Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8142772-a75d-3ac1-b237-a9aac0d45d2f.roa
File:                     e8142772-a75d-3ac1-b237-a9aac0d45d2f.roa (raw, json)
Hash identifier:          l8xqaBzTP2gdaxzTbz0hFBiIlfLwXOziVb5W22J+1Wc=
Subject key identifier:   AB:FF:7F:2B:FA:23:A1:B7:18:F5:67:F2:6D:B8:06:9E:6E:96:D7:D6
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DCC606C4BD69255EE36D1D1C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8142772-a75d-3ac1-b237-a9aac0d45d2f.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c0bc:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:6c:4b:d6:92:55:ee:36:d1:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=5c58c534-6a70-4313-818d-01fb3f39da15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:20:42:74:c5:f1:59:46:88:0d:c7:a9:34:
                    76:0a:62:12:b0:9c:32:ca:34:5c:a8:4c:f8:54:6f:
                    1a:d4:4b:30:a5:69:40:b7:cf:be:a5:d6:3a:85:b1:
                    59:a3:9c:be:97:e4:18:cb:90:05:91:fa:bf:36:f7:
                    e8:86:25:04:b0:b6:4e:43:99:a8:3b:96:66:bb:b5:
                    51:8b:69:d0:a5:b1:52:23:e4:da:b0:2f:a1:54:fe:
                    ad:9e:67:40:64:85:66:7f:01:1e:b8:06:53:c7:00:
                    c2:3b:7a:2e:74:60:e7:2f:c8:4c:4d:e5:47:70:a0:
                    6e:21:3d:e1:2c:34:59:7c:37:ee:32:77:6b:74:a5:
                    7c:2d:e5:d7:61:d8:2e:e6:9d:03:d4:22:40:c6:d9:
                    2e:6c:b3:fd:5c:d5:ee:3a:54:d2:01:02:70:c4:66:
                    63:52:b7:a3:90:a2:a2:7a:fa:bb:13:1b:f2:b8:08:
                    9c:b0:bf:45:2c:d4:ea:46:b9:6c:ee:dd:54:42:aa:
                    e5:1b:b4:f8:34:1e:00:7f:b5:81:de:28:ce:d8:a5:
                    c3:02:d6:a1:d0:ce:b0:49:56:dc:5b:f5:29:de:ec:
                    f3:7e:3d:2a:e9:90:fa:1e:fe:0d:cc:44:d7:e3:aa:
                    fc:17:94:90:6d:0b:f9:3a:3e:23:13:c1:13:8d:78:
                    0c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FF:7F:2B:FA:23:A1:B7:18:F5:67:F2:6D:B8:06:9E:6E:96:D7:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8142772-a75d-3ac1-b237-a9aac0d45d2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0bc:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:cc:d0:d7:68:f0:b3:ff:df:eb:80:52:76:ea:1e:91:db:d8:
         38:cc:68:b6:6b:28:d8:79:64:80:5a:42:ec:e0:e3:d9:71:d7:
         86:b6:f8:8f:33:21:51:93:b1:00:f4:92:a8:da:f7:43:62:62:
         ad:7e:3a:ca:d9:c4:bb:3a:39:f1:12:70:4f:3d:c7:d3:af:01:
         5c:50:e8:f4:4b:ae:e8:89:39:92:8f:be:8e:e3:99:4b:f2:9a:
         db:e1:25:56:e1:63:8b:53:35:30:be:de:fc:8c:cd:41:e6:0a:
         bc:b3:11:02:a5:61:0d:7d:8d:82:42:7c:4d:fa:32:2b:89:90:
         a4:fe:b7:c5:ae:56:12:3c:2a:01:08:f9:ba:5c:3d:77:e3:19:
         66:c4:3b:91:82:33:51:47:9a:7d:77:a0:0d:f6:ea:bf:cd:52:
         79:e3:93:cd:1a:73:3d:99:ef:0d:fa:df:1c:8c:c5:6f:2a:ad:
         05:10:bf:9d:a2:8e:e9:c2:11:53:16:c2:a0:dc:e6:cd:9e:41:
         2d:d2:74:f5:47:f5:6c:fb:a6:ba:38:74:a0:16:a6:22:db:a2:
         2c:fb:81:85:e0:db:96:4b:6f:ce:1d:f8:a8:fe:23:e5:41:9e:
         bb:8d:c9:41:89:0e:d5:4b:7b:2a:29:0d:74:01:5e:d9:5b:a6:
         44:c3:0f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:26 2026 by rpki-client