Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1369890c-6f58-3c45-918a-67e70d1a03e0.roa
File:                     1369890c-6f58-3c45-918a-67e70d1a03e0.roa (raw, json)
Hash identifier:          nj3yLGoiLN6M0kfkZTHjteeDHCQ9S2MZWvVJP/Ht2lY=
Subject key identifier:   9A:10:1E:F0:ED:72:F6:40:A3:BF:75:59:66:13:B7:D9:72:59:C7:70
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA79CF0A5B3D5465F5012F580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1369890c-6f58-3c45-918a-67e70d1a03e0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c061:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:f0:a5:b3:d5:46:5f:50:12:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6350eec0-9325-4da0-996a-29eae828002f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:59:ef:45:f2:df:6c:25:03:ca:48:07:12:45:
                    e7:27:04:d2:22:5b:93:80:b5:5b:aa:b0:cc:13:5a:
                    e5:d3:ca:3c:be:7e:49:ea:d9:3e:c3:fb:aa:96:fc:
                    88:40:f8:ed:d9:4e:69:81:8b:5e:ac:64:c5:1a:be:
                    75:aa:a3:ab:b1:9c:84:c5:99:8c:92:96:62:91:f7:
                    1f:ae:a8:33:00:83:bc:9e:5d:eb:42:ef:e5:ae:e5:
                    3a:d5:d6:a7:fa:5c:f2:63:03:67:12:36:0b:c1:4b:
                    63:89:79:2e:8d:b3:bd:19:7c:7b:0b:a1:e8:29:f6:
                    d7:e0:2d:3e:f6:76:71:41:8f:14:5f:f3:9a:62:e4:
                    3e:41:27:15:da:e1:cb:53:e3:76:6e:c6:c6:04:4c:
                    f0:67:d6:d6:fc:44:8d:67:4c:99:38:e3:95:b8:a9:
                    69:c2:1e:50:51:75:dc:72:2e:f1:6a:b2:6d:da:c7:
                    a1:17:a0:7c:08:d3:8c:a1:39:c8:0e:06:8b:50:41:
                    5f:95:b0:7d:74:24:1a:d8:76:c7:a4:6b:68:e4:bb:
                    2e:d2:f3:b3:d4:31:9d:ca:5b:c6:57:3d:74:31:57:
                    3b:c4:ef:5b:66:94:e6:8b:3c:eb:16:4f:32:f4:b4:
                    c1:b8:57:d2:de:30:22:0d:02:58:cc:f4:2f:cf:27:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:10:1E:F0:ED:72:F6:40:A3:BF:75:59:66:13:B7:D9:72:59:C7:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1369890c-6f58-3c45-918a-67e70d1a03e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c061:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:14:55:f0:90:e9:80:33:eb:2e:71:0d:97:cd:75:36:db:14:
         27:b3:61:24:d2:fa:37:88:e3:ef:c1:24:f3:43:b7:21:ef:86:
         fa:c6:5b:82:37:a5:ca:cc:7f:52:9d:dd:a5:e1:6b:1e:63:9f:
         58:2c:cd:c7:d6:94:40:8e:24:ff:e5:09:50:af:2a:65:2c:24:
         38:99:d0:ff:bd:7a:3e:48:8e:37:e8:ce:21:11:c3:e4:c7:f9:
         cf:36:2b:e3:d9:04:4a:56:ad:01:7b:51:0f:2b:86:ad:b2:a6:
         c2:30:77:c9:0d:15:b2:a4:f4:59:36:94:9c:ee:bd:25:1f:d6:
         78:af:55:57:81:d6:b3:66:c2:d2:14:fa:7b:82:f6:f3:2f:9f:
         f6:b9:de:84:82:81:bf:be:ea:de:d8:9a:07:41:61:f6:3d:6c:
         39:f8:03:98:4e:85:bb:e8:8f:0b:01:37:45:0b:75:30:a5:d8:
         cc:9e:5c:22:12:41:35:77:21:d9:aa:9f:a1:14:f5:fa:fe:9b:
         17:16:1f:da:07:57:03:9b:61:68:4c:7d:30:64:bc:97:89:f0:
         fa:46:4f:11:3d:a8:92:e0:11:76:02:3e:44:06:ab:27:05:96:
         87:b9:80:18:61:02:97:79:42:5d:aa:04:a3:1f:78:73:00:6f:
         a5:b4:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:09:19 2026 by rpki-client