Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3e899e4-a284-35af-9996-0a443382dccc.roa
File:                     d3e899e4-a284-35af-9996-0a443382dccc.roa (raw, json)
Hash identifier:          r5iRCYjbeIJ3bFxmpDlHtT/PneS6f91QJ4G8fg1JdDE=
Subject key identifier:   EF:F4:C6:2B:F7:A8:8C:D1:24:85:52:54:88:EC:79:16:77:F9:67:67
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B377B2D60A665AF9ACCAAFF80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3e899e4-a284-35af-9996-0a443382dccc.roa
Signing time:             Tue 16 Sep 2025 19:25:21 +0000
ROA not before:           Tue 16 Sep 2025 19:25:21 +0000
ROA not after:            Mon 15 Dec 2025 20:25:21 +0000
asID:                     54253
IP address blocks:        2603:c0f4:2900::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:37:7b:2d:60:a6:65:af:9a:cc:aa:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 16 19:25:21 2025 GMT
            Not After : Dec 15 20:25:21 2025 GMT
        Subject: CN=0a7856f5-8821-4dc7-b9a1-e38a968d1da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:f0:87:57:8d:df:21:57:02:2c:5f:51:02:
                    9a:ca:05:d8:ed:f1:06:f0:d7:39:ff:fd:80:7c:96:
                    cf:dc:8a:ac:3e:81:ce:72:49:0b:80:cf:9d:da:ce:
                    bc:9b:6f:b6:f7:b9:c1:69:3d:c3:0f:25:3c:9a:5a:
                    ad:54:84:05:f2:5b:f0:5d:44:0c:d7:13:37:71:25:
                    14:a5:02:0e:74:42:92:b0:b5:d0:8b:46:bc:78:cf:
                    5d:29:f2:68:39:44:1e:4c:e7:76:57:e4:54:6b:67:
                    4b:49:56:ce:e6:7c:5b:bd:a5:73:2b:b4:25:ba:b8:
                    d3:95:03:22:51:9c:00:df:51:41:33:a9:cd:69:9e:
                    fd:5a:18:91:0c:3a:dd:6f:0c:99:82:4b:4f:8a:7a:
                    6c:c9:b7:ab:0e:60:ae:e5:03:45:2f:6d:75:8e:be:
                    15:db:9c:be:4c:54:d7:1c:43:40:8d:52:ff:ae:af:
                    c5:45:1d:28:eb:7c:f1:51:f2:7d:cf:f3:98:78:79:
                    0f:d3:3a:cf:c2:17:81:c3:61:61:1c:a9:24:f3:23:
                    7f:ee:12:81:72:ad:62:ab:be:bd:5a:1e:0d:0c:83:
                    62:46:a5:4c:05:39:38:85:7a:99:39:f3:3c:91:05:
                    bd:4b:d6:7e:a0:9d:6d:f0:04:4c:1c:ee:e5:b7:b9:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F4:C6:2B:F7:A8:8C:D1:24:85:52:54:88:EC:79:16:77:F9:67:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3e899e4-a284-35af-9996-0a443382dccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f4:2900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a5:1e:c3:e5:9b:fd:ce:cc:a4:04:23:c9:ec:e0:8c:ee:0a:
         ea:12:cf:3f:d7:22:88:6f:55:0a:97:0a:21:16:f6:7c:f9:f1:
         10:12:f7:05:ca:6c:43:ad:a9:fc:8c:40:9b:57:d8:61:e6:90:
         9f:b4:5d:15:5a:81:81:d4:b1:38:dc:49:c1:c7:61:7b:fb:62:
         5f:ab:86:56:1e:0c:77:21:99:dc:99:2d:50:71:57:a5:8f:f5:
         90:8d:6e:50:ed:d1:34:8a:ac:db:54:6b:23:e9:d6:f2:51:95:
         eb:bf:1a:c8:83:3b:1f:75:8d:32:1c:8c:8a:3a:db:b7:0c:4f:
         80:59:69:19:1f:4a:fd:a3:65:0e:d7:49:74:79:dc:98:75:30:
         59:34:19:fa:35:48:5c:6f:27:32:a3:6b:35:f6:b8:1c:ca:26:
         91:24:b2:53:89:cf:40:1b:1a:bc:78:af:d2:43:71:ed:f4:5a:
         b5:65:19:55:2a:9a:e2:f5:4c:42:7a:f5:ad:87:32:4c:f3:0d:
         10:e8:54:ce:8f:10:4c:00:56:a0:d4:e1:c7:10:37:33:05:b9:
         d5:80:c0:05:44:de:93:0b:22:00:72:a4:e5:95:18:06:b6:c6:
         48:2e:db:fb:8c:8b:17:58:6f:02:a4:89:d0:27:36:a1:95:da:
         e3:15:98:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:12:46 2025 by rpki-client