Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0cfd1a00-299c-3be1-8d40-094dbb15ea9a.roa
File:                     0cfd1a00-299c-3be1-8d40-094dbb15ea9a.roa (raw, json)
Hash identifier:          byFjEUKSdb7t/D1Lgt6W+an95ij12Zrr6Ih1z27Fp/0=
Subject key identifier:   55:80:05:CD:06:4A:20:F1:6B:7A:0A:D4:18:C2:54:2A:32:26:36:C7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E7A64F373E3420241A93A5280
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0cfd1a00-299c-3be1-8d40-094dbb15ea9a.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     31898
IP address blocks:        2603:c001:7000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:f3:73:e3:42:02:41:a9:3a:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=0ecd529e-5590-4f34-a9ea-860433623139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:73:82:e0:48:fa:03:dc:0b:04:1d:0c:14:0f:
                    65:a0:84:b2:62:78:12:7a:f6:f2:10:5b:44:c2:e1:
                    0a:d1:1b:58:c5:4e:c1:71:07:38:63:6b:92:ae:ad:
                    24:63:d2:7f:d4:99:29:59:77:06:53:72:e6:8c:31:
                    08:72:72:fe:b3:8f:22:22:66:cc:37:b8:3a:b6:55:
                    e6:df:16:c8:b6:37:16:ed:60:49:39:8f:ed:9a:44:
                    bc:9b:17:2a:6f:82:53:cf:01:d4:78:4c:38:3f:37:
                    66:cb:0d:03:79:05:cc:39:93:ff:b9:7e:07:79:9d:
                    6e:0c:96:78:10:c9:db:5b:ba:30:a7:0b:65:58:a2:
                    a7:33:f3:10:3c:c2:b7:02:9c:f7:2a:69:70:76:69:
                    7d:76:ad:0d:17:e0:82:e5:2d:20:ce:19:a5:e8:a4:
                    a8:1f:6d:e2:41:e2:7e:60:8d:f1:5a:de:86:ed:4b:
                    1e:16:72:47:e7:93:46:c7:ec:fb:b2:9e:96:5f:ec:
                    d5:24:d8:6c:54:f2:cb:ab:d2:6b:a5:ed:e0:76:f1:
                    44:a9:07:6d:75:f7:0b:84:9c:2f:3d:2a:7c:ab:3c:
                    eb:24:98:82:56:59:dd:3d:8f:93:fc:86:dc:19:cf:
                    29:af:1f:1a:09:e7:65:c1:16:c5:55:f9:6f:a3:6e:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:80:05:CD:06:4A:20:F1:6B:7A:0A:D4:18:C2:54:2A:32:26:36:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0cfd1a00-299c-3be1-8d40-094dbb15ea9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:7000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:1a:89:0f:8d:3d:a8:0c:64:83:d0:c7:c7:fb:bb:3e:e3:8f:
         1d:20:49:b3:3b:d4:f5:51:5f:f5:cb:79:30:f8:89:f0:20:9b:
         52:5c:18:4c:d8:e2:45:d5:0c:b4:cb:12:d0:ef:4b:55:0f:6d:
         e2:5b:34:4b:85:24:63:a6:e3:70:a1:d1:ae:0c:42:3c:e4:44:
         e8:16:c2:02:ff:34:8c:cf:27:5f:d5:45:61:7c:b2:37:41:8b:
         c2:e4:84:ec:b9:ae:2d:bd:e6:de:59:36:a6:dd:56:c4:b7:78:
         c3:55:df:4b:4f:53:17:00:d3:bc:b3:1b:53:c8:91:a6:26:68:
         96:82:37:5c:eb:4b:bc:42:40:25:2c:1b:c9:a8:0c:f7:90:f7:
         45:93:28:c2:3a:48:74:bc:79:3d:96:a1:f9:2c:f7:65:fd:3b:
         3e:b9:b4:e0:ed:bf:66:f1:e1:8c:1f:53:59:a6:fc:05:4a:45:
         2f:7f:c8:24:6d:fc:c6:c1:f0:96:b1:f4:fa:a1:c3:c2:b3:b9:
         da:8f:28:37:f5:a9:d1:00:d7:64:b3:e4:b3:99:e5:69:0d:1f:
         15:be:a7:85:4e:e0:76:91:30:62:84:74:51:44:33:33:bc:b8:
         89:6e:f7:f9:93:44:a2:d8:90:07:c6:a8:ae:5a:ee:9c:32:7d:
         36:e7:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:52:16 2026 by rpki-client