Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c582680a-6db8-30eb-b784-1c47cef40a3f.roa
File:                     c582680a-6db8-30eb-b784-1c47cef40a3f.roa (raw, json)
Hash identifier:          83+EhrQbIjL3nW5fp/2QrmXlARBZvReqD6upGUM/xJA=
Subject key identifier:   9D:1E:0A:22:3C:A9:39:AE:BA:E0:8A:6D:F0:E6:9E:D0:22:1B:1B:DC
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B34AB14BBB10363575435AC80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c582680a-6db8-30eb-b784-1c47cef40a3f.roa
Signing time:             Mon 15 Sep 2025 19:14:26 +0000
ROA not before:           Mon 15 Sep 2025 19:14:26 +0000
ROA not after:            Sun 14 Dec 2025 20:14:26 +0000
asID:                     54253
IP address blocks:        2603:c0d4:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:34:ab:14:bb:b1:03:63:57:54:35:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 15 19:14:26 2025 GMT
            Not After : Dec 14 20:14:26 2025 GMT
        Subject: CN=6c982d2d-4a02-4da8-ad0b-0e4941c98578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:03:9f:c6:f0:7e:0a:a4:00:8d:40:36:eb:
                    3c:ca:2b:1c:33:1a:f3:cb:0c:74:08:74:e0:03:a7:
                    1a:43:54:38:aa:da:69:81:41:27:76:a9:ae:72:c3:
                    2f:9e:f4:ed:2e:07:8c:a5:01:62:37:94:e7:1d:bc:
                    6a:29:d1:68:7b:ad:ac:2c:cd:d9:42:06:27:92:09:
                    49:5d:e7:77:3d:86:7f:6d:aa:d8:a1:6f:27:d9:a5:
                    74:30:f6:8d:2f:c7:6f:f3:04:c2:46:8d:5c:5b:75:
                    83:a9:98:5d:db:5e:85:70:03:cf:b1:6c:04:76:38:
                    16:c8:b3:dc:80:51:2b:8c:4d:49:7d:a8:1e:99:07:
                    3e:95:0d:38:f9:4b:6f:95:96:9e:bb:64:71:81:83:
                    a6:22:82:85:ea:20:37:d5:f1:15:55:88:02:49:b7:
                    85:14:07:3b:8d:06:92:b1:d4:5e:8e:6f:f9:74:45:
                    5f:7e:d9:78:ef:8d:2f:96:92:2c:6d:d1:a6:86:d2:
                    2b:7c:ef:60:ef:16:db:ad:a8:f9:f2:4c:14:7f:58:
                    da:15:59:5c:4f:c0:40:30:8b:94:bf:75:b3:ba:0d:
                    02:ac:a1:2f:21:61:41:ce:9a:fa:43:b3:ac:62:11:
                    f0:7a:0d:af:a7:df:d0:c4:9a:c7:0f:8b:2b:44:e7:
                    3b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1E:0A:22:3C:A9:39:AE:BA:E0:8A:6D:F0:E6:9E:D0:22:1B:1B:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c582680a-6db8-30eb-b784-1c47cef40a3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0d4:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:22:34:82:bf:0c:f0:d9:21:1c:91:4c:88:20:55:2e:33:1b:
         f7:ad:af:75:6f:3a:f8:0f:fc:63:52:1d:3a:b3:01:cc:f2:3b:
         28:7f:92:ff:14:58:28:cb:50:b2:7f:de:46:f1:c9:cf:cd:80:
         bf:35:fa:aa:5d:02:59:bc:ac:3f:29:33:5a:68:04:d7:e3:54:
         ed:6c:78:b8:ae:58:f5:25:20:58:d2:c4:73:73:d8:b2:37:f9:
         f4:c6:33:20:d9:f3:43:6a:f3:55:a1:45:dc:ae:7d:97:86:9b:
         12:16:a4:b8:d4:3e:46:59:6f:60:f2:2f:52:a5:71:58:b9:35:
         25:8d:46:78:b5:ef:b2:53:68:31:0a:19:ca:9a:b5:8c:a7:1f:
         80:05:2f:16:3d:53:54:46:3f:17:b8:f7:e3:f2:7a:b1:7e:2f:
         6f:7d:99:a9:d1:e6:71:2d:f4:aa:5c:03:03:a3:57:e8:c3:92:
         6a:5a:1a:13:d9:3d:0f:80:de:56:70:80:51:86:1c:41:81:3d:
         bf:0a:66:42:00:f8:de:10:f2:c2:4f:13:5b:51:69:4d:70:5c:
         b7:09:6e:f2:d5:ff:59:36:36:68:4f:39:f4:2b:77:fd:97:6c:
         90:c1:c4:40:2b:5b:85:5b:d0:74:0c:39:15:b3:f4:92:ed:54:
         06:99:07:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:21:13 2025 by rpki-client