Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01ea527e-53f5-3f02-89f6-6eef7f776df5.roa
File:                     01ea527e-53f5-3f02-89f6-6eef7f776df5.roa (raw, json)
Hash identifier:          CLnOJMRbJKUhpKaQoM80IRc1FM4PpN84/FObx+Ik9cE=
Subject key identifier:   95:87:DD:B3:47:E4:9E:41:53:92:54:F6:6E:71:47:D6:CB:B2:5D:A5
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE9780D73062E07F69B58CA80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01ea527e-53f5-3f02-89f6-6eef7f776df5.roa
Signing time:             Tue 19 Aug 2025 20:46:00 +0000
ROA not before:           Tue 19 Aug 2025 20:46:00 +0000
ROA not after:            Mon 17 Nov 2025 21:46:00 +0000
asID:                     31898
IP address blocks:        2603:c002:8500::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:78:0d:73:06:2e:07:f6:9b:58:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 19 20:46:00 2025 GMT
            Not After : Nov 17 21:46:00 2025 GMT
        Subject: CN=4b469f19-a2b4-45fe-a0ea-b6628d60f46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:37:85:87:bb:0b:5f:45:60:79:c8:b8:b9:ee:
                    a8:7c:a5:ac:88:8c:01:0e:c4:45:6a:26:b8:9a:37:
                    94:e5:43:18:38:79:5c:48:1a:eb:7e:53:22:48:69:
                    ac:da:aa:e7:97:2a:56:a7:a8:75:1d:33:62:9f:15:
                    1b:aa:c8:9c:ae:eb:36:9e:9b:44:4d:38:95:85:2d:
                    f0:3c:0a:8a:90:27:76:4a:e7:2c:91:55:a9:1e:b3:
                    94:c1:c8:7f:da:f7:d1:b1:45:01:81:cc:40:f8:29:
                    c9:46:45:d3:41:36:e0:d4:31:81:8c:6a:4b:19:55:
                    4d:e6:6c:5b:b5:98:40:56:73:59:27:d1:ed:83:28:
                    06:10:dc:94:00:bc:42:9e:50:dd:23:39:a2:fb:ce:
                    56:34:e1:e7:72:63:67:fe:c3:44:8b:84:67:0b:27:
                    f5:6b:ed:5e:b8:b7:d9:b3:cc:bd:91:76:ef:88:74:
                    33:0c:b2:4f:3b:88:d9:2e:b4:d3:21:34:bf:37:fc:
                    f2:87:93:81:7b:b9:be:d2:e4:89:d1:60:57:ff:5f:
                    f9:21:ba:ff:db:d1:29:4f:8f:3a:44:ef:a0:47:f3:
                    15:67:14:e7:18:cb:93:16:5e:f1:50:9e:69:f1:33:
                    63:10:be:12:d4:de:e5:28:0b:33:61:16:fb:2e:57:
                    17:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:87:DD:B3:47:E4:9E:41:53:92:54:F6:6E:71:47:D6:CB:B2:5D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01ea527e-53f5-3f02-89f6-6eef7f776df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:8500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:28:85:e9:79:0d:42:75:eb:76:d6:81:1d:33:f2:6b:4a:12:
         b6:29:ee:70:17:f8:20:aa:0a:63:84:07:5d:af:df:8a:ab:aa:
         f8:48:d9:38:10:8e:09:c1:c9:01:d7:50:66:d9:24:d9:6a:02:
         97:cd:76:88:ad:c4:05:05:ed:37:1d:40:11:e8:31:85:51:ae:
         b9:72:7e:e7:c9:2b:6a:33:56:ae:ff:cc:d7:01:fb:f5:9f:5d:
         8e:35:d4:eb:b0:50:54:ef:01:ac:b2:04:8a:7f:52:68:01:39:
         3d:67:3a:41:54:af:be:17:8d:ae:65:6e:fb:c3:ff:97:d4:53:
         a3:5a:56:3d:eb:39:a9:be:78:ef:6c:50:ff:a3:73:d4:a1:e6:
         d7:8d:50:0b:7d:5c:53:80:19:ec:ec:53:0b:4b:22:07:5d:fa:
         b5:87:b5:2b:59:5b:fa:6c:f1:4c:6c:a0:25:58:ba:03:32:10:
         9a:d1:c2:fa:13:38:32:8f:03:23:24:d9:23:e8:1f:14:cc:b6:
         dc:d6:ba:49:64:fc:99:b7:27:a8:55:14:67:f6:0b:b7:28:bc:
         a9:72:85:c0:44:65:af:f1:e0:c9:2a:13:1b:c5:7a:4f:7a:cb:
         83:e8:6b:c6:8d:a3:52:ae:37:8f:3e:54:19:7a:6e:ed:98:5a:
         41:57:a5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:20:54 2025 by rpki-client