:61:a7:e7:92:a2:c9:
         3c:1a:65:b8:7b:65:ad:48:2a:b6:76:5f:0b:09:58:fa:d0:a0:
         14:e2:a5:62:a3:de:4f:7a:04:3d:e5:16:53:07:ff:7b:af:15:
         b4:4b:7b:90:9c:87:e1:bf:bf:38:6f:67:10:23:94:32:b0:0f:
         8f:ae:b5:a6:91:90:fa:fa:59:a6:ad:99:bb:ae:99:6e:49:bb:
         7b:00:60:2b:fb:ba:36:08:ab:3b:f6:e7:7e:25:a0:cd:a3:57:
         d1:cd:64:02:16:07:c6:db:b6:ce:71:5f:e8:84:a2:52:45:45:
         de:fc:11:07:75:34:c2:46:fb:4b:49:46:27:2e:4f:4a:f8:af:
         79:c3:72:e3:7e:41:b6:ae:73:ad:c3:bd:e6:a4:01:0e:10:98:
         72:42:36:f3:09:47:d5:2a:6d:61:fe:26:a1:43:1f:53:a6:70:
         3b:cb:12:7a:82:22:89:da:13:e2:bd:01:63:4f:54:69:44:28:
         13:62:aa:74:b7:a7:b7:d5:c8:c3:64:f3:bf:6b:1b:43:8a:4c:
         f7:1b:fe:7a:64:07:ef:12:30:8e:d5:33:6a:1f:61:41:fb:ff:
         5d:12:7b:86:61:15:04:e2:bd:c4:b9:de:95:79:ac:f3:e7:1e:
         46:51:58:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:34:01 2026 by rpki-client