Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e4d039cf-e143-3727-bcf5-a78d3dbe9cae.roa
File:                     e4d039cf-e143-3727-bcf5-a78d3dbe9cae.roa (raw, json)
Hash identifier:          /FEIwlGAo82v8Y8DXXvuupgXwfZe/S9wE1O0ymBHdXQ=
Subject key identifier:   8F:48:C8:0A:9D:4F:D8:E9:4B:C7:BD:3D:5B:43:96:B7:0B:F9:40:BB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D905A9A27D1A6AC4814EFB280
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e4d039cf-e143-3727-bcf5-a78d3dbe9cae.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        2603:c011:a000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:9a:27:d1:a6:ac:48:14:ef:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=7c400151-5862-4530-b0ca-57dc5ed40093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:4a:8e:ba:67:be:9d:82:99:73:9a:26:96:
                    6f:c5:fb:0e:0b:21:76:fa:9b:6f:19:fb:ae:fb:39:
                    8b:09:b1:98:b7:e1:ef:4d:c7:7c:1c:14:a2:b9:1f:
                    13:b0:f6:e1:a7:bb:e3:15:d4:a1:b2:98:ac:96:2a:
                    ab:3d:f4:7d:4f:6c:47:b7:ee:8b:f2:3e:77:1e:a6:
                    4a:cb:ea:94:75:be:bf:06:76:a1:a7:a0:b6:62:59:
                    48:a1:03:4c:9c:7d:65:23:53:b7:8b:e0:4c:89:70:
                    f2:ce:13:f2:05:d6:1e:54:51:46:e2:2d:93:ef:3c:
                    1a:9d:ed:d4:71:e4:3c:d2:3c:9c:7b:aa:9b:4b:28:
                    b5:19:d8:ec:5d:7e:48:de:c8:e3:81:d9:53:58:6d:
                    a6:12:39:89:14:b4:29:fb:e2:48:47:79:4e:4b:2b:
                    6a:eb:ba:b9:82:72:8c:8e:d4:69:a0:07:3e:76:3d:
                    bf:d3:9b:c7:8c:1d:40:b2:00:dc:3a:3a:10:cc:0f:
                    13:4a:53:b2:6f:5d:94:94:57:20:49:17:d3:30:87:
                    0c:cb:01:25:8c:83:0c:e4:eb:15:86:75:4a:0b:8e:
                    72:f1:80:63:be:d1:e5:da:77:06:bd:ec:be:e9:fd:
                    17:cd:fd:f6:0d:27:e6:7d:16:99:af:e9:68:1d:a4:
                    8e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:48:C8:0A:9D:4F:D8:E9:4B:C7:BD:3D:5B:43:96:B7:0B:F9:40:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e4d039cf-e143-3727-bcf5-a78d3dbe9cae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c011:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:f0:6b:6b:8d:8b:2a:49:49:5c:59:1c:5d:aa:ed:95:17:80:
         6b:c0:54:83:a0:4f:ce:38:9c:c7:f7:72:91:2b:fb:aa:e7:86:
         b9:85:f5:09:5d:d2:19:79:19:cf:c8:7e:40:a0:10:61:81:22:
         31:93:83:b2:bf:9c:77:6c:21:64:a2:5f:dc:be:17:ab:4e:c9:
         cd:a0:eb:84:5b:44:9b:20:03:e5:33:c2:48:50:80:73:42:61:
         d7:3a:83:b9:3a:09:38:4c:59:9e:c6:92:1a:4e:cc:c4:a8:57:
         ed:8c:2c:cc:25:54:7b:de:dd:32:fd:97:37:20:72:7e:53:98:
         a3:6e:e9:00:32:05:06:87:ad:d7:bb:ee:85:18:4e:d5:c6:13:
         6e:c3:8c:ff:4b:48:5b:fe:92:97:e3:24:a0:a4:fc:fa:6c:fa:
         d9:00:64:c5:c4:86:d4:e9:82:1b:8d:7e:0d:56:5e:bd:bf:00:
         be:8e:e7:c7:dc:ae:3b:ce:82:24:1b:20:5c:c3:ff:84:05:a7:
         0c:2f:f9:9d:d9:10:be:96:fa:83:d5:6a:12:d8:c6:2e:6f:66:
         d2:a9:62:cd:81:97:4e:92:57:92:a1:2b:8d:eb:f0:67:7e:94:
         58:e5:6b:9c:6b:21:8c:73:81:f8:97:86:2c:1b:5b:f2:76:d3:
         e2:4f:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:19 2026 by rpki-client