Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c48d79d-4720-38b0-b252-9c4907ec56c8.roa
File:                     2c48d79d-4720-38b0-b252-9c4907ec56c8.roa (raw, json)
Hash identifier:          KhEG5km8ijlwL6wgw5S4+cPcp5lsYPgaCx5jFL6OFLs=
Subject key identifier:   5D:D5:AB:70:C4:D8:75:31:0F:71:D7:E9:2E:20:88:36:DA:13:82:2A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AF9D917287FCED13DCF1E9880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c48d79d-4720-38b0-b252-9c4907ec56c8.roa
Signing time:             Mon 25 Aug 2025 17:34:27 +0000
ROA not before:           Mon 25 Aug 2025 17:34:27 +0000
ROA not after:            Sun 23 Nov 2025 18:34:27 +0000
asID:                     31898
IP address blocks:        2603:c002:9400::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:d9:17:28:7f:ce:d1:3d:cf:1e:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 25 17:34:27 2025 GMT
            Not After : Nov 23 18:34:27 2025 GMT
        Subject: CN=9ec49d90-e0c0-4964-a0b7-a646dd335ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:91:84:9b:02:04:49:27:01:bb:12:5c:36:
                    3f:df:9c:5d:2b:0b:6d:ef:14:e2:1e:ff:eb:98:28:
                    ea:6c:66:e8:f6:14:2f:10:c0:72:ec:ba:cb:ce:82:
                    14:20:f1:a7:69:ef:93:46:18:0e:1c:3b:db:02:22:
                    cd:22:e3:9c:f8:17:e4:9e:fc:67:f1:d2:5e:69:aa:
                    95:86:74:4d:69:c7:21:53:30:dc:c6:93:37:89:77:
                    8f:11:19:02:f1:81:91:80:19:31:1b:6e:4a:5d:f9:
                    47:02:43:fa:91:a4:87:e0:b9:e4:da:a8:3b:07:46:
                    e5:f3:74:45:6a:63:9e:a4:1e:60:d5:43:e9:4c:16:
                    1d:79:4c:00:90:fa:48:2f:05:b7:ec:49:64:01:65:
                    03:2d:f0:6f:3d:05:aa:cd:a5:07:00:63:14:fd:7e:
                    8e:31:c5:a5:27:7f:91:12:24:61:45:17:9c:94:f4:
                    2f:cf:34:a2:51:b7:9e:51:2f:fc:da:5a:63:fb:76:
                    ce:b8:0e:ec:b6:57:4b:b0:67:28:14:0a:3c:6a:04:
                    1b:49:37:4c:c8:46:4e:eb:b2:2b:bc:47:d7:4a:93:
                    c5:15:35:18:ed:a8:94:40:c9:73:d9:8a:b7:e5:c2:
                    09:1a:2a:a5:7a:fd:95:57:12:af:2c:ed:8e:0e:81:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D5:AB:70:C4:D8:75:31:0F:71:D7:E9:2E:20:88:36:DA:13:82:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c48d79d-4720-38b0-b252-9c4907ec56c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:9400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c4:a0:a1:e0:8d:f6:cb:23:59:84:23:7b:46:bc:34:04:9e:
         39:b8:3f:c3:90:37:a1:2a:2c:da:9f:16:53:77:c1:76:f2:4f:
         26:a5:47:e2:6a:55:7c:f0:58:1a:a3:e8:30:aa:0c:b7:b9:32:
         71:43:fb:66:f5:53:2e:71:67:54:69:9a:12:ef:51:2c:a0:fc:
         04:26:e2:cb:c1:cc:0d:86:45:6e:1e:79:30:c6:4a:4f:7c:ba:
         c6:89:01:d2:b5:6d:59:1a:ba:e8:ce:8e:5d:ac:39:d4:cc:53:
         2b:85:c9:64:04:01:0a:50:ce:70:2e:f4:7a:6f:84:61:97:28:
         9d:c7:c8:df:3a:4e:06:1d:a3:b2:5c:52:c1:c5:56:5b:ec:3f:
         7e:f8:fb:17:98:76:5d:16:c5:51:9b:7f:91:28:1b:b3:ac:d4:
         2f:75:cc:e7:1d:8f:8a:9a:4d:bb:fb:23:2d:89:8e:3b:e6:47:
         0e:c0:86:87:9f:91:ce:cb:e8:f0:89:40:3a:a9:c2:18:51:35:
         1c:cc:00:d3:e3:22:79:21:d4:3f:a1:2c:e8:60:31:a5:37:80:
         9a:d5:88:4e:ac:12:f9:d4:05:c4:83:54:78:09:20:d1:78:63:
         6f:8e:74:18:0a:40:51:8f:36:bd:be:63:6f:d7:78:af:df:ef:
         1c:12:34:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 00:52:05 2025 by rpki-client