Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f45e8cdf-c690-3501-be64-e93c5645215a.roa
File:                     f45e8cdf-c690-3501-be64-e93c5645215a.roa (raw, json)
Hash identifier:          guyDA7QzOFd19SSTA+EVQR6sNZvjozfd3iwSKGXUxn8=
Subject key identifier:   56:C7:DE:16:1A:B7:75:9F:34:29:E6:37:E2:D7:0E:CE:4F:7A:6B:F9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DC995A6905532EF1122F07640
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f45e8cdf-c690-3501-be64-e93c5645215a.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c058::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:a6:90:55:32:ef:11:22:f0:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=20a4effd-278e-408b-b8f8-8641df0d79ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:51:82:84:24:9a:45:32:bc:b2:d2:11:4c:
                    f0:29:eb:e3:a9:d1:6c:d1:f7:ee:bc:64:7b:13:58:
                    cf:2b:ae:d2:8c:b3:3f:e1:cf:55:70:db:6c:e7:77:
                    8f:9f:4c:7c:23:42:b5:86:2e:8d:91:6b:81:43:9f:
                    ad:87:c4:31:af:7e:c9:db:4b:7e:d4:83:94:44:ac:
                    c6:03:d2:6d:8c:6d:9c:a3:21:43:ce:b7:42:05:5d:
                    7f:4d:d2:d3:59:ea:6c:d6:03:20:ac:4d:27:6f:d9:
                    15:95:4e:9b:46:d5:fa:51:2e:70:77:68:77:76:91:
                    80:71:9d:ab:8d:c7:82:44:21:6d:05:90:f2:da:73:
                    2c:f2:7f:aa:6d:b1:3b:b3:90:ee:20:f4:41:78:36:
                    7b:7d:0f:cf:a5:28:5c:ab:bf:72:11:74:97:a3:70:
                    00:06:97:0e:30:b5:a4:de:bd:0a:7e:45:bd:38:e9:
                    b4:48:a1:8d:0a:9d:cc:46:f5:1e:20:dd:b1:7f:05:
                    42:d7:a1:f4:66:7e:e2:b7:db:0e:01:6f:5f:40:57:
                    4d:a1:9f:fb:a2:14:9d:da:d5:83:90:f2:dc:33:ce:
                    9d:09:58:a0:77:d1:e4:a4:12:e6:54:f0:26:9e:8a:
                    3e:1d:57:db:07:82:a2:0f:eb:57:25:40:76:2b:04:
                    b8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C7:DE:16:1A:B7:75:9F:34:29:E6:37:E2:D7:0E:CE:4F:7A:6B:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f45e8cdf-c690-3501-be64-e93c5645215a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c058::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:33:05:fc:6d:7b:da:6a:46:79:f9:05:d2:ac:4b:81:50:e4:
         3f:df:ca:6a:a1:3e:14:e3:e0:eb:45:cd:f0:36:db:b9:8f:62:
         1b:4b:cf:04:85:23:0c:10:9d:ed:e5:89:9d:d8:7a:4f:4b:b4:
         7f:a8:49:d9:47:ae:b3:dd:90:15:57:e1:27:d7:4b:f9:7b:b7:
         e4:38:a0:95:60:52:cb:5d:d2:e3:50:af:d2:10:31:13:19:4d:
         34:78:d3:49:32:ac:eb:a3:f4:45:49:0e:5b:ee:1e:dc:f5:6c:
         da:de:93:50:7e:29:2c:9e:74:08:73:29:ef:f6:cb:6a:20:87:
         d8:81:4f:d6:19:30:0f:ca:6f:28:36:6c:f7:6a:41:02:3d:13:
         96:02:45:1b:79:43:cf:62:30:8c:ae:b0:28:be:8a:dc:18:82:
         8a:35:a6:b3:ab:6b:7d:5d:e6:84:e8:8f:a9:a3:7e:83:4b:8d:
         2d:6b:43:65:9e:f6:8d:1e:36:87:85:31:2e:48:a0:8e:de:25:
         f4:43:b5:20:e4:91:c8:e0:de:c8:c2:9c:ed:4f:bd:b4:16:23:
         ff:64:2f:80:88:15:c3:87:05:21:78:7e:71:4d:1a:e4:77:62:
         c9:36:c4:05:ee:8d:c1:cf:81:2a:15:da:36:a4:c6:e1:ca:c9:
         b6:f9:8a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:17:43 2026 by rpki-client