Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07ed8812-6b0e-3ea7-a170-410f42141819.roa
File:                     07ed8812-6b0e-3ea7-a170-410f42141819.roa (raw, json)
Hash identifier:          14kIIWRD51gNlY/Ef/474E12K+al7h6mi480zSAauEc=
Subject key identifier:   11:F3:BE:53:D1:C5:BF:DD:A9:4A:1D:21:DC:5A:CD:D1:FC:A5:C9:D4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6DD4C55CD38FBBB9F95CDD80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07ed8812-6b0e-3ea7-a170-410f42141819.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c000:1a00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c5:5c:d3:8f:bb:b9:f9:5c:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=7797d4fd-2dff-4889-994d-25b4c52b68e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:dc:ce:8a:7f:b0:b7:d9:0b:96:e8:ee:5c:fd:
                    e6:ac:4b:3a:71:f3:34:9b:55:be:22:ec:d3:c2:5d:
                    a4:7e:54:db:b4:a2:09:42:94:c2:e1:90:9c:99:7d:
                    b1:e0:b5:f5:d3:3b:a2:4a:5c:c8:3b:ae:7f:ae:43:
                    3a:f3:a6:65:19:bd:6b:f6:9f:a5:de:9c:0d:8c:da:
                    80:42:2c:ad:cb:99:2b:5e:d5:6b:94:ab:de:7a:31:
                    09:dd:69:ee:57:eb:3a:72:0f:95:85:be:1c:a0:7d:
                    a6:7c:b9:4c:db:49:b4:ff:a0:dd:ec:e2:8f:fc:14:
                    20:63:32:41:fc:f3:91:3b:17:d9:71:84:57:8d:cf:
                    15:eb:46:13:cf:fa:68:41:96:8c:c3:d7:92:35:71:
                    e9:cd:c8:82:33:42:80:8a:a5:20:b0:dc:3b:be:04:
                    96:22:d4:cc:f8:ab:ae:94:50:39:49:b0:93:d8:6a:
                    ef:1f:2b:14:11:cb:22:71:2b:02:e1:83:93:23:2c:
                    aa:a7:4a:e4:5d:b1:25:f8:7f:8c:c5:c9:87:da:57:
                    3e:b6:35:b6:d9:d2:cb:db:d9:4c:28:2c:60:af:02:
                    c2:42:2d:83:da:72:96:86:2d:77:24:5f:95:8a:a3:
                    4f:d9:14:9b:34:d2:a5:47:e1:c0:8b:ed:55:6c:7c:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F3:BE:53:D1:C5:BF:DD:A9:4A:1D:21:DC:5A:CD:D1:FC:A5:C9:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07ed8812-6b0e-3ea7-a170-410f42141819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:1a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ec:40:4f:1e:0c:2c:8b:a6:01:4a:7e:fb:92:91:69:9c:85:
         4e:f5:08:a4:17:89:88:81:38:60:12:35:0a:78:7a:41:3c:6e:
         1b:1a:e8:1b:54:a3:a8:db:37:97:ff:51:e3:d3:38:48:31:f6:
         b9:b7:90:a4:ce:eb:b9:d1:b1:78:4e:77:e3:b0:77:36:d6:e3:
         8f:83:67:d2:07:f8:8e:07:57:00:c5:37:48:ea:e5:20:a1:82:
         e7:14:72:1d:ce:c3:de:3b:8d:67:66:55:63:26:93:fc:53:3e:
         68:d3:4d:d2:76:65:64:07:8e:63:eb:bc:9a:23:17:c2:e7:3f:
         ac:fb:0d:6f:b7:31:95:ea:ba:63:ec:a6:a2:88:f8:5e:f6:c0:
         4a:72:d3:9f:53:ac:e5:8d:60:43:57:ca:41:01:4c:e8:16:fe:
         1b:3b:46:ab:1d:e2:6b:1b:96:8d:8c:59:22:2a:20:f4:c3:79:
         cc:df:65:36:80:92:dc:c1:e2:53:77:0e:94:ae:bd:90:99:c7:
         b4:bf:46:6c:7e:4a:41:f5:17:df:c4:4c:f2:18:23:ea:05:a8:
         ff:a0:d5:ca:ff:62:39:81:98:96:84:2b:dc:ee:ad:3b:5a:8e:
         38:8d:d1:ed:27:85:1c:54:68:b7:e6:47:51:e4:76:9e:5c:ce:
         cf:49:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:50:50 2026 by rpki-client