Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/572ca71f-f07c-372c-97e9-4c32927ed0bd.roa
File:                     572ca71f-f07c-372c-97e9-4c32927ed0bd.roa (raw, json)
Hash identifier:          qBgMQPNG0YYTd5j4GQ6YzAP/1rV3jwQBVQZNUK1b6Ks=
Subject key identifier:   09:C1:33:C3:DC:99:E1:F5:4B:AE:0F:EC:A0:49:88:B5:E6:50:F9:52
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B29EECB23A14790EAD8645980
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/572ca71f-f07c-372c-97e9-4c32927ed0bd.roa
Signing time:             Thu 11 Sep 2025 22:56:59 +0000
ROA not before:           Thu 11 Sep 2025 22:56:59 +0000
ROA not after:            Wed 10 Dec 2025 23:56:59 +0000
asID:                     54253
IP address blocks:        2603:c080:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:ee:cb:23:a1:47:90:ea:d8:64:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 11 22:56:59 2025 GMT
            Not After : Dec 10 23:56:59 2025 GMT
        Subject: CN=6049bf11-9939-44e9-9d5d-cc396b16afe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f8:fc:57:01:14:e9:b0:14:8e:3e:89:8a:64:
                    1d:05:9d:2e:81:02:ea:30:9a:e3:23:16:78:9e:65:
                    6e:cf:a6:c6:23:3f:ad:f9:fc:29:2d:bc:fe:71:6c:
                    19:41:1c:ad:13:60:a0:3d:fb:d8:cf:43:30:a8:59:
                    7f:99:09:1f:e2:25:d5:3b:90:ab:7e:a1:54:52:6d:
                    a2:ff:08:a2:d5:ee:2f:89:81:29:8b:2d:53:76:b0:
                    0b:12:6d:22:c2:a4:fa:28:97:cf:6c:d0:58:da:52:
                    82:7a:b0:6b:99:ea:ca:ce:ee:38:59:7e:53:22:ac:
                    2d:a1:0d:d4:d7:a1:b2:6a:85:26:30:0a:9b:ef:1e:
                    79:86:59:96:11:2f:0c:60:b4:6b:ba:51:e8:c7:5a:
                    41:08:2a:a5:3a:d1:08:3e:e7:db:80:e9:59:1b:94:
                    c2:48:04:15:d2:27:67:b9:ae:00:9c:da:6d:c2:cc:
                    72:f9:44:0f:f1:0d:9b:e6:6f:ea:a6:f4:4e:23:43:
                    0b:49:35:1c:69:88:1f:5e:f5:58:04:e3:19:42:de:
                    dd:a2:19:f7:8c:28:91:ae:f7:86:b4:93:83:7c:4e:
                    49:28:f5:87:ce:7d:e5:91:86:c5:5a:bb:f1:18:61:
                    b6:fd:39:34:05:b1:b1:3c:d3:0d:16:4c:c3:38:eb:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C1:33:C3:DC:99:E1:F5:4B:AE:0F:EC:A0:49:88:B5:E6:50:F9:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/572ca71f-f07c-372c-97e9-4c32927ed0bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c080:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:8c:fe:97:68:43:78:de:83:ca:1d:49:fc:06:29:16:2f:6c:
         6a:a2:4d:13:83:a6:87:6a:85:46:6e:26:6e:7f:b3:86:7f:92:
         1b:b0:1c:a2:8c:a8:80:be:68:d7:22:d6:a6:d1:1c:d2:e8:02:
         fd:8f:98:27:a2:46:af:26:ca:40:77:c0:08:fb:c2:e2:b1:7d:
         17:65:c7:f5:16:d2:85:c8:56:eb:5d:48:ef:a0:30:7f:a2:2c:
         e1:f8:c5:7d:94:f4:82:83:20:d7:67:a6:41:04:34:19:04:34:
         66:fc:7a:37:fb:55:3c:80:4e:ac:fe:75:5e:0e:67:63:1c:c9:
         55:ac:dc:ac:1d:10:b1:27:7f:a5:a1:49:56:18:b8:b6:b8:19:
         be:8f:0e:78:f1:25:1a:72:0a:58:cf:98:8a:32:a4:6e:2d:63:
         c7:e8:83:00:9d:f4:e7:60:a9:80:e7:48:83:5e:47:12:29:f8:
         5f:5b:ca:f6:00:8b:ee:cc:42:53:67:90:bc:8c:b6:92:83:3e:
         e0:3a:d8:52:20:e2:1f:e6:21:d8:87:4c:6f:67:5a:30:9f:48:
         fb:69:d3:4c:ac:ef:84:45:6a:49:a1:23:88:c2:4b:2e:f6:eb:
         f5:a7:a4:d6:5e:73:9d:69:c0:3a:ae:ac:4a:c6:e2:53:5f:9b:
         fe:82:4f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:21:12 2025 by rpki-client