Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/336deb8f-838d-397d-ac50-cc4e0a856a28.roa
File:                     336deb8f-838d-397d-ac50-cc4e0a856a28.roa (raw, json)
Hash identifier:          9+ebEM9St1yF4HqES+93JT6TgipFj1sWRObCl1miO28=
Subject key identifier:   6E:6F:D0:DF:9B:B4:D5:35:41:63:DF:93:84:23:CB:98:C7:17:16:01
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E37648C58DD27849D3826CF00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/336deb8f-838d-397d-ac50-cc4e0a856a28.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0b8::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:8c:58:dd:27:84:9d:38:26:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=912a78da-79c1-49ff-ba04-6e8faf916984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:13:28:8a:0f:08:0c:4b:2e:09:cc:2c:64:
                    5d:82:f7:72:a6:20:47:a8:0f:f1:4f:cf:28:8f:ac:
                    93:cc:9e:cc:bb:5d:1e:89:33:e1:9b:f7:40:f6:9d:
                    e5:e3:ac:c0:8d:6f:68:8e:20:d0:fd:00:e8:72:bc:
                    18:ee:ab:c1:31:9e:80:f0:2c:e9:16:69:07:ca:04:
                    24:e8:e3:fa:09:b0:15:1d:c4:b2:83:09:41:c9:74:
                    d9:f7:98:4c:e3:59:af:24:7c:ad:23:a4:f4:45:bd:
                    72:dc:3c:27:9e:9d:f7:62:8c:8b:61:01:0a:03:1f:
                    19:04:65:d2:27:69:c9:78:cf:4f:d6:8e:65:d2:b2:
                    00:78:8f:be:ca:13:f6:f2:c4:e1:1b:af:ca:5e:e2:
                    d1:6f:94:36:b1:d7:c3:f1:ca:f8:d5:3b:a1:71:ee:
                    35:6b:03:93:23:27:35:3d:91:af:30:ac:26:e8:19:
                    fc:3d:20:7d:72:bf:1b:22:69:7f:ef:a0:c8:f9:47:
                    ad:8e:4f:93:16:ff:db:ea:9a:38:c3:9f:39:3e:36:
                    2f:cf:ea:b5:b7:e4:ad:c2:b1:36:de:66:54:07:d3:
                    55:3d:b8:7e:9f:18:47:48:f3:c9:d6:f5:e2:27:c1:
                    49:a8:8c:a4:1a:30:62:6a:f6:fe:92:f0:bc:6e:4c:
                    7b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6F:D0:DF:9B:B4:D5:35:41:63:DF:93:84:23:CB:98:C7:17:16:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/336deb8f-838d-397d-ac50-cc4e0a856a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0b8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b7:26:ef:cd:3a:45:a2:37:b6:dc:f6:4d:8a:f4:02:b9:3a:
         09:89:aa:56:da:38:20:89:64:52:c1:ac:9f:c3:16:e7:c8:c3:
         cf:38:ab:dc:df:8d:f5:59:a5:0f:4f:58:53:53:5d:19:43:84:
         64:1e:93:32:6f:49:19:de:f5:75:01:1e:34:c9:e6:a6:4a:2f:
         49:9b:2c:46:d8:ba:c0:3e:47:b1:10:9b:43:46:95:79:cf:e1:
         4f:07:f5:06:65:14:38:ff:ca:3b:31:f2:ad:c9:3b:1a:02:20:
         df:0d:c6:0e:e9:bf:e0:96:f7:88:0a:8b:a5:83:35:18:71:2c:
         c3:7f:0a:cd:59:e8:8f:e0:2d:d1:9d:50:62:5c:7f:a2:1a:81:
         45:b8:a6:2b:33:e2:04:48:d3:3d:4a:28:35:94:f1:9d:da:0c:
         86:90:e7:26:74:79:d8:7e:3f:b9:51:06:0e:0b:5c:5e:f9:f9:
         d4:26:29:45:0d:30:73:e1:9c:52:de:e7:45:05:23:c6:0d:a9:
         25:80:b3:92:6d:04:ef:e7:5b:e5:b6:c8:fd:60:e0:3d:a2:d3:
         84:d6:2f:96:63:49:d4:cd:3b:94:ce:19:7e:ec:43:21:4a:4a:
         df:ab:bb:82:59:bb:2e:05:59:52:48:1e:1d:90:c7:85:99:d4:
         d9:e0:44:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:51:41 2026 by rpki-client