Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a558d44-067a-30ea-be58-ab9bcb245d34.roa
File:                     2a558d44-067a-30ea-be58-ab9bcb245d34.roa (raw, json)
Hash identifier:          iCSI+LP4U73QByjXN3nqQQPsnnYa/pKKSVt+9TpQu+U=
Subject key identifier:   C2:5A:8B:3B:24:50:0C:07:67:C5:D9:84:00:97:0B:9B:1E:BD:CE:94
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B377B05C15E880D6673A96B50
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a558d44-067a-30ea-be58-ab9bcb245d34.roa
Signing time:             Tue 16 Sep 2025 19:25:02 +0000
ROA not before:           Tue 16 Sep 2025 19:25:02 +0000
ROA not after:            Mon 15 Dec 2025 20:25:02 +0000
asID:                     54253
IP address blocks:        2603:c0f4:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:37:7b:05:c1:5e:88:0d:66:73:a9:6b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 16 19:25:02 2025 GMT
            Not After : Dec 15 20:25:02 2025 GMT
        Subject: CN=98188537-c5dd-4480-9e0a-9fe678d70d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:30:2e:00:ff:f4:e1:60:e8:ce:de:e4:c2:
                    72:bb:b6:c9:70:ce:56:57:72:9b:e4:b6:8b:33:e9:
                    61:37:cd:c0:b9:9e:37:97:d3:d9:8b:86:f2:a4:03:
                    17:72:64:f5:9f:f0:6f:7f:06:a4:5b:21:fa:a7:7e:
                    f1:5d:c7:f8:51:a0:48:26:6d:e1:f0:09:87:66:f6:
                    5f:c3:56:58:29:62:0f:f9:fd:20:5c:0b:18:38:c5:
                    f6:b7:72:41:9d:68:30:fa:82:e2:3b:da:cf:3d:c1:
                    64:7f:4b:88:cb:a2:0a:c5:e1:46:3e:a6:4f:96:84:
                    a7:42:fc:e5:ee:1c:ea:b7:6f:61:4b:a0:85:0a:ec:
                    43:21:66:26:da:f4:65:1f:7c:59:c9:b1:65:53:20:
                    2a:5f:7b:ca:e7:fe:a4:04:da:ad:58:4a:33:c0:e6:
                    4b:01:8e:8c:05:b5:6f:36:bd:8e:b9:49:4c:13:c8:
                    29:08:9c:18:fc:14:e2:5b:3e:90:b5:f7:ff:84:4d:
                    b0:84:be:62:b1:5e:7a:dc:a2:9c:ef:e5:c8:76:85:
                    72:76:50:13:e7:29:3a:e6:eb:f7:fb:f3:59:d3:27:
                    1e:b9:90:5b:56:71:7a:14:ae:b4:e2:39:55:e6:69:
                    d2:35:d1:72:b3:c0:57:c0:27:ae:1a:cc:17:c1:89:
                    83:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5A:8B:3B:24:50:0C:07:67:C5:D9:84:00:97:0B:9B:1E:BD:CE:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a558d44-067a-30ea-be58-ab9bcb245d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f4:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7c:e2:3d:34:ef:e9:c5:18:af:8d:1a:12:c7:68:7b:b7:ec:
         c4:58:56:16:54:63:72:8b:1f:c5:61:dc:7d:4c:75:39:41:38:
         96:66:22:e1:ee:52:dd:e2:95:4e:fe:9f:01:de:d8:55:26:f6:
         d5:cf:26:39:71:1a:a5:f5:f2:f7:0a:e3:7b:a5:b9:c5:d2:b4:
         3f:b4:0d:8e:d1:c4:6c:b8:5b:15:1b:52:a8:60:59:71:81:9b:
         e5:5c:46:fe:9f:ac:ff:cf:95:56:fe:71:9a:75:60:c2:60:12:
         dc:ff:8c:7e:b5:26:8d:07:a7:0c:9e:e8:b9:ae:e7:93:98:ee:
         b4:49:7f:63:c0:f9:ec:90:ee:8b:ea:31:d7:c8:ab:95:a2:06:
         dd:4a:3e:14:71:00:27:1f:95:c6:98:95:c0:af:79:7b:2c:68:
         92:11:9a:29:36:79:07:24:cc:1a:2f:ba:23:de:20:12:dc:d3:
         2a:55:57:df:76:94:40:c7:61:15:70:0c:4f:4b:56:a8:99:c1:
         55:60:8a:10:92:6b:bb:bb:0f:2d:1e:c7:26:9e:1d:c3:c5:ce:
         04:dd:03:a0:4c:e6:8a:7f:0e:73:6d:d9:2c:99:d1:dd:69:53:
         2c:c7:8d:03:62:22:7c:3f:29:bc:58:d2:45:a8:0b:2c:48:3c:
         57:42:0a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:11:01 2025 by rpki-client