Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/04f71b3b-ebfa-3d8c-9de0-ea1786756b56.roa
File:                     04f71b3b-ebfa-3d8c-9de0-ea1786756b56.roa (raw, json)
Hash identifier:          CWVotQDQE+15uiS+vWQepGETqivv/ulzSyzJdtWMmf8=
Subject key identifier:   59:56:28:8A:5C:B8:98:8B:D0:67:44:B7:61:39:02:EB:24:4C:8C:93
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584ADE438A799692508FB8246D00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/04f71b3b-ebfa-3d8c-9de0-ea1786756b56.roa
Signing time:             Fri 15 Aug 2025 20:26:18 +0000
ROA not before:           Fri 15 Aug 2025 20:26:18 +0000
ROA not after:            Thu 13 Nov 2025 21:26:18 +0000
asID:                     31898
IP address blocks:        2603:c002:1c00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:43:8a:79:96:92:50:8f:b8:24:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 15 20:26:18 2025 GMT
            Not After : Nov 13 21:26:18 2025 GMT
        Subject: CN=6c4ff0ee-2da3-4332-809d-70c8f6a6ed2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:45:b5:11:3d:ad:5a:01:16:fe:8d:98:70:3a:
                    21:29:89:ee:43:c4:e0:bf:f0:eb:1a:bc:85:b3:a7:
                    ae:bf:ad:b9:82:d2:3e:57:37:1f:30:dc:38:7d:80:
                    14:26:07:68:5b:8f:91:d0:36:49:a0:e3:c5:62:7a:
                    47:59:2d:78:fa:91:ef:51:c0:63:0c:4a:38:0d:02:
                    40:7d:58:fd:51:d2:aa:5b:48:9c:e3:1e:17:01:2b:
                    8d:f7:dc:3a:63:23:a7:5a:51:b4:34:6c:1f:14:4f:
                    04:5c:ef:85:16:44:f8:f4:e2:f7:d5:16:4e:36:3d:
                    2d:40:81:a8:60:68:c5:27:ac:60:88:a8:ca:30:01:
                    09:be:db:9d:75:81:a7:1e:d4:ae:99:65:39:c6:fc:
                    ae:6a:24:12:7c:3e:0d:b2:60:15:43:85:50:86:a8:
                    71:fc:1f:37:1c:55:6d:b3:4d:da:80:9c:d3:f4:06:
                    27:14:9c:44:d1:80:a2:54:74:5a:7c:78:20:bd:13:
                    11:14:fe:54:7d:c8:a4:e9:47:5e:dd:3a:71:8f:b1:
                    ff:6e:49:2e:02:e5:54:27:f2:e2:95:0e:a9:c0:5a:
                    27:27:de:c3:b4:56:a7:8a:ba:13:48:2b:dd:51:f5:
                    c7:03:10:21:35:b4:bd:2a:4f:25:41:d9:00:eb:ef:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:56:28:8A:5C:B8:98:8B:D0:67:44:B7:61:39:02:EB:24:4C:8C:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/04f71b3b-ebfa-3d8c-9de0-ea1786756b56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:1c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:9e:30:91:b3:56:77:1c:62:eb:fb:bd:2c:d2:24:9a:8d:e4:
         c5:da:f7:82:6c:a2:17:44:75:b1:aa:c3:fc:c2:9e:c6:8b:76:
         cb:52:0e:c8:b5:ee:9e:83:d5:ac:8e:83:00:84:d1:c9:6d:de:
         af:39:79:a7:e6:9e:97:ce:bd:a9:7b:f6:fc:6d:c2:77:c9:df:
         40:18:4d:60:43:8a:16:83:2b:41:2e:77:0c:03:4d:23:5d:0e:
         66:51:45:cd:51:bf:39:82:b4:51:27:db:e3:ed:34:89:b3:96:
         b8:e1:8b:ab:93:f4:b6:21:98:46:7e:f3:e7:01:d6:36:5b:41:
         f8:33:85:e0:2b:9f:71:89:c0:73:49:e4:e2:d7:b7:d0:67:49:
         b6:b1:39:af:89:22:39:09:ad:bd:f7:9a:8f:40:73:21:d9:46:
         00:9c:ab:65:9a:ba:55:ac:b6:53:e5:38:42:68:73:61:66:97:
         30:e6:e0:a9:03:06:aa:18:5a:df:dd:91:50:64:43:9a:24:d5:
         49:84:a4:a4:79:14:be:e6:af:f9:e3:a0:62:1c:97:f2:b8:a0:
         ec:13:0f:97:9b:73:1a:5a:43:b8:ea:4b:eb:e3:30:a4:76:8e:
         c8:8a:c9:9a:a4:b5:cd:41:3d:23:95:45:33:17:b3:c0:ad:ad:
         d6:41:47:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:42:46 2025 by rpki-client