Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/27d7b70d-6f41-3e52-bf74-1505a0f2b216.roa
File:                     27d7b70d-6f41-3e52-bf74-1505a0f2b216.roa (raw, json)
Hash identifier:          UiTta6LHY+hTTS5Fv1jyNQr5ugFmg3T6WyLGZooGXiw=
Subject key identifier:   9A:FF:29:22:28:15:F9:86:66:CB:1D:4A:96:88:14:43:EC:3A:A1:EE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B2C3C41EC5DEDE0DDAEBF86C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/27d7b70d-6f41-3e52-bf74-1505a0f2b216.roa
Signing time:             Fri 12 Sep 2025 18:44:41 +0000
ROA not before:           Fri 12 Sep 2025 18:44:41 +0000
ROA not after:            Thu 11 Dec 2025 19:44:41 +0000
asID:                     54253
IP address blocks:        2603:c08e:4000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:3c:41:ec:5d:ed:e0:dd:ae:bf:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 12 18:44:41 2025 GMT
            Not After : Dec 11 19:44:41 2025 GMT
        Subject: CN=e2de2c28-e66b-4df9-9ef8-18da75b61109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:46:7d:b1:91:e1:cc:a6:f1:2f:3d:19:e5:
                    6b:ed:31:43:24:80:2f:0d:45:a2:d4:6e:b3:25:54:
                    65:b8:d1:45:ea:99:a0:61:0b:05:2c:f8:87:29:ee:
                    bf:5a:5e:54:65:6c:97:c1:07:08:a3:8e:c0:18:9e:
                    8c:e6:7b:7a:8d:5d:7a:fa:0c:d1:3c:bd:84:1f:32:
                    d2:e5:d2:21:1c:fc:10:ff:52:58:c9:53:06:ce:d3:
                    08:88:77:90:db:dc:50:80:8e:3c:99:c1:94:cf:e5:
                    56:2a:27:ab:8c:a1:ff:d8:93:dc:aa:b3:c7:20:7a:
                    fa:f2:6c:a4:d6:c8:ff:b0:9f:6c:0f:7d:16:6b:11:
                    29:56:0f:e1:86:2e:14:13:0c:1a:6e:f3:96:43:27:
                    6f:9e:b4:fe:a7:f8:f6:6a:cd:b0:57:79:10:1a:30:
                    17:78:5a:5b:23:cd:52:f0:ef:28:78:db:d4:30:55:
                    ef:d9:eb:c3:3d:e6:85:aa:a9:7e:39:b7:76:95:40:
                    f6:d3:e1:48:7a:8b:78:22:99:23:54:f1:23:18:ae:
                    e4:e6:cc:5f:19:93:6b:65:ee:99:87:91:5d:c3:b6:
                    1b:b7:a6:b2:2c:b4:c3:60:3f:e3:b8:75:ca:bf:c7:
                    cb:b7:e2:1c:80:ad:c8:5a:b4:ac:74:ce:6b:6f:1c:
                    c6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FF:29:22:28:15:F9:86:66:CB:1D:4A:96:88:14:43:EC:3A:A1:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/27d7b70d-6f41-3e52-bf74-1505a0f2b216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c08e:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b7:33:ba:50:f8:06:b2:09:7a:6d:78:93:06:34:dd:27:71:
         cf:5f:17:fc:a4:fe:30:cf:3a:1e:86:67:bb:84:10:3a:b3:eb:
         c0:8a:87:9f:d0:f3:d2:4f:f2:6f:e8:af:ac:d1:b6:86:ba:52:
         d2:a7:84:99:6c:fd:65:68:8f:97:c4:80:25:1d:c3:f5:f2:4b:
         c8:a8:dd:b2:52:df:26:b2:d5:23:c1:9d:21:85:93:2f:30:38:
         d2:26:35:35:34:4a:4c:1f:52:d4:3b:7d:bf:05:c4:46:05:44:
         42:f3:82:3a:7b:09:0c:1e:00:45:43:2c:95:94:e4:09:ba:0b:
         84:0c:26:9b:4c:d0:a1:ab:87:28:7d:a0:b2:6d:62:47:fc:30:
         03:60:80:aa:c1:01:8d:2d:05:d3:d5:b7:eb:ab:f4:8c:d1:ad:
         94:08:85:f2:37:da:13:4f:fa:83:ef:09:02:49:c1:38:7a:b2:
         13:33:bd:38:45:e1:be:81:5f:50:7e:cb:fd:97:c2:b0:e8:d5:
         cb:82:0e:01:89:45:46:99:08:a7:b4:50:3d:da:7a:92:61:fe:
         f6:19:9b:5b:c2:d1:6c:8f:b9:33:fe:4e:bb:fb:c4:36:89:78:
         aa:24:75:16:07:9c:bc:f4:b1:48:fe:f6:45:e0:28:ee:3f:f4:
         ae:71:d3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:11:04 2025 by rpki-client