Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b5ed9e3-d6e4-3ec4-bdf3-dd15de4d928c.roa
File:                     4b5ed9e3-d6e4-3ec4-bdf3-dd15de4d928c.roa (raw, json)
Hash identifier:          FtbXFedzLCxAaEYR4m/0Rm296lDMqAXCZSNWgKUoY6Y=
Subject key identifier:   98:CE:E2:3E:D9:04:D4:DE:53:D7:AA:37:D0:70:A2:C5:A8:4F:F9:8A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B29EF14F17E8EFB7E48CCAE80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b5ed9e3-d6e4-3ec4-bdf3-dd15de4d928c.roa
Signing time:             Thu 11 Sep 2025 22:57:34 +0000
ROA not before:           Thu 11 Sep 2025 22:57:34 +0000
ROA not after:            Wed 10 Dec 2025 23:57:34 +0000
asID:                     54253
IP address blocks:        2603:c088:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:ef:14:f1:7e:8e:fb:7e:48:cc:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 11 22:57:34 2025 GMT
            Not After : Dec 10 23:57:34 2025 GMT
        Subject: CN=ad0078a9-5530-401b-9536-74ebfe4c7f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cc:ee:52:10:bc:7a:b1:62:82:56:97:26:2e:
                    df:20:56:2a:76:89:23:97:79:14:b8:a3:11:80:65:
                    78:cb:88:f2:a1:5c:34:98:25:93:f9:2d:44:91:25:
                    0a:4f:8d:bf:54:86:9d:45:9e:4a:0f:99:4e:81:dd:
                    67:d6:94:69:88:40:9c:31:94:7a:12:54:f9:88:12:
                    2b:ad:45:0c:cc:1a:3c:06:88:7b:01:ba:6e:83:07:
                    84:3f:a7:5c:0e:f7:5c:8b:52:42:2f:db:be:b9:58:
                    dc:3e:87:4c:f6:f4:22:b4:63:02:4d:dd:a3:3a:7e:
                    81:39:07:45:13:e8:9d:c8:1c:00:c9:70:cb:e6:f2:
                    eb:9e:ff:ab:98:d2:2c:fc:b8:3d:e7:38:60:c5:ba:
                    0e:af:60:bc:3f:71:c4:f0:5b:e9:a6:b8:06:08:f6:
                    c2:1a:5f:dd:b1:82:de:0b:6c:39:ec:bc:89:b1:64:
                    37:19:d5:9e:41:25:b4:9f:01:cd:79:90:22:17:d6:
                    e0:23:7f:5b:40:e0:ef:2d:6c:1b:15:6d:b3:62:33:
                    ee:51:a5:09:c6:a9:67:78:ad:72:81:11:9a:fc:ef:
                    a2:93:d0:f8:0c:df:86:4f:15:f4:58:1c:cb:e4:3c:
                    10:89:4d:80:b6:9b:bf:ff:6c:2c:be:76:00:3f:dc:
                    5a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CE:E2:3E:D9:04:D4:DE:53:D7:AA:37:D0:70:A2:C5:A8:4F:F9:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b5ed9e3-d6e4-3ec4-bdf3-dd15de4d928c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c088:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d5:20:01:07:46:44:8d:ba:f4:0b:90:44:89:4e:33:e0:f8:
         b5:e0:0c:cc:f3:05:31:9b:a3:2c:58:58:bb:fc:3a:0c:f3:a8:
         8f:b8:ed:0d:70:b3:c3:95:2d:c1:ee:0a:6b:a5:14:06:24:67:
         64:9e:25:a6:a2:3a:28:ae:1f:10:ba:37:c6:26:50:10:01:64:
         09:e2:5d:de:5c:cb:91:4b:69:d7:bc:0d:0e:f7:fc:0e:0c:ee:
         cc:0c:d9:5c:2a:f5:a6:7d:95:52:65:83:c5:26:61:2b:6f:c0:
         0a:10:98:fd:19:b7:82:c2:84:29:19:22:b1:b4:42:aa:56:87:
         ce:2f:71:7c:76:bc:34:07:a5:f2:51:f4:c1:ed:6d:3a:09:af:
         c3:0a:10:de:f6:98:1d:f2:1e:e2:f5:bd:44:59:81:d0:14:3e:
         e5:24:42:4c:b3:e4:08:f7:4c:cf:6b:36:f8:88:40:8f:34:06:
         08:2c:58:75:3d:ca:0e:24:06:db:46:a3:3b:1f:1f:ec:01:f4:
         27:1f:ac:53:3c:ec:7b:6a:05:b8:3e:29:4c:3b:e6:c2:5f:1b:
         fe:ac:08:bf:d9:4f:b0:e6:3e:2f:2a:56:e1:ae:c4:e7:85:62:
         4c:c0:3f:fc:5e:00:7b:6e:82:1b:b1:b8:df:4a:cc:d5:00:83:
         6d:90:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:21:17 2025 by rpki-client