Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/392b1563-f50c-35e3-937a-b0be41409911.roa
File:                     392b1563-f50c-35e3-937a-b0be41409911.roa (raw, json)
Hash identifier:          jiEd0aknpTcl4dvQr3R5OF7yAq9EuFS8Ay/EklaPjsA=
Subject key identifier:   17:F8:99:AD:F4:AC:2E:2D:06:37:C4:DB:CF:6F:5A:6A:B7:86:8B:05
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B2993A57459F31198DF479D60
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/392b1563-f50c-35e3-937a-b0be41409911.roa
Signing time:             Thu 11 Sep 2025 19:53:20 +0000
ROA not before:           Thu 11 Sep 2025 19:53:20 +0000
ROA not after:            Wed 10 Dec 2025 20:53:20 +0000
asID:                     54253
IP address blocks:        2603:c058:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:93:a5:74:59:f3:11:98:df:47:9d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 11 19:53:20 2025 GMT
            Not After : Dec 10 20:53:20 2025 GMT
        Subject: CN=597ab055-9148-49cd-a4ba-43f66adc3f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3d:e2:13:12:15:fe:dd:17:db:1f:51:4c:62:
                    36:22:3c:b2:a9:49:20:76:5b:99:db:62:6d:60:f3:
                    e0:31:8f:f0:e8:b0:37:bb:73:dc:9c:29:f9:47:e4:
                    dc:9e:b8:22:9b:a1:cf:d7:21:0e:85:a7:bf:8d:15:
                    a3:7e:17:91:99:20:9b:06:f3:6b:15:bf:88:9a:b7:
                    b6:8c:75:70:35:16:be:5e:43:cc:bb:e6:21:4f:70:
                    d2:6f:dc:d7:d4:fb:03:37:c0:d2:53:bd:69:b9:3f:
                    f8:5b:d6:39:2e:0d:ee:10:79:0d:c4:69:0d:05:a0:
                    c9:69:b7:45:04:83:f5:3c:2a:9f:57:9c:53:d3:54:
                    c8:50:9f:30:8b:f6:8f:53:9a:78:06:be:84:fd:c5:
                    b1:7d:06:4e:15:f7:aa:e0:aa:8c:65:09:ed:00:14:
                    ce:e4:9a:7a:39:6c:d5:e5:31:3d:53:cd:07:6e:2c:
                    95:9c:f1:26:d4:9f:ed:e8:76:ae:44:20:cb:96:27:
                    9a:74:58:89:b0:91:0a:f5:ad:9c:21:a0:01:67:f0:
                    40:9a:08:5c:85:b5:ae:a7:ae:20:70:f5:34:af:f5:
                    2d:fd:64:54:9c:cc:26:4c:e6:bc:74:67:b2:48:49:
                    5d:24:5d:a1:a0:45:6e:21:05:3d:af:45:eb:2f:92:
                    b9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F8:99:AD:F4:AC:2E:2D:06:37:C4:DB:CF:6F:5A:6A:B7:86:8B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/392b1563-f50c-35e3-937a-b0be41409911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c058:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ad:3f:b2:8d:5d:1c:0e:36:36:91:0c:59:8b:f7:52:26:4d:
         f4:13:61:03:c7:f9:1d:fc:71:98:75:27:26:61:01:05:79:47:
         80:5b:ac:17:cd:a1:4c:c1:a7:f1:5a:2f:d3:cd:e4:d3:b5:b9:
         44:bd:22:88:38:e0:26:47:b3:b5:d5:4e:11:e3:a7:f0:83:92:
         0b:6c:12:8a:a3:44:1d:d9:0e:8d:bc:ad:b9:b9:e5:87:d1:f7:
         97:3b:59:7c:99:4b:28:58:1c:c3:48:16:82:87:f7:26:fb:0c:
         04:84:28:4e:2d:db:6c:29:21:17:19:dd:49:3c:24:7a:89:60:
         65:4d:da:b7:68:ad:87:ab:9d:2f:87:52:e5:d0:3a:6f:2f:2c:
         76:98:a4:a9:38:ee:1a:2f:35:90:9b:19:50:e3:ae:c1:29:5c:
         95:ba:ce:68:8c:bc:cb:70:a8:94:6e:65:8e:ef:4a:25:92:f8:
         42:89:c6:ed:6e:ee:6b:24:b3:c4:22:a7:4c:49:ad:3f:80:a0:
         24:e5:b8:45:8e:67:54:79:bb:31:f5:fb:c2:00:92:fd:c2:ac:
         3a:58:6f:80:83:70:b9:cd:d9:2b:58:34:a7:09:1a:14:5f:c8:
         f1:eb:b3:d2:5f:de:79:02:71:4f:c5:32:83:ad:54:b5:36:f4:
         65:3e:5a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:12:45 2025 by rpki-client