Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ee4ec617-74cc-33aa-8afc-430c67d91c46.roa
File:                     ee4ec617-74cc-33aa-8afc-430c67d91c46.roa (raw, json)
Hash identifier:          pxiXdeWcDaGcy5Vw6py8SwJ7Yqq1p3PIy0oRMvG75Lk=
Subject key identifier:   1E:47:DA:0F:A5:E5:C2:A6:63:A0:CB:81:4D:A9:78:55:16:38:1E:BA
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D905A9411D1723E9450CFDB80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ee4ec617-74cc-33aa-8afc-430c67d91c46.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        2603:c020::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:94:11:d1:72:3e:94:50:cf:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=3e066abe-2291-43c1-a72d-4e5e51f300fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f0:35:43:51:e2:fe:b3:c4:d3:d8:4e:49:4f:
                    01:15:3d:85:f0:2c:cb:a6:59:d2:db:a5:87:15:03:
                    e3:66:d1:77:bf:6c:cf:06:ff:69:6b:e6:8e:97:58:
                    c8:08:db:0c:7e:28:33:af:cd:37:34:98:3d:0b:aa:
                    90:5c:47:12:cb:6f:d4:3e:23:32:53:67:bd:0d:79:
                    9d:a9:20:78:64:5d:5a:70:8a:1e:15:53:fd:74:b6:
                    e2:0f:a3:61:2b:86:97:33:2a:39:ca:cc:eb:dc:b7:
                    9c:a7:f6:7a:85:3a:fe:8c:e2:92:50:cc:6a:4d:d2:
                    5d:bc:7b:30:67:b5:0c:5a:5e:e2:09:12:9b:8b:d9:
                    ee:b6:4a:9f:02:a4:60:03:3f:39:71:41:43:da:78:
                    f7:dc:aa:a6:69:2c:d5:d9:8a:5c:02:03:24:94:3c:
                    1d:53:31:33:36:9d:62:15:f8:b2:a5:f4:24:d0:42:
                    15:f7:69:00:13:0d:5d:d7:a9:7f:11:33:4d:bf:42:
                    07:86:c8:20:41:2b:58:35:8b:4b:06:f5:5c:2e:0a:
                    17:ec:23:0a:52:c5:0e:0c:76:43:12:b0:7c:8c:cd:
                    04:c7:ce:6d:d7:11:7c:2d:9d:cd:47:b4:4c:56:f3:
                    c2:94:01:30:40:b9:1f:d4:be:f2:b1:77:e8:cb:01:
                    c9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:47:DA:0F:A5:E5:C2:A6:63:A0:CB:81:4D:A9:78:55:16:38:1E:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ee4ec617-74cc-33aa-8afc-430c67d91c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c020::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c3:bd:98:26:c2:ea:c3:36:9f:60:e3:19:f7:2e:34:44:eb:
         14:e7:03:42:62:26:40:5f:94:3e:1a:9c:13:49:de:e8:3d:39:
         04:60:ef:45:16:ea:81:20:cd:69:c9:40:1c:55:2b:2c:8e:30:
         2d:d1:91:80:10:f7:22:e0:c2:c7:a2:bd:c3:25:78:3a:11:5e:
         e5:84:03:b5:20:76:df:14:de:16:89:4c:09:cc:8f:fe:55:cd:
         4a:ca:49:4c:ee:ef:75:ab:50:3c:90:26:6b:32:de:5d:62:9a:
         89:1a:80:1d:27:22:16:9d:36:85:0c:a9:5e:d8:a4:c1:b4:45:
         26:a7:e9:c7:02:a4:63:fb:40:af:0b:5c:1b:c3:ad:c3:3b:95:
         42:9a:c3:71:6f:93:5b:f0:fc:9f:0e:a8:6a:9a:75:b7:c2:9a:
         17:e6:48:21:37:19:1a:48:8a:dc:50:85:5f:23:e3:d6:80:b9:
         2f:6d:14:c0:84:76:9c:34:2d:57:42:01:b0:05:70:f7:99:47:
         9c:c1:4f:9a:8f:b3:63:20:c4:37:49:5b:b9:f1:f1:99:c4:9c:
         9f:45:fa:b3:6b:ec:61:8e:ff:99:1d:86:54:43:b5:a9:ef:61:
         78:a1:cb:66:45:54:7d:26:77:bf:77:96:8c:bd:7f:19:27:66:
         09:ed:59:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:51:42 2026 by rpki-client