Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d4325ec-87d0-31ad-8361-ce3258759276.roa
File:                     0d4325ec-87d0-31ad-8361-ce3258759276.roa (raw, json)
Hash identifier:          ZaQQkg7n4fE+4owgZzDThl6ppROJ1VPCkePlSdyORA4=
Subject key identifier:   5B:39:15:D5:70:2B:31:28:25:43:25:DA:BD:06:08:F8:DA:FC:EB:7B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA79BB66897045D97A07B4600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d4325ec-87d0-31ad-8361-ce3258759276.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c060:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:b6:68:97:04:5d:97:a0:7b:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0a654191-59d9-4547-95db-f2708596b8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b1:c0:9a:a8:6f:05:50:38:29:07:0a:a8:25:
                    01:0d:39:72:df:b6:00:9a:9c:f4:51:8b:dc:7a:25:
                    5b:36:8a:0d:d2:f8:ba:99:a7:66:b4:ae:64:0d:7d:
                    a3:55:c5:7b:9e:b8:41:ff:c4:79:de:13:c7:f9:b0:
                    d8:1e:8e:ee:1b:84:9f:43:48:23:dc:25:6e:13:30:
                    7b:bb:f5:53:69:25:c9:8a:68:ba:08:bf:95:cf:65:
                    ad:c4:9e:10:17:ef:9a:07:b5:50:91:71:c3:e6:9f:
                    53:ab:8c:18:8f:97:e1:e1:28:e4:32:39:be:41:0d:
                    d7:d4:a6:28:1a:b5:86:55:da:f4:50:73:2e:6f:d7:
                    f9:79:b2:02:59:94:b8:a0:7a:d5:06:3d:f9:36:19:
                    95:49:a9:8e:2f:fb:9b:77:81:5b:36:c3:c8:aa:ef:
                    09:fd:f1:a7:f5:03:69:51:ac:92:1b:34:4f:d5:0c:
                    0a:c9:0b:6f:3a:d3:24:94:0d:5e:29:c5:2d:a9:1a:
                    28:8e:16:f5:d8:64:ec:f6:2a:57:8e:09:ce:60:02:
                    48:98:da:b6:99:77:4d:f6:8b:50:97:17:5d:6c:5f:
                    d1:7b:1b:1c:1b:7e:0c:a4:11:f3:0a:34:82:5a:26:
                    e6:d4:21:92:41:7b:3e:ea:f1:16:a6:6c:e6:a2:70:
                    78:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:39:15:D5:70:2B:31:28:25:43:25:DA:BD:06:08:F8:DA:FC:EB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d4325ec-87d0-31ad-8361-ce3258759276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c060:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:32:74:2f:bf:d3:90:97:74:96:b5:b1:e5:e1:08:00:57:08:
         87:46:2f:d6:e7:8a:0c:6c:55:77:fd:53:c7:dd:41:6f:be:f2:
         af:4f:27:11:14:3a:5a:57:cb:8f:9d:54:9e:44:e2:a4:01:ed:
         1b:a8:ea:4e:35:9e:9c:de:8d:b8:ed:6f:d4:0a:fe:ff:8a:93:
         e0:29:ab:b3:ab:2b:dd:aa:b2:8b:1d:91:c8:99:f7:57:e9:75:
         1d:f5:4b:68:e7:38:17:18:dc:8c:56:5e:f0:aa:55:61:8d:e1:
         f1:54:71:91:6f:6f:aa:57:41:06:ec:1c:91:99:24:b5:f2:08:
         7d:68:99:07:cc:e7:0f:ca:cb:6c:d8:1a:91:7a:c3:af:7b:6d:
         93:bf:96:c2:63:f7:bd:73:86:22:ce:77:99:8d:87:11:e8:f8:
         a1:c7:db:b3:c2:92:9f:a4:45:76:4f:e7:97:d5:24:a8:8c:07:
         d5:81:ea:d4:fe:a4:4e:da:34:d6:4d:5b:55:8f:de:ed:c7:94:
         b1:99:ba:43:20:ca:2e:68:76:58:14:4e:b4:18:f3:86:93:36:
         36:31:77:47:55:9a:ac:17:41:91:6e:23:a9:38:6b:c4:e2:ec:
         1e:8b:66:50:fa:b9:1c:91:ec:93:ef:cf:d4:02:e4:b2:d7:a9:
         47:5c:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:38:21 2026 by rpki-client