Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/831ef385-6303-3803-89f8-148490b76ee2.roa
File:                     831ef385-6303-3803-89f8-148490b76ee2.roa (raw, json)
Hash identifier:          cWo1wqrJ1NFjsgWtdoXsTMWDEYu+BihgP6cvm4k0eZY=
Subject key identifier:   44:DC:4E:E7:87:87:CB:BC:A7:93:37:EB:68:41:9F:65:58:7B:D3:C0
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B29EEDBF1BAEF01706117D540
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/831ef385-6303-3803-89f8-148490b76ee2.roa
Signing time:             Thu 11 Sep 2025 22:57:07 +0000
ROA not before:           Thu 11 Sep 2025 22:57:07 +0000
ROA not after:            Wed 10 Dec 2025 23:57:07 +0000
asID:                     54253
IP address blocks:        2603:c080:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:ee:db:f1:ba:ef:01:70:61:17:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 11 22:57:07 2025 GMT
            Not After : Dec 10 23:57:07 2025 GMT
        Subject: CN=7d96bb43-0fe5-4d8e-891b-fbbbc7f49b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:c8:79:96:90:65:70:71:63:fe:cf:42:8a:
                    99:5c:b6:a0:ed:b9:96:6b:7e:e4:4e:31:f2:07:38:
                    94:4c:96:ea:8d:46:b0:57:ff:2b:62:96:60:76:32:
                    c1:1e:0a:f7:a3:16:a4:7e:00:a6:29:d9:5a:d3:e8:
                    cd:1b:ee:a6:03:ac:10:65:c6:f1:5d:fa:fd:67:7f:
                    8b:a0:ca:c7:69:da:c3:1a:56:8f:1e:1c:41:9c:8c:
                    a5:6e:04:e2:de:e2:06:a5:da:5f:6a:c7:12:e5:d2:
                    3f:78:64:48:ac:a0:06:67:8e:d3:45:c2:8d:07:07:
                    a2:c9:f5:ad:29:7e:97:02:ca:ac:15:a9:2e:3c:61:
                    c3:81:07:c5:4d:89:08:96:20:d3:88:86:d6:d9:e0:
                    3d:c4:0d:f0:b9:6e:be:1b:d6:e3:c8:1c:cb:0a:71:
                    11:b4:28:c3:ce:62:ad:77:b2:e0:ab:51:88:cf:a5:
                    b6:8b:f3:50:f4:92:c0:9e:64:4f:df:4e:47:4f:44:
                    07:75:a6:6f:9d:b5:76:f0:5d:44:15:8f:4c:cf:b9:
                    da:d6:6a:cf:32:e7:51:e8:8c:82:cd:10:5b:c1:cb:
                    02:69:b0:08:6e:de:6b:67:54:80:46:de:5a:10:4d:
                    64:9c:00:3c:9d:8a:3a:25:67:dd:1a:1d:da:26:60:
                    57:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DC:4E:E7:87:87:CB:BC:A7:93:37:EB:68:41:9F:65:58:7B:D3:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/831ef385-6303-3803-89f8-148490b76ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c080:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:87:73:27:8a:a8:16:de:80:a3:f9:12:eb:b9:89:c3:89:6b:
         34:55:50:da:1f:84:0c:ba:fa:8f:54:f7:00:34:2d:2d:db:da:
         e9:62:6a:ca:e7:08:f6:ba:ac:7e:3a:cf:95:94:17:86:dc:9e:
         24:45:ba:03:f1:01:e3:b2:66:5a:4d:66:56:4d:d7:69:37:36:
         eb:da:7d:2e:10:96:9e:97:8c:a5:cd:72:02:d1:ad:9a:de:0e:
         99:e5:34:90:32:db:89:fd:68:3a:5d:05:66:ce:ac:e5:80:dc:
         b2:33:fa:25:3a:cc:79:e4:6a:d5:a5:57:a1:82:3c:78:e2:6d:
         cb:9c:fd:98:09:7a:f7:dc:58:30:4a:91:dd:aa:0d:b5:c0:7c:
         bc:9d:1b:d7:c0:ab:7c:1b:02:52:1a:0b:32:94:88:f9:bb:cc:
         ab:e2:d8:c6:15:c4:6e:ad:b0:50:fa:04:07:62:f9:0d:05:95:
         20:85:9c:31:6f:bd:20:d3:84:22:26:78:08:85:2a:e3:4e:ef:
         2d:8f:9b:74:34:02:cb:64:30:a4:88:f0:de:cf:a6:ef:4c:83:
         2b:7e:d7:2b:c9:66:70:39:b6:68:d5:66:b1:46:f4:19:1f:58:
         3e:49:fe:62:93:df:f7:3a:8a:bb:74:ef:3e:65:84:c4:89:2e:
         c7:3c:03:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:13:59 2025 by rpki-client