Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30cf795f-73c3-36cc-989c-7a29b704d8a0.roa
File:                     30cf795f-73c3-36cc-989c-7a29b704d8a0.roa (raw, json)
Hash identifier:          HBael3+q61Z4eeVrsvZWAw/vlWkEZQC0gtDSyil2SgI=
Subject key identifier:   C9:5B:BD:39:50:16:C3:EE:51:02:7B:2E:EC:65:F3:3B:60:84:7D:CB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E7A64F6693164A9897F056A00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30cf795f-73c3-36cc-989c-7a29b704d8a0.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     31898
IP address blocks:        2603:c002:b800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:f6:69:31:64:a9:89:7f:05:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=0296b20f-086f-4c69-ac88-46c753e05180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:40:67:b3:71:de:7d:03:d7:d0:3a:3f:f1:
                    2c:c1:b4:ce:a4:07:29:6f:fc:24:4d:e7:ea:03:e2:
                    6f:ee:91:1f:2e:e8:9f:a9:66:b7:cf:33:81:e7:cd:
                    7a:b8:24:1a:09:6c:2a:f8:31:42:d9:f6:c7:f8:83:
                    28:30:c5:56:dd:d8:c4:a1:a8:8e:d9:e5:10:ad:a8:
                    f5:57:9a:06:40:a9:cb:78:87:a9:70:98:cf:72:3d:
                    21:7e:3c:d9:9b:c3:04:77:b1:79:be:a5:e1:45:ce:
                    23:d8:26:86:41:e4:19:10:13:e3:15:92:f7:d4:20:
                    d9:05:62:4f:c8:e0:c9:f4:21:9b:a6:32:ca:0c:a8:
                    b5:ce:0a:68:80:a4:f7:1a:97:e8:c6:bd:b5:d7:aa:
                    b9:69:76:21:30:49:d3:02:08:ba:ed:6d:78:dc:07:
                    05:66:ec:a3:85:1a:86:0f:77:f9:6b:1c:ba:ef:da:
                    21:b4:49:62:a8:cd:45:fd:09:88:48:c6:d8:09:d2:
                    18:b0:e8:13:58:b1:58:2b:ab:a5:69:25:a5:d5:9b:
                    69:7e:6b:db:31:1e:50:2f:88:d9:4d:5d:3b:10:79:
                    0e:7e:de:08:4f:99:e1:fd:e7:ca:ce:ba:61:07:96:
                    a4:18:64:f6:c8:aa:96:45:fe:14:5d:39:a2:c3:8d:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5B:BD:39:50:16:C3:EE:51:02:7B:2E:EC:65:F3:3B:60:84:7D:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30cf795f-73c3-36cc-989c-7a29b704d8a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:b800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:75:6f:73:35:6c:f6:4a:b7:11:96:d6:03:03:07:3c:c7:b9:
         17:48:b2:85:39:99:97:26:83:42:26:f1:12:fd:55:dc:fe:27:
         31:4a:98:a5:67:e6:f0:3b:45:9a:f2:d3:b3:50:c5:9d:7c:83:
         af:9e:9d:11:3c:38:06:bb:5c:7d:15:a2:98:63:32:41:e1:55:
         c7:48:89:c8:11:df:97:9e:97:56:09:8c:fd:50:6f:14:21:e5:
         d6:bd:8f:11:00:bc:69:e9:7c:54:81:0f:66:60:01:b1:5f:cd:
         a3:15:cc:82:6d:3f:9f:c4:50:c2:bb:40:a5:5f:57:84:85:d8:
         46:41:de:01:88:f4:69:83:8b:7a:31:67:f2:9f:ee:6d:3e:23:
         58:3a:a9:ea:8e:2d:bf:4b:49:0e:cc:f0:71:32:9b:76:37:67:
         c7:b5:98:fe:14:ed:5f:ff:a3:b5:14:45:85:5e:8b:cc:2b:0c:
         42:9b:57:74:5f:40:cd:d1:ae:0b:49:3f:ac:a2:d1:61:6e:ec:
         14:59:5a:f4:11:fb:ae:20:0f:98:f2:8e:61:c9:9c:f8:68:b4:
         5b:01:44:70:85:2f:9c:49:c4:1f:f3:5f:bb:c1:95:c9:4c:a3:
         69:94:1a:18:a2:84:f0:dc:55:64:8b:88:00:d8:73:d5:3f:8e:
         b1:68:83:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:52:19 2026 by rpki-client