Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2456f1ba-7dd4-369e-a323-c2c56f75bd60.roa
File:                     2456f1ba-7dd4-369e-a323-c2c56f75bd60.roa (raw, json)
Hash identifier:          /h2YgHhng9ntPu+zkNHD1Uqztwedg7jCF0wIdGf4x3Q=
Subject key identifier:   A5:DA:37:E8:4C:43:6B:73:13:53:D1:D3:DF:7C:E1:9F:2F:6C:31:80
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD78B13D7D8B23109442A7D80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2456f1ba-7dd4-369e-a323-c2c56f75bd60.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     54253
IP address blocks:        2603:c0e0:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:13:d7:d8:b2:31:09:44:2a:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=2d1f8942-e99b-4402-9b26-dd400a14dbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:a2:22:68:38:af:ec:b3:25:0b:6d:73:96:
                    0f:73:8e:a8:96:ed:93:36:99:66:37:54:01:a7:78:
                    32:77:a3:c3:57:ef:63:cc:4b:f6:3d:8d:3e:7a:b3:
                    b1:23:8c:17:fd:b1:7e:29:e8:c4:b9:34:51:d9:f3:
                    ca:5c:e4:b4:f7:af:21:ec:b3:78:a6:d7:2e:13:bf:
                    20:c8:13:30:8c:c2:3c:a1:09:52:4f:5f:13:f9:b7:
                    75:27:0c:a4:a8:95:76:24:e0:ae:15:4e:1d:2b:c8:
                    87:63:de:ca:1c:1c:80:77:d6:a8:2e:7c:00:80:74:
                    51:f2:a0:3c:55:1a:7a:56:4a:cc:98:56:d2:b1:87:
                    9d:9f:5c:4e:91:01:ef:e4:22:59:df:1c:33:54:d6:
                    ad:bd:30:1b:62:73:39:08:07:68:69:f0:ac:85:6f:
                    d8:86:7f:c1:79:6d:52:17:9e:80:fe:70:d7:72:57:
                    c0:2f:f1:b6:2e:c6:4a:71:f2:e5:9b:ec:3c:f6:1d:
                    7a:51:f3:59:a7:24:d5:39:2e:b6:fe:13:0e:0b:34:
                    91:dc:f5:d0:f7:66:c4:2d:42:0e:bc:6e:3d:fe:cc:
                    d1:f4:90:5a:ff:c0:db:0d:cd:c0:b3:d4:42:e2:d4:
                    6b:32:60:c7:94:04:9b:cc:57:d2:77:2b:30:2d:ba:
                    82:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DA:37:E8:4C:43:6B:73:13:53:D1:D3:DF:7C:E1:9F:2F:6C:31:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2456f1ba-7dd4-369e-a323-c2c56f75bd60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0e0:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:53:bd:d5:cb:b0:b8:7d:41:00:09:c1:00:a9:0c:07:64:52:
         f7:bc:06:06:ad:2a:94:e4:3c:9e:06:95:0b:cf:ed:6b:d4:49:
         d0:46:79:2a:b0:15:aa:9d:09:73:99:9b:dc:11:7b:da:de:a2:
         e4:9c:5a:6f:d3:fb:90:dc:d3:1d:0c:a4:49:60:ce:48:d1:92:
         3b:a7:87:3c:6d:06:c2:56:9e:7d:49:f5:da:a9:39:37:86:9e:
         33:dc:7b:94:bb:4d:da:ca:33:be:5c:99:0f:63:9e:e4:85:46:
         40:e0:6c:1c:be:fa:2f:5f:f6:96:23:42:86:b6:e4:2d:1e:82:
         9c:c6:7d:91:6c:c7:f7:d3:ea:36:06:87:f5:89:63:af:37:d4:
         c8:df:04:ed:35:60:35:ff:8b:e2:05:b9:7a:62:84:e9:11:ea:
         44:8f:5a:3a:b8:b0:28:b9:82:05:73:4c:dd:c3:ab:68:0e:6b:
         29:3f:9c:61:5c:00:26:9a:70:17:2c:75:d0:69:d0:56:2d:a0:
         3c:bb:d4:07:ec:42:de:76:7c:af:63:d0:22:1f:35:92:26:4d:
         58:af:a3:a3:e7:04:57:a8:b8:88:c2:00:25:c0:e8:a4:5d:1d:
         1f:96:26:bc:01:fe:96:83:65:a2:f6:4d:17:b8:dc:b0:6a:89:
         db:4b:8a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:05:13 2026 by rpki-client