Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21eea410-2d36-3aed-bd15-722d0a64864d.roa
File:                     21eea410-2d36-3aed-bd15-722d0a64864d.roa (raw, json)
Hash identifier:          xUe6lvq+cd0OPXDqJ0cFDHCUT1EG/893j7IESomUoZg=
Subject key identifier:   DD:98:83:B9:74:6F:99:4E:41:B9:55:DC:99:8F:39:D6:7E:56:76:4E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E66DA4CF40DB18EA738A1A180
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21eea410-2d36-3aed-bd15-722d0a64864d.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     54253
IP address blocks:        2603:c059:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:4c:f4:0d:b1:8e:a7:38:a1:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=fc2cfe71-534d-4450-976a-d040630712b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:b7:06:3b:59:29:c7:db:f1:3d:d1:59:f7:
                    a3:ec:09:ba:c8:8b:4b:11:d6:32:84:90:ab:ca:45:
                    50:c0:4a:bf:9d:d6:ad:13:40:fc:b7:dd:4f:4f:43:
                    1d:8f:c6:41:19:a1:45:49:71:ec:cd:a2:e5:d5:ab:
                    18:cd:16:26:6a:e3:81:03:bd:18:02:a1:b7:fa:bb:
                    85:5f:79:a8:6b:c0:66:78:89:9f:12:89:57:2b:8c:
                    8b:7b:03:f1:65:7a:43:45:60:0b:91:7a:82:9a:24:
                    64:86:85:e8:14:92:de:c3:24:c8:ee:e4:2a:b2:d0:
                    2a:bc:e3:48:a4:52:93:56:0a:c8:a2:51:d8:d9:0a:
                    94:e7:9e:bf:66:ce:fb:a5:17:2e:78:11:51:4f:b5:
                    0f:e4:f8:bc:af:b3:8d:b8:2b:f3:75:ee:e3:f5:3f:
                    59:b3:81:b8:39:8f:f3:4d:59:8a:e6:3a:c0:ae:01:
                    a9:e0:2c:50:37:ee:b1:51:cb:1d:75:d7:a0:89:82:
                    7e:49:ee:43:72:ca:56:4d:69:9c:a3:ac:82:d8:35:
                    cd:e4:1f:89:e8:30:51:99:23:c4:4e:fb:99:6d:12:
                    bb:56:29:d3:af:0e:87:b3:21:60:59:b1:ca:f0:79:
                    81:46:7e:dc:84:bf:13:73:4b:25:11:b0:bc:b3:99:
                    56:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:98:83:B9:74:6F:99:4E:41:B9:55:DC:99:8F:39:D6:7E:56:76:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21eea410-2d36-3aed-bd15-722d0a64864d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c059:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:84:a5:db:61:0d:3e:1f:23:b8:3e:19:21:a5:53:9a:8d:c8:
         53:dc:9f:35:1a:81:e8:88:7b:70:60:d7:64:e9:44:ab:da:5b:
         37:52:08:66:78:8f:84:8e:4a:27:26:b3:2f:e8:b8:9c:a4:3d:
         52:14:6b:39:a6:77:e3:d3:f3:52:5a:a4:82:72:a9:a0:86:96:
         cd:56:5f:93:3f:ff:ef:85:f2:46:2b:2a:32:26:5e:f2:4d:1d:
         e6:89:08:12:b2:63:a4:c8:05:ad:fa:3f:0a:f1:ea:5e:5a:18:
         ad:d0:a8:c2:82:56:fe:85:94:c3:ed:95:c2:16:3c:03:20:b3:
         bb:1d:b7:ee:80:08:ec:6d:86:8a:46:e8:9a:ba:fd:0b:fd:6c:
         c4:22:da:44:58:21:40:07:22:82:aa:e8:6c:70:18:e6:e5:30:
         6a:d7:00:6d:9d:08:d6:9d:61:4a:0d:e5:4d:b4:16:f7:0f:dc:
         ef:f1:cd:30:6b:1f:61:94:d2:60:4f:b4:4b:8c:6d:d3:15:09:
         73:cd:4d:f0:15:66:6e:24:0c:f4:e1:57:6e:cd:d1:91:23:26:
         fd:8d:85:9a:26:7d:2d:e0:ee:13:93:1a:26:6c:7e:4d:5f:82:
         d9:15:9f:44:68:09:00:39:c0:44:b4:98:5b:34:2c:b2:76:c2:
         73:6e:27:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:53:47 2026 by rpki-client