Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2d182b50-ebfb-3eba-a280-81dce75d5b4f.roa
File:                     2d182b50-ebfb-3eba-a280-81dce75d5b4f.roa (raw, json)
Hash identifier:          VrhDG+IbAmgXEGXZBWVg4BDYGfC5oHLfYmLaLj32qJE=
Subject key identifier:   A2:AF:19:2E:05:76:30:B9:60:9E:EA:CD:59:D9:70:B9:81:79:37:AB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F4987AA447B155295BE257380
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2d182b50-ebfb-3eba-a280-81dce75d5b4f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c080::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:aa:44:7b:15:52:95:be:25:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2e0cf5c1-5c87-4bfa-bc9f-f7bd0e5b4639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1a:39:c9:d0:02:ac:d2:ea:8c:02:41:b6:0b:
                    16:68:db:73:75:64:d3:28:df:c1:39:e6:6e:37:39:
                    7c:7f:61:c7:0c:19:2b:ed:40:29:79:7f:be:a2:2c:
                    54:b3:e0:f1:a8:17:5e:f1:ba:cc:a8:13:c6:8c:0f:
                    a1:63:d8:94:a6:a7:06:2b:20:ae:f6:19:7d:34:18:
                    62:01:a2:83:7e:5c:c6:b8:b2:2f:d6:e8:c5:47:d1:
                    b2:e7:1b:39:74:c0:a4:02:14:bf:8d:d3:3b:f9:e1:
                    91:ce:89:b0:29:2e:a9:97:64:cf:52:2b:5f:2a:39:
                    3a:45:40:34:27:2c:df:bf:05:40:59:b3:b9:f6:ce:
                    a5:c3:95:4f:a0:d9:ec:59:41:86:68:09:d1:7b:09:
                    2f:9d:78:d5:58:9b:b3:1e:cd:fe:2e:f7:85:65:55:
                    5e:4d:d2:be:dc:79:44:69:1d:a0:c9:7a:75:c1:d1:
                    24:dd:85:ab:71:ac:f5:32:bc:80:0c:7c:10:48:21:
                    f0:d2:b0:f0:1b:eb:0b:f8:e1:21:7c:42:80:20:73:
                    01:91:10:f8:31:ba:7b:03:f7:4b:cd:fa:2c:3f:95:
                    42:85:b9:80:83:81:09:57:fb:11:19:4f:5d:7f:2a:
                    e3:87:01:d1:b1:6c:a9:5a:e1:65:11:74:92:90:ad:
                    b1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AF:19:2E:05:76:30:B9:60:9E:EA:CD:59:D9:70:B9:81:79:37:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2d182b50-ebfb-3eba-a280-81dce75d5b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c080::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1a:49:f0:a0:9d:f1:fd:09:35:0b:2d:d9:8d:76:86:11:17:
         f3:a6:7b:11:b8:d8:4c:b0:b9:09:a7:2c:40:30:c6:40:26:d0:
         fe:30:6f:cc:46:cc:7b:06:80:e1:5e:21:a2:87:e1:fd:0d:44:
         17:26:1a:3c:39:e6:16:79:92:d4:f9:f2:a4:30:90:4a:b2:0d:
         d5:d4:b6:36:0b:a4:22:d5:61:43:2d:a3:6c:17:bb:1f:2a:fc:
         80:ba:2e:36:52:76:77:b5:a6:8f:d5:a5:bf:91:8e:e2:07:13:
         92:ca:45:bb:76:7f:10:5f:7a:7e:a6:1e:6b:42:fb:cb:6c:95:
         9b:22:7c:0b:06:82:82:15:32:04:3a:0b:eb:ce:24:93:a5:15:
         ed:cd:c6:c6:9a:61:e9:4f:8f:58:b4:a3:bc:77:07:2f:03:4a:
         dc:c0:4f:29:74:18:01:12:08:72:95:45:9d:9f:c0:20:ae:7c:
         6b:ae:8a:c8:f7:ad:35:b9:f9:0c:2a:4e:74:ab:00:26:27:f8:
         d7:76:82:1f:52:c7:c4:46:e7:7f:8a:14:ec:98:10:5e:d5:6c:
         6b:36:b1:a3:78:8e:1c:ad:c9:d2:c9:1d:e3:91:17:7d:2f:28:
         d6:39:2a:71:32:e7:51:95:6b:cd:0f:b2:82:f5:05:6d:98:7d:
         d4:1a:4a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:13:45 2026 by rpki-client