Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3a2a864-9941-3b94-9160-2eef3efe06e3.roa
File:                     d3a2a864-9941-3b94-9160-2eef3efe06e3.roa (raw, json)
Hash identifier:          WKiWqa5OPqkB+Yi35P/XHtx4Lt2oRv0IQcavOKy8sBA=
Subject key identifier:   47:78:72:CD:B1:A4:51:D6:DC:02:70:2C:D5:D8:59:A8:5B:40:6C:4E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8D8FF9F6B4FEAF12FE0FEE80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3a2a864-9941-3b94-9160-2eef3efe06e3.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     31898
IP address blocks:        2603:c002:1600::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:f9:f6:b4:fe:af:12:fe:0f:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=34db70d4-20e9-4f6f-80c0-67e817e5b8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:25:8d:1c:b3:e6:7a:2e:cd:7e:04:72:13:9c:
                    c9:fc:4e:e5:2d:49:dd:3c:2d:dc:45:ee:68:b5:62:
                    1e:65:6f:83:79:56:0c:9f:61:e0:7f:db:5a:16:ed:
                    54:11:28:eb:a4:0c:10:40:a9:f4:bf:16:41:e6:db:
                    77:4d:e1:08:2f:65:22:89:58:c1:93:2d:8c:c4:79:
                    39:3a:1b:71:bd:02:fe:d4:19:c8:0e:89:89:2a:c7:
                    e2:45:65:d7:5f:76:48:61:66:1d:cb:75:51:4c:05:
                    bf:f7:14:3e:b5:c3:6c:fc:f0:83:af:11:2a:b8:b1:
                    7b:9b:d5:8d:29:f7:a7:a4:8b:92:d1:38:ba:af:20:
                    0f:13:cc:d9:87:49:c0:19:e5:d7:3d:d0:5f:28:46:
                    49:10:d7:3e:9e:80:52:0a:7d:94:59:6f:f1:24:e2:
                    77:a0:f0:bf:bb:10:63:f9:fc:91:01:56:be:fd:16:
                    ff:79:9a:83:d0:1e:80:77:8a:28:ed:cd:35:d1:54:
                    74:17:89:00:4b:92:7c:6b:34:28:2f:1d:80:fa:7f:
                    82:09:1c:08:02:39:dc:4a:fa:a8:9e:33:dd:6a:95:
                    ec:d7:b7:62:a9:b6:f9:dc:7b:8d:ae:d0:04:a3:c9:
                    58:9d:d6:07:b4:c3:f6:6d:f7:36:89:55:54:ff:8b:
                    09:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:78:72:CD:B1:A4:51:D6:DC:02:70:2C:D5:D8:59:A8:5B:40:6C:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3a2a864-9941-3b94-9160-2eef3efe06e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:1600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:19:34:8b:da:7a:80:1f:e6:48:db:fe:9d:8d:28:cb:3b:f4:
         1f:42:8a:32:04:88:63:ae:a8:ac:95:bd:63:08:99:cd:16:da:
         46:ce:ea:cc:89:aa:e8:6d:de:be:62:ae:e6:07:74:0b:39:f4:
         88:d1:06:b3:88:ab:8f:8e:d9:f5:a8:39:d7:b3:79:fe:aa:b0:
         1e:55:9f:3c:1f:c4:6c:d9:0c:2d:36:a2:8f:6c:2e:3c:6a:a1:
         bc:0a:f5:1b:21:53:02:92:3f:7a:38:bd:95:cd:08:ec:ac:4c:
         26:4c:f6:3f:31:77:25:53:e6:05:b8:fa:d2:c3:7e:e4:3c:86:
         37:5a:98:a6:d5:ee:6d:4a:a5:de:ef:b9:a7:32:88:94:1c:cd:
         2e:ba:a7:d9:d5:68:a4:70:45:99:4a:65:da:75:b2:45:cc:40:
         78:b4:1e:84:67:35:97:1b:2d:b3:1c:cc:c1:1b:89:f5:a6:91:
         f9:40:9f:6d:cf:9d:59:ca:36:00:24:f1:de:f6:e5:50:b7:49:
         c3:a0:f0:c7:d5:83:1c:27:1f:71:0d:25:97:de:9a:2a:ea:84:
         8b:b1:9a:b1:0e:b4:4e:b3:e1:e3:72:2c:55:de:f2:ef:ff:2b:
         9e:95:3e:83:d6:d3:47:1c:08:af:f1:5b:24:09:e9:d1:dd:9d:
         5f:0a:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:25 2026 by rpki-client