Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1943979a-cb99-303c-bc04-48b4622d3368.roa
File:                     1943979a-cb99-303c-bc04-48b4622d3368.roa (raw, json)
Hash identifier:          3vTUzrk9ncFZcEBCKkiE320XzhrSOBEqY6lLLO70ad0=
Subject key identifier:   AA:7A:33:87:FE:CE:36:6C:32:86:07:9B:90:26:B8:7F:6C:34:23:D3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE63C30EF77A15D4B333BC4F0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1943979a-cb99-303c-bc04-48b4622d3368.roa
Signing time:             Mon 18 Aug 2025 16:57:58 +0000
ROA not before:           Mon 18 Aug 2025 16:57:58 +0000
ROA not after:            Sun 16 Nov 2025 17:57:58 +0000
asID:                     31898
IP address blocks:        2603:c002:9d00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:3c:30:ef:77:a1:5d:4b:33:3b:c4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 16:57:58 2025 GMT
            Not After : Nov 16 17:57:58 2025 GMT
        Subject: CN=0ec5572e-3ea0-4dbd-9a2c-09d168f20ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:4f:4a:b4:91:2b:90:15:f5:ab:69:be:4d:
                    d3:4c:7a:a6:1b:c7:99:f1:c7:58:84:53:d7:55:3b:
                    b8:0f:94:78:9d:96:d7:5e:27:fa:d7:b3:4a:5e:1d:
                    0d:2d:bf:05:74:d0:a3:b0:2f:73:2e:4e:9a:e2:a3:
                    2b:13:0c:89:9d:b4:17:47:5c:da:5d:a1:55:20:f3:
                    cc:24:22:16:c8:ba:36:74:67:70:be:5b:f5:6c:26:
                    3f:7b:4f:5a:32:58:09:d5:54:cc:92:0c:9a:83:55:
                    bc:41:5f:3f:b6:cb:91:d9:33:90:93:63:ad:90:f5:
                    2a:59:a8:0e:b3:a2:86:fe:c6:d7:2b:0e:a8:a0:56:
                    39:85:b0:4b:98:6c:17:88:cd:a3:a4:3c:bc:39:b6:
                    c5:8b:3e:49:67:d5:b8:9b:65:9a:cf:01:38:40:89:
                    79:65:68:ce:14:fa:a0:88:8b:53:47:db:93:a9:15:
                    d5:a9:d0:07:8a:16:2f:4d:8c:e6:a3:13:10:33:17:
                    e0:57:f3:b1:e4:07:97:5f:71:ee:76:17:69:df:45:
                    96:32:3f:e0:bb:ed:33:51:a5:f7:7f:ec:f0:b4:67:
                    60:eb:1e:0e:04:e5:eb:58:b3:25:92:48:e1:ed:24:
                    38:38:31:80:4e:c9:67:e7:38:3a:0b:00:48:8f:19:
                    12:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7A:33:87:FE:CE:36:6C:32:86:07:9B:90:26:B8:7F:6C:34:23:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1943979a-cb99-303c-bc04-48b4622d3368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:9d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:b7:34:72:e8:e2:d9:13:56:35:92:a3:3b:dd:77:d6:f6:6d:
         ad:8c:ba:7b:35:e7:5d:a6:12:cb:d2:97:b6:e9:16:41:ca:f0:
         44:3e:d0:16:11:2c:ba:4c:22:7a:d8:74:aa:4e:a1:c1:39:2c:
         f3:28:86:03:5c:aa:1f:62:37:9d:3d:08:e0:b0:58:40:49:7f:
         e5:07:7a:36:12:25:92:72:23:d2:1b:3a:b4:57:8f:6b:9f:90:
         98:19:26:e1:48:22:98:c8:9b:a0:26:a7:1f:b5:3b:88:91:55:
         17:04:d7:4b:5d:77:9f:ad:fe:72:9e:b1:c3:3d:60:af:eb:e2:
         fc:99:67:2c:ca:32:79:82:fe:75:88:1b:3b:bc:50:c1:7e:71:
         88:f4:2c:e5:48:46:65:3a:e3:a5:65:53:87:26:9c:e0:07:72:
         6c:8b:ee:f9:4b:df:79:76:04:bc:5f:cd:9e:8e:c0:5e:22:89:
         9c:a0:1d:32:e0:17:e6:d1:e2:6c:56:c8:20:05:2d:06:55:0c:
         11:fc:bc:70:db:df:d7:8c:84:88:63:25:b0:d4:d3:2f:4b:1e:
         2a:7e:10:2d:4d:dd:c3:b4:04:f1:ea:3a:03:d5:19:fd:61:db:
         45:8b:52:5a:e3:fe:06:08:d5:cf:a0:f6:20:bd:6c:cf:df:a3:
         fa:b1:0f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:27:17 2025 by rpki-client