Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/de5584ed-ea80-37e1-afe3-40f15ac00c46.roa
File:                     de5584ed-ea80-37e1-afe3-40f15ac00c46.roa (raw, json)
Hash identifier:          s6slTWdLqDVQBEWjIl0Xf/bfAOMkMzs3P+N5uIubQYA=
Subject key identifier:   B0:4D:16:C5:FF:32:29:85:9B:6B:79:79:82:C2:EE:3C:3C:B1:26:CC
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B29936DB1C8CE0A11C9715780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/de5584ed-ea80-37e1-afe3-40f15ac00c46.roa
Signing time:             Thu 11 Sep 2025 19:52:54 +0000
ROA not before:           Thu 11 Sep 2025 19:52:54 +0000
ROA not after:            Wed 10 Dec 2025 20:52:54 +0000
asID:                     54253
IP address blocks:        2603:c054:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:93:6d:b1:c8:ce:0a:11:c9:71:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 11 19:52:54 2025 GMT
            Not After : Dec 10 20:52:54 2025 GMT
        Subject: CN=1e05b707-b323-4bb1-b6d8-c613ec160a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7b:2b:5a:a8:df:bf:e2:14:86:a4:ce:82:e8:
                    c3:1d:0f:a5:31:d4:6f:9d:ec:45:93:90:0b:31:63:
                    96:57:5c:ca:95:5d:1e:ff:28:9d:5f:99:b2:04:5a:
                    23:02:60:2a:5e:62:5d:42:a0:76:57:19:3d:24:f0:
                    e1:4b:ea:de:bf:21:fc:eb:76:1b:20:6c:2e:52:7b:
                    27:29:9b:af:4f:03:a3:ed:2d:e6:70:98:f8:c9:f9:
                    16:63:28:7b:c4:10:c9:3d:ee:f0:38:38:94:08:37:
                    f5:12:59:97:e6:19:fc:4f:e9:2b:fb:77:b3:03:f3:
                    70:bf:1b:45:03:9e:30:5d:7d:90:f6:a1:a0:97:1c:
                    b0:02:71:1b:a6:8b:f9:68:f4:52:b2:7a:96:a5:af:
                    f5:de:af:56:8c:38:3d:24:14:84:e2:43:c5:fb:5e:
                    83:ba:8b:ad:06:d6:ad:42:a1:3a:cf:c5:99:9d:d5:
                    11:6d:3d:fc:cf:c2:be:f3:55:08:74:09:66:ee:30:
                    ca:88:4b:41:1a:db:98:10:de:bf:f1:54:70:7b:ad:
                    28:c0:6a:73:66:b5:14:93:f1:c3:d4:eb:4d:61:5c:
                    a7:a5:65:c2:88:ae:2d:9b:85:7d:1b:70:db:4a:86:
                    42:7a:75:25:40:ac:39:74:a7:b4:8d:36:7f:d0:6e:
                    a2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4D:16:C5:FF:32:29:85:9B:6B:79:79:82:C2:EE:3C:3C:B1:26:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/de5584ed-ea80-37e1-afe3-40f15ac00c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c054:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:da:78:b9:d0:3a:64:4c:f1:af:39:8b:c1:36:0e:77:fd:63:
         63:bb:b0:b1:95:b7:56:cf:11:27:7a:15:b6:31:14:b9:d1:74:
         e6:f7:97:e9:10:2b:ce:f9:1d:e5:02:9d:f1:4d:f7:ab:2c:bf:
         02:66:0c:00:c8:6d:4e:96:b9:d7:41:99:6b:c8:ff:77:e3:d6:
         f8:0a:28:6c:1f:5a:5b:d1:8e:df:c1:a5:32:b8:b8:90:ad:f0:
         2d:ac:2c:31:35:c9:2a:2c:98:50:76:11:2e:b9:2f:5f:37:85:
         db:c4:0c:1f:bc:f6:64:65:d9:a4:6b:13:6d:8a:b8:67:7b:c8:
         f1:c4:18:15:f2:8f:3c:fe:15:30:d0:87:fe:18:e8:2a:86:f6:
         1c:b6:11:c7:58:82:34:6c:de:18:3b:74:35:d4:75:64:6a:7b:
         6a:93:89:42:2b:db:73:f7:0b:ba:4d:4c:08:1d:ee:16:57:35:
         b2:1d:ed:1e:2e:74:27:25:e0:a8:7d:77:00:37:86:1b:09:63:
         f4:ed:94:1c:ff:71:9a:ac:ef:bb:dc:bc:9a:65:12:c4:42:30:
         e7:c1:13:c6:eb:ea:f1:db:22:c7:7c:c5:24:2e:b9:59:9c:b6:
         f0:71:52:3e:34:57:37:a5:fe:cd:b1:de:97:85:04:a2:18:57:
         f4:d8:a7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:12:47 2025 by rpki-client