Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/de5584ed-ea80-37e1-afe3-40f15ac00c46.roa
File:                     de5584ed-ea80-37e1-afe3-40f15ac00c46.roa (raw, json)
Hash identifier:          rVg/wKBnD3gLtBKDVxJ7TerLzEB/ftvdC75PadCepME=
Subject key identifier:   9C:5B:2B:4E:13:36:42:A6:59:F6:78:88:43:1F:DE:9A:8D:BC:D4:8C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F49731917707AF383E7FE1390
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/de5584ed-ea80-37e1-afe3-40f15ac00c46.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c054:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:19:17:70:7a:f3:83:e7:fe:13:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=df73beb4-0efc-4c7e-969c-a5bb52de14a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:4e:64:3c:f2:e3:ba:ed:69:fa:7d:42:fa:
                    7e:38:6d:94:ed:88:10:a1:72:ab:31:da:cc:78:00:
                    4a:ef:f6:fa:75:2c:93:96:9e:be:c4:2d:0a:90:53:
                    06:9c:7c:08:ca:8c:b5:86:7d:4d:80:11:b2:48:4c:
                    a1:93:1a:2d:3b:42:65:85:20:c1:d8:a5:ae:96:6c:
                    7f:2a:83:15:f7:d0:00:ed:56:b4:ca:2e:57:c9:10:
                    04:24:f9:76:9a:6d:f3:6c:2b:fe:f5:0c:dc:8a:d4:
                    b3:db:a1:0d:a9:94:46:e4:9e:49:05:81:7c:1e:04:
                    8c:be:f2:1f:d1:39:fb:5c:a0:fa:cc:2f:7d:98:1b:
                    a7:e5:eb:99:fd:40:7f:9d:bb:6a:c7:70:ab:1b:d5:
                    75:3d:03:d9:06:0d:8b:d1:5d:c0:32:ae:a1:8c:b1:
                    49:e7:33:ed:d6:17:20:5f:f9:60:5a:34:2f:32:47:
                    4c:df:7a:00:a5:63:6f:08:0f:4a:e3:6f:be:7c:14:
                    8b:94:81:e1:f1:33:98:79:aa:3b:f3:ff:6d:ef:be:
                    58:0d:ed:02:fe:a3:a0:4b:e4:48:1d:5b:3e:17:fb:
                    8d:16:58:84:80:dc:55:4f:a2:b8:64:57:0f:19:4e:
                    7d:49:87:a7:1c:52:cb:ad:2b:82:de:c0:bf:51:d6:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5B:2B:4E:13:36:42:A6:59:F6:78:88:43:1F:DE:9A:8D:BC:D4:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/de5584ed-ea80-37e1-afe3-40f15ac00c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c054:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:08:dc:d7:28:51:2d:2a:c5:6a:f3:b9:95:7e:02:8d:bf:f6:
         1c:64:b7:df:e0:d4:0f:c8:27:da:1a:3f:9e:5f:70:9c:2a:86:
         eb:f3:14:5b:96:5d:b2:23:2f:e0:a7:77:cf:87:c0:37:9a:5b:
         a9:9d:76:94:0a:ba:65:c7:66:bc:09:25:7c:9d:37:a3:20:5f:
         ae:f1:c5:08:fd:2b:bf:3f:07:c2:e5:8d:ce:f4:ac:5e:53:1f:
         75:6f:63:67:c4:80:4b:50:2b:0c:23:97:a6:34:eb:dc:d8:dd:
         c5:c6:9f:7a:6b:96:6a:a8:a7:ed:83:49:bd:b2:b7:4c:6b:be:
         ff:b7:2d:1f:33:b4:b4:aa:7f:3b:e4:af:2f:93:81:2e:f7:53:
         eb:96:a8:06:39:1b:52:28:1b:27:d5:e8:0f:50:ee:8e:ac:85:
         94:42:69:4e:bd:ce:d2:73:5f:b3:16:16:9e:25:dc:39:81:b5:
         46:ef:f1:8c:8e:dc:6e:17:d8:03:7f:c1:f1:9d:92:11:e0:1b:
         81:5c:96:34:b3:1d:d3:ef:d3:e8:80:d7:d5:3c:b4:36:ea:41:
         64:75:b0:c2:79:36:c4:05:bd:f0:07:c1:5b:2e:be:6b:2c:87:
         49:0a:97:4e:c9:b8:73:be:91:02:f7:c0:32:5e:69:58:dc:02:
         b8:ac:50:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:40:40 2026 by rpki-client