Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fab8bc96-78c8-3a3a-8592-1f5ada4f15ba.roa
File:                     fab8bc96-78c8-3a3a-8592-1f5ada4f15ba.roa (raw, json)
Hash identifier:          3sjSllLt0eJYv5+e8ZP5GxBSLOD4jeWz622i2codVfo=
Subject key identifier:   F4:B1:59:C8:F9:94:BB:15:0A:95:B2:7C:77:49:77:1C:D1:14:95:C7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F15CD051240914496ACD00148
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fab8bc96-78c8-3a3a-8592-1f5ada4f15ba.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c030::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:05:12:40:91:44:96:ac:d0:01:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=7931799d-4113-4fc4-9e8a-8989679993f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:c3:9b:08:0e:2a:ed:d6:c1:2f:08:6a:6e:
                    82:0a:09:8d:a2:88:f6:66:6e:98:7e:67:de:75:e8:
                    16:6a:08:e2:0f:e1:36:7e:ee:80:17:9c:5b:28:7b:
                    40:4e:89:6d:0d:8b:19:2c:8e:bb:29:87:86:94:39:
                    81:da:f4:38:de:0d:c2:26:b4:4e:96:46:d4:10:98:
                    a4:54:c9:ae:bc:5a:a3:6e:30:50:99:7b:20:3b:b3:
                    00:6f:50:d6:82:2e:4a:94:82:1e:3c:9c:48:33:f3:
                    f8:d8:b9:1e:50:9d:d9:c6:c7:60:22:a1:ea:3b:3a:
                    2a:d0:3f:0e:bf:8e:bd:e0:13:9d:2e:29:2b:ed:3c:
                    11:63:6f:82:fb:88:8b:b4:67:8e:24:8b:d1:53:d5:
                    88:33:cf:ea:df:af:86:21:2a:78:bd:9f:b1:60:13:
                    10:6a:0e:76:4d:6c:49:be:bd:f3:c8:3c:52:cc:5e:
                    1d:bd:6d:9e:f2:5d:94:c6:ca:75:c6:cd:3f:ae:aa:
                    11:da:97:4f:c6:7c:0e:d1:bc:9a:a0:59:56:78:20:
                    dd:a2:4f:0a:7e:11:0a:41:2b:32:23:f1:3e:49:f5:
                    55:3b:2e:14:c4:96:d4:ea:9d:58:2f:79:49:c0:01:
                    d1:75:00:ff:0f:e3:ff:f0:a0:0f:b8:3b:86:db:b6:
                    fd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B1:59:C8:F9:94:BB:15:0A:95:B2:7C:77:49:77:1C:D1:14:95:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fab8bc96-78c8-3a3a-8592-1f5ada4f15ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c030::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:34:47:e8:d2:9b:5c:c4:58:0c:8f:92:5c:e6:d8:d4:10:71:
         5a:29:c8:23:4e:88:15:4e:09:af:5e:d4:f5:05:ec:6e:60:da:
         2b:4e:de:3e:95:ec:9c:74:b8:c6:5f:64:3c:13:39:77:db:a1:
         ef:cf:e5:92:a6:46:a2:a9:4d:1b:bf:62:82:1b:c6:ec:c2:18:
         66:bb:4e:4b:08:f7:84:80:08:7e:f4:49:0c:d2:be:82:e4:6d:
         0f:75:65:d0:31:d1:f9:2d:ed:97:32:fd:6a:0a:4f:18:da:41:
         74:5e:50:5d:58:49:0f:4a:2e:1a:cb:70:39:22:29:9a:47:09:
         78:be:4e:c6:6d:9e:69:5d:93:66:c2:5d:7d:4b:75:ad:81:da:
         5b:ac:3d:a6:5a:86:82:6f:7f:6e:03:44:94:a5:c5:cd:c9:2f:
         d7:16:a7:c5:f3:ea:b9:a6:b8:97:b5:9e:47:4a:b6:0f:54:87:
         c9:38:d1:ea:81:2e:ee:78:f4:67:99:2e:f0:8e:dd:53:4c:cf:
         54:09:9c:a7:87:d3:fb:bb:54:a5:cc:da:5a:7e:b5:9d:14:31:
         06:91:06:b5:94:77:51:9c:f9:c4:56:4e:3c:db:cc:92:19:55:
         f0:63:61:9e:38:5b:04:20:6c:60:ba:4a:db:06:e5:d8:1f:18:
         d9:5e:a9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:24:35 2026 by rpki-client