Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f61dce0b-287f-32ed-8d12-94a9c47916a2.roa
File:                     f61dce0b-287f-32ed-8d12-94a9c47916a2.roa (raw, json)
Hash identifier:          cr/p4Kc+Gy2oUCBhpPgHE29P/UughMUOVpAQ62JYizs=
Subject key identifier:   22:E0:29:FC:27:D4:69:31:37:B2:57:30:6B:2F:86:83:BC:32:76:FB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF552B4A76C5ABBD173B000
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f61dce0b-287f-32ed-8d12-94a9c47916a2.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        2603:c002:700::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:52:b4:a7:6c:5a:bb:d1:73:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=62f09965-a5b2-4e0e-9538-deb093552902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cc:3e:ad:6b:bf:0f:f0:f4:dc:f4:65:05:38:
                    fa:7b:44:fd:57:d2:18:d0:44:ce:b9:10:79:6d:dc:
                    ff:ed:5b:d4:eb:10:66:f0:81:d5:69:54:c6:71:18:
                    64:a4:17:7d:6a:bb:08:28:75:3a:ec:5f:51:a8:dc:
                    04:d4:47:3e:f7:6f:85:ab:ea:46:0f:54:56:49:e4:
                    2c:3c:be:ee:3f:1e:74:2d:41:04:d1:99:a0:8d:76:
                    22:53:51:25:9e:1b:62:b4:45:06:0a:bb:06:53:b9:
                    be:cc:15:5b:1b:52:a9:7c:ed:fc:b8:ab:4d:ed:a5:
                    35:31:0b:49:a3:4e:98:56:c5:e1:9b:bc:af:5b:82:
                    dd:ea:27:a8:e4:80:98:98:7f:35:2f:9c:e1:c7:d5:
                    f1:4b:22:e4:55:4b:ec:df:00:59:fa:62:ce:9d:f7:
                    e6:37:cf:48:47:16:5c:e6:ec:a4:5c:74:ee:4a:ba:
                    c6:54:42:34:93:95:4a:27:23:12:a6:77:6d:52:38:
                    e0:48:1a:e9:95:64:c6:50:08:86:ce:79:8e:4f:a3:
                    52:ef:ea:b8:eb:05:68:42:35:7b:2b:77:a3:40:f2:
                    11:b4:c4:ef:c7:76:f4:27:7b:6a:73:44:34:97:15:
                    db:c2:df:31:e3:23:a5:c6:03:e5:6e:28:d5:65:cf:
                    76:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E0:29:FC:27:D4:69:31:37:B2:57:30:6B:2F:86:83:BC:32:76:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f61dce0b-287f-32ed-8d12-94a9c47916a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:93:26:0f:cd:b9:5b:58:c3:6d:4a:e6:8a:88:d0:01:eb:bd:
         d1:6b:83:49:af:8e:5e:86:55:d9:1d:17:f4:6d:db:16:80:23:
         29:ac:43:0d:ab:e6:e2:73:82:86:9a:d3:f4:32:91:bf:1c:6d:
         c4:77:62:5b:ce:fe:25:6d:d4:08:e4:84:e8:34:28:3b:ec:f2:
         47:64:41:99:e1:7b:ef:e4:2d:a0:0d:2b:1f:f3:08:f8:d3:76:
         59:c1:55:ae:db:3c:ca:2e:1e:b5:dd:74:bb:d9:7d:c9:da:a8:
         d3:4b:3d:33:94:9c:43:4b:31:4d:a0:16:29:3b:aa:20:e9:8d:
         a7:9e:e2:75:38:c7:2a:06:9e:03:30:c3:2d:b4:af:f0:0a:2a:
         7b:8d:3e:8a:cf:3e:b5:19:ed:fe:b2:02:a5:d4:f2:7a:9b:1a:
         d1:02:f9:d8:09:0c:ca:d4:22:b5:ad:06:aa:22:cc:79:bb:c1:
         57:d0:dd:0e:a5:1b:05:ec:ea:d4:73:00:bf:10:48:86:37:d8:
         99:19:06:f3:0b:b2:4e:50:0b:54:02:f5:c2:f6:11:51:b3:7f:
         c3:5f:12:d4:bc:9e:6d:97:a9:32:07:47:56:17:d2:4f:f8:21:
         31:b7:0a:10:23:aa:b3:d1:00:16:f0:49:c1:7f:80:6c:e0:87:
         2a:03:2e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:13:48 2026 by rpki-client