Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e5396904-45bb-3c55-a28e-3f2df23ac509.roa
File:                     e5396904-45bb-3c55-a28e-3f2df23ac509.roa (raw, json)
Hash identifier:          iCZmxiU1tKc9p6UR4fjnGyOk1CaqIkTajqa4e6hHbPM=
Subject key identifier:   1C:E7:77:F0:05:E1:52:0A:A8:78:42:CA:86:EB:1F:79:79:8A:43:3B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8C2A9B2BF5229C2AA8C3BA80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e5396904-45bb-3c55-a28e-3f2df23ac509.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     31898
IP address blocks:        2603:c000:2900::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:9b:2b:f5:22:9c:2a:a8:c3:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=63ef1fdb-6789-44db-aaaa-8aa9f93e398b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:8c:92:6c:cd:cb:81:77:eb:f6:7e:72:d8:
                    ca:88:57:6e:7a:36:ff:a6:29:3f:45:73:b8:63:01:
                    d0:67:b8:b1:49:73:20:25:f2:13:ef:ed:57:1b:c2:
                    76:d7:c7:9e:b0:70:ee:b3:85:49:69:ea:76:b5:cf:
                    a5:4c:37:79:59:17:cf:c2:bf:7b:ae:e1:5d:5a:a8:
                    0b:4c:12:37:cb:58:88:36:72:bb:53:72:1d:8c:3a:
                    cd:8b:9c:ec:74:61:47:af:5c:4e:71:50:2c:1d:5d:
                    04:e0:be:92:9b:72:4a:7a:7a:8e:be:df:46:9e:a6:
                    77:70:98:2c:0b:2d:5b:ee:01:cd:45:75:32:9b:f8:
                    33:a3:eb:5b:8b:66:f0:1c:c4:df:2b:9c:0e:4c:6f:
                    b7:3d:69:02:2b:9a:81:09:a9:2d:34:da:2c:ca:e4:
                    d0:b8:60:3d:39:6f:d9:69:8a:dc:b0:07:a2:cc:db:
                    b8:95:27:41:57:d4:37:25:9b:6e:72:cd:42:70:42:
                    8c:21:48:0e:30:84:a0:71:1d:5c:84:a9:28:29:af:
                    36:f9:37:c7:02:9e:1e:36:dc:9d:06:ad:29:97:5a:
                    f1:91:6c:36:50:0c:c0:d9:6f:2e:28:ec:0b:7a:ae:
                    22:76:6b:b8:43:65:e1:cc:c0:97:b2:e3:b8:85:af:
                    bb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E7:77:F0:05:E1:52:0A:A8:78:42:CA:86:EB:1F:79:79:8A:43:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e5396904-45bb-3c55-a28e-3f2df23ac509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:2900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:df:ab:4a:92:b3:31:04:c6:06:7f:8e:f5:a7:da:9b:63:de:
         c2:c0:ff:60:a5:00:c2:0e:d9:e7:bc:97:38:c4:a2:a6:f9:2c:
         81:01:af:2b:fe:4c:aa:76:5f:3f:d2:3c:c9:6d:8b:00:94:1e:
         62:3b:06:a9:2e:d1:89:04:7b:2a:cd:89:ed:b0:a9:34:fd:0f:
         65:cd:ce:ac:9e:42:7f:57:0b:aa:c6:27:b3:84:37:10:46:a0:
         fa:0e:66:f0:45:37:c6:9e:d8:72:1f:b4:dc:56:72:f4:27:26:
         90:3d:62:c7:08:f1:ec:d7:38:0f:cc:60:af:d7:34:31:f1:86:
         7d:22:df:92:b9:42:c3:b4:20:98:ac:c4:c2:09:ee:43:4c:a3:
         52:fb:a7:ff:5b:0b:64:f4:5a:36:5a:38:ce:37:da:00:99:31:
         c6:3a:04:3c:17:c4:62:25:c8:16:b6:3f:a8:99:e7:c3:49:6c:
         8e:f9:13:8c:1e:d6:f6:05:db:01:f3:62:b2:e8:0b:8c:c9:ba:
         bf:83:50:fa:b1:2b:92:0f:0f:ce:43:37:0c:2f:42:70:35:54:
         86:78:bb:54:d8:6b:bd:6f:08:ab:23:0e:77:4d:dc:b2:0c:28:
         cd:59:2f:1b:c4:3a:5d:da:60:dc:ef:70:e0:16:41:76:3d:91:
         20:ff:93:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:14 2026 by rpki-client