Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/daa6ab01-5dd5-3fb1-8725-3742b2b512d5.roa
File:                     daa6ab01-5dd5-3fb1-8725-3742b2b512d5.roa (raw, json)
Hash identifier:          lAiA7goXQohIqzU/lR0+CdpJZOnb8CETkh6C6WNhCjM=
Subject key identifier:   08:DC:91:C0:4F:BB:79:94:19:78:A7:28:25:1F:14:55:FB:83:0F:30
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B29938414565D17251F8EF800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/daa6ab01-5dd5-3fb1-8725-3742b2b512d5.roa
Signing time:             Thu 11 Sep 2025 19:53:04 +0000
ROA not before:           Thu 11 Sep 2025 19:53:04 +0000
ROA not after:            Wed 10 Dec 2025 20:53:04 +0000
asID:                     54253
IP address blocks:        2603:c054:2800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:93:84:14:56:5d:17:25:1f:8e:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 11 19:53:04 2025 GMT
            Not After : Dec 10 20:53:04 2025 GMT
        Subject: CN=b334c27a-5373-43ae-a0e5-14623608fd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:4f:26:55:c3:6b:67:91:65:28:80:9a:41:
                    43:cb:88:64:4a:91:fb:2c:b3:7a:e7:15:ff:16:1e:
                    10:c2:46:55:86:9b:e1:9c:36:21:09:ff:f0:56:f9:
                    d9:3b:8b:48:4c:ff:9c:ad:ed:f9:ec:72:d2:ba:e7:
                    c9:f5:3f:5e:b6:69:d7:41:d7:e8:d7:34:22:7f:a1:
                    cb:24:6f:85:e5:22:95:cc:6e:db:16:ab:08:d5:45:
                    ad:ab:db:43:15:b5:92:49:67:84:61:94:f8:2d:f3:
                    9a:3f:d4:44:e5:ea:c8:10:6a:84:c2:01:a7:83:b4:
                    47:3e:d2:19:a9:d0:3a:ed:12:ea:52:cc:97:6a:7f:
                    47:b5:c5:71:12:e5:d1:f1:4c:4a:83:43:3e:98:8b:
                    0e:66:0d:12:ce:42:70:89:ff:4e:32:7f:15:4d:68:
                    85:42:0b:bb:25:9a:8e:ba:0e:85:31:a6:e7:aa:79:
                    1f:80:7c:32:78:2c:e2:bc:d0:42:6d:88:1e:16:4d:
                    1e:0d:4b:0a:92:77:b2:3b:70:b0:89:bd:88:9e:14:
                    ff:96:a8:c0:91:fa:0b:2b:de:e7:29:1e:ce:f5:9f:
                    81:1b:9a:10:7b:f7:b4:6f:eb:3c:55:50:d7:52:c8:
                    14:f0:a0:41:60:2e:f6:c3:44:e6:a9:34:ae:43:09:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DC:91:C0:4F:BB:79:94:19:78:A7:28:25:1F:14:55:FB:83:0F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/daa6ab01-5dd5-3fb1-8725-3742b2b512d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c054:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:61:59:d1:94:8d:f0:7d:ea:2c:46:6f:ae:42:7f:cf:33:ba:
         e9:fa:17:bc:27:0c:7e:ff:0e:5a:f6:1e:8c:ca:cc:38:38:2b:
         d2:35:24:d5:cf:b6:eb:b7:5e:9d:47:d9:7d:2a:7e:4e:dd:28:
         b2:af:9a:78:b2:fb:3b:ed:95:6f:08:14:94:64:e1:0b:aa:d2:
         32:2e:20:97:fd:81:4a:d0:08:39:02:fd:fc:f4:dd:15:11:40:
         04:41:45:51:eb:cc:68:8a:96:8a:86:37:aa:91:4f:6a:a6:6a:
         92:5c:89:13:89:e4:f2:63:7b:4a:69:53:44:d1:23:b9:a1:09:
         27:22:f1:b0:ef:0e:d6:c0:e3:72:31:f9:67:85:02:d4:0d:f5:
         35:94:e9:69:8c:07:cd:21:b5:84:0e:92:73:1e:ac:57:c2:24:
         d4:3a:a6:0b:74:52:db:c5:18:4d:29:5c:10:c8:bc:e4:bf:4f:
         08:7c:b8:b6:92:2b:b0:d9:50:df:9e:6e:1a:91:83:10:70:86:
         e2:fd:01:93:a1:4d:59:67:22:60:d8:15:f9:50:24:21:ba:cc:
         2c:db:47:e0:f5:d2:50:23:7d:eb:8d:6a:4b:c1:0d:96:0d:22:
         be:9e:0f:ea:ed:98:4a:65:2e:5b:72:03:50:13:96:a6:f8:f7:
         68:7f:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:14:05 2025 by rpki-client