Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19913b90-52b2-323a-85b4-a638eeea02d4.roa
File:                     19913b90-52b2-323a-85b4-a638eeea02d4.roa (raw, json)
Hash identifier:          CRjBiUtMHX+hYFp8iV5SbWoEdSZL1gZySbUmewXGZM4=
Subject key identifier:   C2:59:78:FA:ED:2E:8D:73:C0:83:C7:19:83:18:74:C3:85:B4:3F:2A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD78B236B85564947887CB880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19913b90-52b2-323a-85b4-a638eeea02d4.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     54253
IP address blocks:        2603:c0f4:400::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:23:6b:85:56:49:47:88:7c:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=3fc65cee-58f1-48d3-ac0f-f69ee89c921d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:30:10:04:db:cf:f3:07:48:9c:6f:69:04:
                    01:8e:3d:79:36:00:3c:8d:64:76:33:17:8b:e6:5e:
                    d6:7f:c1:19:af:f4:ef:08:d5:77:0a:9a:2b:c7:d6:
                    b2:e5:bd:5c:66:ae:00:38:1c:3a:44:88:4e:8b:c8:
                    88:94:cf:65:0e:39:6b:17:1c:f8:d3:03:46:57:70:
                    fe:72:33:54:07:25:37:98:d5:f0:50:1a:d8:64:34:
                    f5:cc:de:4b:80:6d:d0:59:df:ae:9e:2b:f8:78:2e:
                    e7:d7:9b:f2:25:73:12:93:66:d7:bc:d2:05:31:03:
                    58:5d:6e:36:c1:fe:91:1a:89:50:33:46:d2:20:7d:
                    76:b0:2a:d7:00:c3:36:2d:ad:22:3e:e3:81:90:74:
                    04:e5:c7:ca:71:c3:1d:bb:4c:37:0e:ee:ef:d3:e6:
                    85:d5:90:69:b2:f0:b4:1c:93:62:d0:e2:66:bc:ce:
                    0f:52:80:8b:ef:90:a3:c5:a5:b1:8d:44:22:4f:94:
                    cd:dc:27:39:c3:7c:c0:a7:42:6d:00:a8:67:30:fe:
                    fd:8d:2a:35:0a:c8:78:69:ba:da:82:e6:6c:d0:cb:
                    1d:ff:11:1b:4e:f1:07:ac:0e:77:17:fe:2b:f5:40:
                    0d:1d:23:78:9b:f6:76:b1:a8:e8:d7:d1:9a:7c:12:
                    ae:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:59:78:FA:ED:2E:8D:73:C0:83:C7:19:83:18:74:C3:85:B4:3F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19913b90-52b2-323a-85b4-a638eeea02d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f4:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9c:97:c0:5d:f2:29:7f:e0:c5:b4:08:73:c2:ce:90:dc:2c:
         06:3b:48:f3:6c:49:12:7f:56:25:3f:52:ca:34:5a:48:e4:34:
         c7:79:ef:43:51:31:8c:76:e7:98:dc:0e:70:64:b2:33:7c:75:
         11:e8:17:a1:4b:67:f5:d0:2d:0e:f2:4f:41:38:de:c4:1f:76:
         bc:a1:e4:07:5f:96:72:3a:48:1d:07:19:81:0d:9f:40:2b:4f:
         63:85:a2:e2:87:a4:25:ad:32:d4:44:46:1a:41:d2:9a:74:93:
         08:db:c8:5d:91:7a:c2:39:c5:df:24:cd:89:e1:f5:71:72:6a:
         61:df:d7:d5:8f:93:fe:fc:20:1d:32:45:35:d4:6c:f8:41:dc:
         be:c4:0b:a1:fd:24:f3:83:31:2a:62:96:e0:e5:a2:32:4f:78:
         f9:99:70:2d:d5:b0:ce:c5:ec:2c:a1:be:2e:99:9b:00:5b:b3:
         b9:82:63:af:12:f0:a3:e1:9a:90:cc:6e:c3:3c:a2:63:66:3f:
         12:78:ad:56:8f:96:97:ff:ad:98:94:47:61:26:02:bc:7e:3e:
         5b:85:2c:0c:5e:62:ed:ed:99:64:bc:6b:cf:0a:57:ec:12:c7:
         dd:9d:67:26:03:34:4c:25:f2:ca:d1:ff:36:fa:20:9d:27:8c:
         b4:51:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:06:33 2026 by rpki-client