Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96c566af-4f9b-39b5-9886-4c96f7c1c8b9.roa
File:                     96c566af-4f9b-39b5-9886-4c96f7c1c8b9.roa (raw, json)
Hash identifier:          Mdpk3m9MIlTcPA+RTWfczkHIvksSSPZv7lvWxcWUl/k=
Subject key identifier:   6A:E4:15:05:07:D4:4F:7E:EA:30:B6:03:A2:DC:E5:C3:D0:FD:EA:0B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B2993B356E7AEBCD4AE6B3450
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96c566af-4f9b-39b5-9886-4c96f7c1c8b9.roa
Signing time:             Thu 11 Sep 2025 19:53:26 +0000
ROA not before:           Thu 11 Sep 2025 19:53:26 +0000
ROA not after:            Wed 10 Dec 2025 20:53:26 +0000
asID:                     54253
IP address blocks:        2603:c05a::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:93:b3:56:e7:ae:bc:d4:ae:6b:34:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 11 19:53:26 2025 GMT
            Not After : Dec 10 20:53:26 2025 GMT
        Subject: CN=b3a8951c-7679-4525-8d08-67e72fcad651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:43:5e:e5:a4:fa:2f:e3:6d:7e:bc:13:ad:d7:
                    e3:c8:ff:31:71:1d:c7:e1:b5:fe:fc:72:c9:42:f2:
                    b8:77:47:eb:7a:89:1b:ae:e2:cb:2b:83:37:9c:28:
                    38:91:68:af:95:4b:1c:4c:8d:02:15:e8:2c:df:05:
                    2a:d8:fb:6e:a7:87:93:00:70:da:6b:cf:e4:0f:6c:
                    59:10:37:6b:2e:e0:b5:51:8d:ea:7a:24:e6:aa:3a:
                    b3:4b:a8:14:08:09:07:86:aa:90:49:6e:82:44:a5:
                    26:20:3c:52:94:39:26:c7:28:de:78:b6:c3:0d:45:
                    2a:7b:2c:e6:69:da:64:0a:e7:4b:f4:89:60:7c:aa:
                    ed:41:75:fa:c3:c7:62:3d:cd:78:5e:cf:12:b1:da:
                    d9:3a:b7:8b:65:26:d0:3c:00:bc:04:4a:eb:2c:a0:
                    8f:76:bd:0a:0d:e0:4e:4c:6e:cd:ad:ca:b1:04:90:
                    9b:72:a1:e8:d2:b0:24:95:9c:72:36:f4:09:7e:14:
                    81:4c:c2:31:1f:5b:5f:97:0a:fb:1d:c1:90:0e:80:
                    15:8a:0d:61:e0:5a:5e:7d:92:77:5c:57:eb:99:eb:
                    7b:f5:46:b8:aa:0e:73:9c:c9:6d:13:6e:fe:2c:df:
                    41:f1:b3:27:33:64:c8:2b:7b:ef:5f:6f:72:3c:8a:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E4:15:05:07:D4:4F:7E:EA:30:B6:03:A2:DC:E5:C3:D0:FD:EA:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96c566af-4f9b-39b5-9886-4c96f7c1c8b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c05a::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:3a:43:e2:99:28:ed:26:2a:85:c4:13:0e:28:1d:02:d6:97:
         6c:c5:3a:8e:73:47:a0:83:17:a5:93:76:9f:c0:51:e3:35:8a:
         ca:42:cd:09:c0:fa:8f:84:91:e2:4f:c6:14:8b:7b:8a:63:44:
         c3:9e:32:c7:a6:70:51:22:ea:c3:df:3b:d8:d4:bd:17:05:16:
         7d:19:c7:82:57:9f:7c:88:b3:16:11:9a:cb:59:57:b8:cd:61:
         3f:36:6b:66:ca:8c:e4:9d:43:f2:68:47:db:4f:aa:f0:ea:92:
         a5:68:dc:0b:bf:fd:54:8b:9c:6d:6c:9d:a1:db:33:6e:03:79:
         6e:12:83:f3:79:1f:0f:9f:12:ca:12:58:00:f3:33:5c:df:32:
         03:57:25:0d:75:86:51:84:dc:78:12:91:f3:10:0e:95:a5:11:
         19:7a:4b:f1:6a:ef:62:0a:e5:27:19:60:65:d0:7e:9b:66:3a:
         fc:42:cb:f1:83:f4:76:3b:8d:12:d8:be:59:be:8c:9c:ca:58:
         f5:64:e2:8e:96:0c:4c:68:ee:4e:e8:be:3c:f2:93:85:32:fa:
         1f:36:f1:d3:a9:ad:6b:99:84:1e:14:26:63:c3:b2:10:f6:53:
         86:89:0f:ab:32:33:c1:ec:b9:e7:ea:c2:74:39:54:94:a7:8d:
         bb:50:e5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:12:49 2025 by rpki-client