Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e492e1a0-8d7b-378d-b269-1df8f012caeb.roa
File:                     e492e1a0-8d7b-378d-b269-1df8f012caeb.roa (raw, json)
Hash identifier:          tIJGTBujSOBoioOkJKfjssebGFN5SOi3J81b8B7EjVE=
Subject key identifier:   5A:FB:51:A5:BF:77:3D:01:3B:BC:0E:F8:0D:40:E1:DF:39:50:B3:65
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AFD4472BB00C9662DED713980
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e492e1a0-8d7b-378d-b269-1df8f012caeb.roa
Signing time:             Tue 26 Aug 2025 22:58:11 +0000
ROA not before:           Tue 26 Aug 2025 22:58:11 +0000
ROA not after:            Mon 24 Nov 2025 23:58:11 +0000
asID:                     31898
IP address blocks:        2603:c002:a210::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fd:44:72:bb:00:c9:66:2d:ed:71:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 26 22:58:11 2025 GMT
            Not After : Nov 24 23:58:11 2025 GMT
        Subject: CN=990bce2b-55de-4339-b6e1-62ba8bd845b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:7d:2d:2c:e9:00:02:42:a8:41:67:d8:38:
                    ee:03:5e:af:54:84:6d:e0:b0:b9:ef:d1:e8:57:7f:
                    69:1d:48:00:0c:9c:ca:3b:a0:d1:01:d7:30:9b:b5:
                    e6:13:48:25:cf:ac:9c:b3:f2:27:ed:43:4c:c4:c3:
                    b7:d9:1c:ca:24:13:d8:46:e5:52:30:a5:af:f7:ab:
                    24:6c:c7:b4:33:dc:b3:29:e3:34:12:7c:da:5c:9b:
                    a2:ed:4d:d0:8f:bd:6e:52:f5:b9:66:c4:6b:f7:77:
                    e0:75:72:a4:95:22:b9:15:d2:63:84:4a:29:54:e5:
                    39:eb:60:a0:67:a7:9a:e3:60:53:99:cf:ba:9a:f0:
                    54:5a:9c:ce:95:1f:8f:ff:9c:d1:c4:41:c4:67:ce:
                    51:a4:7d:69:68:87:97:cc:24:d2:27:63:92:46:80:
                    68:76:b7:e7:f6:9f:4a:99:4e:e8:76:ec:19:ae:11:
                    c6:42:06:1c:38:9e:49:c5:bd:3a:76:3e:e1:ae:ae:
                    2d:54:1f:eb:6a:eb:53:86:68:a4:f8:c5:02:56:03:
                    e7:72:64:c1:da:df:11:dd:bd:85:de:19:d4:5a:86:
                    ef:53:97:82:2a:71:a3:ea:97:0d:6c:ae:9d:3d:d0:
                    a6:7b:83:88:6b:6f:84:03:fc:5c:9f:76:8d:67:78:
                    46:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FB:51:A5:BF:77:3D:01:3B:BC:0E:F8:0D:40:E1:DF:39:50:B3:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e492e1a0-8d7b-378d-b269-1df8f012caeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:a210::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:34:05:81:91:3b:49:3c:95:71:f4:9f:04:9c:19:65:e5:a5:
         54:55:bf:2c:ff:80:43:05:ff:ee:8e:db:57:fa:82:09:6f:93:
         33:7c:81:d2:ec:c5:6c:65:75:67:61:43:8d:5a:a7:6e:75:c2:
         ed:55:37:05:47:aa:9d:fe:b4:fd:43:0a:b5:68:e7:fe:ac:36:
         f8:7b:bb:f9:9c:1a:3c:7c:c8:24:85:22:4d:03:bc:c4:46:6a:
         4b:67:8b:69:19:c5:c6:62:27:5c:8d:90:26:f0:d5:13:c3:95:
         8d:00:1d:8d:0b:b9:2f:2b:ef:d3:bb:2f:ab:04:90:72:79:83:
         69:86:60:80:08:70:63:b4:19:58:4b:fd:47:98:7b:3e:1d:0e:
         1d:7c:8f:25:6d:2e:1a:68:47:06:06:c9:96:be:bd:c2:0e:67:
         c7:66:d6:86:72:c7:1b:43:21:b8:58:dd:3c:a5:92:96:e6:31:
         3f:fa:cc:a6:fd:73:62:8b:4a:23:7c:08:33:db:c0:23:3b:69:
         35:12:c1:cf:09:d3:a2:82:6f:59:26:a3:03:8a:c4:0e:76:36:
         db:54:ad:54:31:4f:cb:65:10:10:85:de:98:38:4f:92:85:0a:
         c6:ae:2f:6e:8b:b4:9f:a3:a0:d8:e1:84:8e:dc:00:ba:36:9d:
         a6:74:57:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:18:18 2025 by rpki-client