Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/09896336-18f1-3ebd-b580-4ebbec28ec95.roa
File:                     09896336-18f1-3ebd-b580-4ebbec28ec95.roa (raw, json)
Hash identifier:          v14umyvjhZDZyuF67KOXMAh5e1in8ftx1NoA8Zr1UXg=
Subject key identifier:   06:19:9D:C7:2E:9F:E3:17:BA:EF:E4:56:F3:5C:B9:EC:41:9E:80:64
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B2C3C341EF1E4A0B682AAE680
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/09896336-18f1-3ebd-b580-4ebbec28ec95.roa
Signing time:             Fri 12 Sep 2025 18:44:34 +0000
ROA not before:           Fri 12 Sep 2025 18:44:34 +0000
ROA not after:            Thu 11 Dec 2025 19:44:34 +0000
asID:                     54253
IP address blocks:        2603:c08c:2900::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:3c:34:1e:f1:e4:a0:b6:82:aa:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 12 18:44:34 2025 GMT
            Not After : Dec 11 19:44:34 2025 GMT
        Subject: CN=4b2bbf5a-1d17-4a3c-9e0e-a09812c9fca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:ec:b6:55:97:fa:c1:0e:b9:10:74:a3:da:
                    63:5f:8f:f8:73:e1:ff:be:85:68:90:f9:50:b0:3e:
                    7b:94:ec:f4:3d:dc:32:f0:e9:b5:11:b9:89:1f:c4:
                    09:72:c6:40:13:e4:73:87:50:aa:7d:cb:f8:55:10:
                    05:98:56:ca:b7:ff:e1:97:11:60:cf:c6:45:53:22:
                    06:d5:9f:d5:62:f3:67:29:95:98:78:36:81:cc:54:
                    d8:ec:60:18:57:54:d8:f4:ba:07:ab:af:a5:f3:30:
                    1e:18:0f:26:a6:ba:cd:20:5d:42:df:7a:fd:31:80:
                    82:59:1c:86:ff:66:c2:a9:dd:70:b5:34:4f:3f:ff:
                    db:15:4f:bd:44:3c:5a:c0:34:1c:55:e0:db:54:f7:
                    3b:5a:fd:70:2c:7d:3e:6a:89:fa:95:5d:a6:0a:87:
                    8d:ee:e2:f0:42:41:ae:fa:22:b9:34:3d:c1:d0:98:
                    a1:1d:3b:48:96:8a:e3:15:18:0b:17:a4:cc:3d:a7:
                    c9:6b:af:e2:75:19:b3:d3:3b:be:df:ab:b7:85:6e:
                    a8:e7:53:36:57:e3:21:ce:9a:2f:f0:5a:13:29:4e:
                    56:ed:49:fc:e5:28:f0:73:18:c5:fc:e5:7f:a1:c6:
                    0d:3c:b3:7d:b3:8d:16:6c:48:ba:48:4b:5d:9a:69:
                    38:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:19:9D:C7:2E:9F:E3:17:BA:EF:E4:56:F3:5C:B9:EC:41:9E:80:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/09896336-18f1-3ebd-b580-4ebbec28ec95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c08c:2900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:5c:d4:d3:a3:35:40:f1:e8:d8:56:ed:95:c9:79:ad:cf:de:
         30:f0:40:85:cc:e2:32:fc:45:fa:4f:30:9b:41:e5:98:f1:9e:
         98:3a:20:f2:08:39:04:b1:9d:7d:8d:7c:b2:ab:6b:f7:a8:2b:
         f2:9f:12:e3:b9:fd:14:f5:4d:d0:fa:83:bb:ba:62:d2:87:9f:
         23:d2:be:0c:48:b9:3c:92:40:a8:fc:c4:34:49:a4:28:49:ab:
         be:27:e7:e3:94:1b:00:5a:a7:f3:3a:df:69:8e:5f:ac:b4:f4:
         49:19:fc:86:9b:68:46:17:d7:a3:0e:47:5b:ac:0e:2e:42:bd:
         54:41:ba:e6:23:3a:9d:52:06:3a:3c:83:3d:76:10:f9:3e:44:
         53:24:f4:14:1b:40:05:d2:0b:79:a7:f6:54:d3:87:26:bb:1f:
         1a:88:c4:11:ee:c0:2e:df:39:05:7d:66:68:64:63:13:e0:e3:
         4c:24:9f:aa:dc:d2:58:b3:73:50:2d:d8:4f:6c:86:71:98:87:
         fa:75:f0:fa:b9:e1:2a:83:a0:fa:5d:b6:71:8e:a9:34:2d:b7:
         ac:92:27:49:f6:ec:86:e2:3d:22:09:c7:a2:8b:54:0a:d6:2b:
         31:bd:89:50:c9:34:94:2d:05:d4:23:04:8a:77:d3:8f:7f:b9:
         09:0d:ea:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:14:04 2025 by rpki-client