Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2fd232ac-9351-349c-9f1d-a63ec63f7154.roa
File:                     2fd232ac-9351-349c-9f1d-a63ec63f7154.roa (raw, json)
Hash identifier:          xUoPHUmD016cH1RnHDSTuBLIfrinM3wBput4bt8RoZM=
Subject key identifier:   DB:93:AB:B6:05:A7:11:3B:D4:A9:F2:61:27:93:E3:8D:4A:39:96:65
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F498935E4AFC53A2A4A24CBC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2fd232ac-9351-349c-9f1d-a63ec63f7154.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0ee::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:35:e4:af:c5:3a:2a:4a:24:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bb3ffe8b-33bd-4b44-b681-d91b0485e6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:77:6b:e0:71:cb:99:79:07:95:de:44:40:47:
                    23:55:94:74:a8:94:c0:dd:9a:ab:3a:04:1f:4f:c4:
                    36:24:49:7e:c9:aa:c9:29:eb:a6:53:d3:fe:62:2c:
                    97:e0:fb:63:1a:c8:f0:67:7f:cf:33:06:a1:7b:60:
                    4e:63:e3:74:1b:cb:ad:41:4f:85:e4:7c:02:3e:08:
                    fd:45:20:77:23:a8:fe:bd:e6:59:aa:50:5b:1c:b6:
                    3e:31:ce:f6:57:66:d8:16:81:aa:6b:21:a7:9e:e2:
                    30:9d:6d:2c:9a:09:ae:54:a3:bb:e2:2e:d5:67:a2:
                    89:c8:33:fd:da:ea:aa:b0:29:64:91:47:76:17:0e:
                    de:69:20:d4:4d:b5:15:df:7d:08:8b:46:be:4e:9d:
                    a9:8e:01:3f:3a:0f:d5:cc:d9:24:a4:f7:fb:e2:37:
                    29:90:a6:3b:ba:3d:ee:a7:c3:bd:6a:53:71:21:f8:
                    6c:8a:84:b0:88:70:24:0f:7c:a7:fb:85:23:1e:0d:
                    94:45:2e:29:94:c0:18:46:8b:73:b4:cb:be:6d:22:
                    47:41:d6:88:b8:1b:b3:74:94:20:7b:d5:d6:7c:23:
                    84:7f:04:13:2b:c4:c7:ab:40:91:cb:20:c9:ff:a5:
                    35:63:d9:3b:44:da:c7:69:53:98:8a:59:2b:a5:72:
                    ff:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:93:AB:B6:05:A7:11:3B:D4:A9:F2:61:27:93:E3:8D:4A:39:96:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2fd232ac-9351-349c-9f1d-a63ec63f7154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0ee::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:10:4b:5d:32:cd:9f:50:eb:27:71:29:b1:7f:03:97:3b:d9:
         a0:34:19:6a:cd:f7:f6:1b:68:c0:92:f5:a7:f5:77:97:9d:33:
         87:65:3e:f7:b9:a6:1d:cb:04:47:ea:7e:a6:69:0f:db:0e:24:
         56:67:1a:23:10:62:9f:97:a6:f9:0d:db:08:d4:5d:ac:36:fe:
         41:20:4d:43:df:79:e9:ce:b9:14:cc:98:ea:42:f1:a4:af:58:
         d1:01:b2:78:0f:b0:cf:d2:7d:77:54:f7:90:80:89:ae:bd:b2:
         85:17:6f:65:0f:79:36:bf:1b:59:e3:9b:28:b5:a6:b9:94:d6:
         77:aa:d3:e7:e5:60:fe:fe:c1:e2:be:af:7f:5b:25:4c:cf:e3:
         7b:5d:e8:8a:08:d4:65:98:c1:9c:06:60:e0:6d:19:fc:40:61:
         dd:b6:39:a8:7c:b2:93:ec:bb:d8:f9:c2:3f:ea:a8:59:5c:d4:
         85:63:45:f4:64:b8:47:9d:92:e0:de:fc:68:4b:b6:3a:a0:bb:
         ed:fa:42:e7:9a:62:f2:57:68:a7:d8:a3:30:04:00:0c:c9:9e:
         38:f7:c9:da:49:61:af:64:93:78:93:fc:dd:f6:e8:02:54:d2:
         ca:7e:b0:89:48:09:54:52:73:ea:ee:4c:72:0f:76:02:b2:66:
         bb:76:b8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:45:59 2026 by rpki-client