Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaea04e-8ce0-3daf-a8b4-851fc532cb01.roa
File:                     cdaea04e-8ce0-3daf-a8b4-851fc532cb01.roa (raw, json)
Hash identifier:          z4Bu39w/67sV3NYwgz2z7gkhnQFQS5bcoBCiVRwPLGI=
Subject key identifier:   D3:1E:90:3F:9E:8F:D0:E4:1E:55:4A:45:6F:3D:1F:31:7C:89:C2:F4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B377B53D055FB8A45B51D3580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaea04e-8ce0-3daf-a8b4-851fc532cb01.roa
Signing time:             Tue 16 Sep 2025 19:25:39 +0000
ROA not before:           Tue 16 Sep 2025 19:25:39 +0000
ROA not after:            Mon 15 Dec 2025 20:25:39 +0000
asID:                     54253
IP address blocks:        2603:c0f5:8000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:37:7b:53:d0:55:fb:8a:45:b5:1d:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 16 19:25:39 2025 GMT
            Not After : Dec 15 20:25:39 2025 GMT
        Subject: CN=affe9113-ba02-46cd-b232-e574b7dcab13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e6:ea:83:4f:fb:0b:f5:33:e0:fe:e4:3d:5d:
                    3e:ef:1f:a8:3a:88:ac:1b:eb:03:21:a6:51:de:92:
                    3c:0e:bb:8b:e6:1d:a6:cd:49:8a:e1:a6:d2:33:f1:
                    86:0e:23:b9:e5:53:16:11:eb:8e:88:d1:1b:18:f1:
                    8a:fb:cc:28:41:c2:38:0c:d0:9b:e1:bb:a0:f4:19:
                    6f:4c:4e:60:f1:f0:a6:a2:09:be:a7:87:d8:a6:a6:
                    f3:fb:bb:3d:51:1f:5c:5b:19:9d:94:ce:24:4c:71:
                    e7:10:a6:0c:bf:f7:7c:f8:e8:e2:b9:a1:6e:09:f1:
                    c1:39:f2:bc:21:74:6f:ad:4e:29:5b:f7:bd:60:ff:
                    70:ff:a1:50:e9:d6:a0:58:94:03:41:63:ae:d2:69:
                    19:d6:50:57:9a:fd:e2:4f:86:49:58:29:4c:db:98:
                    af:92:85:9f:44:5c:a3:92:51:fa:e0:66:43:22:c8:
                    cd:0d:20:98:6c:2d:bf:27:59:e7:e8:6b:7d:e2:69:
                    d0:3e:30:9b:f1:73:c8:fb:39:99:fa:bc:2b:3d:08:
                    3e:97:31:51:aa:4c:2b:67:4d:70:15:5c:44:eb:0d:
                    2c:e6:e8:34:d0:60:4b:22:eb:18:06:f5:ac:a5:99:
                    c0:24:10:07:a4:ae:18:95:f4:ec:aa:e7:18:bf:c9:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1E:90:3F:9E:8F:D0:E4:1E:55:4A:45:6F:3D:1F:31:7C:89:C2:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaea04e-8ce0-3daf-a8b4-851fc532cb01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f5:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:01:82:6a:0e:29:52:14:c3:71:43:19:b9:f2:2f:60:f2:99:
         f1:89:73:d3:74:a2:f4:b2:bd:b4:c4:42:70:79:0c:cb:4b:22:
         e1:ff:42:ba:0b:f0:a8:14:c9:68:e7:ed:79:db:e7:53:bc:cb:
         c9:24:8a:75:31:5a:e1:b7:14:b2:fd:d2:c3:9b:81:52:28:7f:
         70:ca:bd:f8:ef:2a:3e:b0:45:1f:0e:a6:4c:57:80:d8:aa:83:
         1f:81:4a:a5:e3:87:d3:fd:a3:c5:8f:ff:45:89:93:3f:ff:98:
         11:d4:a8:f1:78:e8:49:f8:69:a0:60:2e:6a:06:b7:5f:4a:85:
         62:24:dd:86:5b:d7:d2:24:4c:9e:18:e5:e7:43:5f:e0:8d:43:
         e1:2a:42:41:c1:e3:0a:c2:da:40:5c:0a:86:60:8c:f2:0a:89:
         cd:3f:46:fe:09:ec:81:46:ae:38:ce:b7:63:cd:39:ba:4d:bb:
         e3:ef:b6:ab:f3:3d:4c:a6:cc:e0:94:a3:87:ed:e0:a9:9f:f8:
         0c:c7:ec:07:57:77:51:79:52:e3:0f:c9:c3:09:32:7b:97:12:
         c9:f6:b8:af:3a:b1:bc:c9:9e:85:58:3e:76:88:f4:99:5a:26:
         26:29:5a:b2:f6:73:d9:40:3a:10:11:6a:f0:d0:72:15:de:8d:
         15:ea:10:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:11:02 2025 by rpki-client