Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dc90ed21-8987-32a3-9363-5e44cab34000.roa
File:                     dc90ed21-8987-32a3-9363-5e44cab34000.roa (raw, json)
Hash identifier:          KWCUbGO3VBqu1ynhuysRVtWEDRbdhaSetjvCRwByWrc=
Subject key identifier:   E2:5F:75:D6:EE:B6:84:B4:20:2F:D8:B5:86:8D:5B:71:0A:73:E5:6A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B299338FCD9F3A79A42D067A0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dc90ed21-8987-32a3-9363-5e44cab34000.roa
Signing time:             Thu 11 Sep 2025 19:52:29 +0000
ROA not before:           Thu 11 Sep 2025 19:52:29 +0000
ROA not after:            Wed 10 Dec 2025 20:52:29 +0000
asID:                     54253
IP address blocks:        2603:c048:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:93:38:fc:d9:f3:a7:9a:42:d0:67:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 11 19:52:29 2025 GMT
            Not After : Dec 10 20:52:29 2025 GMT
        Subject: CN=f431eaa1-39f1-420c-a225-8afc08c62e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:82:9f:54:90:60:2b:b3:65:30:92:37:c0:af:
                    58:d0:64:ae:84:a7:77:b3:c2:82:14:78:27:fd:f3:
                    c9:2e:40:2c:60:2b:3e:70:3f:7f:b1:78:22:de:91:
                    22:47:c1:87:ed:6f:c8:b9:95:fc:78:9f:b0:8d:41:
                    b0:6a:26:ec:f2:f5:e3:5a:b5:c2:00:fa:07:da:63:
                    59:d3:de:9c:8c:47:4c:6f:44:80:5b:18:29:04:ca:
                    42:39:01:ac:e9:10:61:04:18:33:7f:5c:c3:e6:75:
                    b6:66:96:0a:37:0a:81:fa:7d:0e:3d:b3:44:56:e5:
                    b2:dc:2d:6d:5a:90:43:21:eb:92:47:37:5a:a2:7a:
                    f3:d4:bd:a6:d0:1d:ef:5c:2d:a3:bf:7c:75:43:25:
                    0c:74:61:f6:4c:da:b1:7e:34:1e:15:30:31:62:c4:
                    5f:30:f6:ec:b0:41:39:0a:fc:7c:e8:76:57:80:37:
                    22:e1:61:1d:06:52:92:06:02:92:b9:3b:47:c6:75:
                    72:9b:8d:e3:f0:6d:ae:f4:fe:71:c5:90:fb:f7:88:
                    80:fb:ce:44:4d:f9:1b:fb:d2:9b:02:a8:14:7f:d1:
                    8a:31:fb:3c:6c:e2:a1:3c:58:0e:5d:49:88:a1:06:
                    34:df:b5:af:c0:44:cc:16:85:a5:f0:00:cb:83:be:
                    61:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5F:75:D6:EE:B6:84:B4:20:2F:D8:B5:86:8D:5B:71:0A:73:E5:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dc90ed21-8987-32a3-9363-5e44cab34000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c048:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:59:5b:07:76:3f:19:25:5f:78:58:75:8e:14:b5:e3:76:ca:
         2a:3f:ab:54:de:b8:79:f1:a7:72:2e:a2:46:54:2a:a0:6a:07:
         31:74:01:44:62:eb:1a:5c:ff:83:d1:fd:4e:bd:9c:fb:93:a1:
         11:7e:05:0c:43:98:5e:23:01:e0:ad:6e:46:09:96:63:96:34:
         e0:44:2e:65:32:ac:f2:dd:0d:26:45:ab:a9:f5:87:55:7c:d8:
         28:c2:86:97:8c:ce:e4:8f:91:1d:5b:3e:f8:d2:2e:b4:5f:9f:
         60:aa:44:57:8b:28:ff:f8:83:1e:44:40:33:62:02:e4:8a:7b:
         ea:cc:17:e9:51:fb:01:f2:2b:c7:40:30:0f:5e:7f:9b:89:b1:
         f0:64:36:36:6c:c6:ae:65:ce:de:cb:0e:f4:8a:df:21:16:7d:
         18:a4:bc:36:45:2b:c3:70:86:42:e6:b5:45:ad:cb:f0:04:9b:
         3e:46:48:fc:67:47:f0:07:f0:2d:8e:0e:2b:68:d4:42:ba:91:
         60:70:ef:50:d3:cc:1c:5a:e4:9e:a1:6a:e6:6d:b4:e0:18:86:
         d3:98:11:62:95:44:89:5b:67:58:67:e7:b9:2f:15:88:99:32:
         12:85:99:17:da:59:8f:3c:44:c6:f8:ea:30:d6:59:7a:93:3a:
         75:32:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:14:03 2025 by rpki-client