Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3723f2b4-1fee-33d0-802c-bcc0fbee643f.roa
File:                     3723f2b4-1fee-33d0-802c-bcc0fbee643f.roa (raw, json)
Hash identifier:          5xn6SkVi1tJjywOkOuCtPdlbq8ENtp8XZIYsoT4tlgs=
Subject key identifier:   F4:43:90:18:22:1B:C1:CB:46:27:8F:47:A4:1A:E5:BA:E7:F9:B0:04
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E736A397E606A9B8DDC92B600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3723f2b4-1fee-33d0-802c-bcc0fbee643f.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c02c:4000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:39:7e:60:6a:9b:8d:dc:92:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=785cd528-c3da-4529-a9fd-bb4e37b737bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:5a:90:4f:42:9f:bb:04:2a:99:c3:80:7c:
                    75:53:a9:cf:0d:e0:ae:b3:09:b7:68:c4:6d:4c:97:
                    07:f6:d5:8b:90:bf:03:47:31:a6:a9:19:14:92:56:
                    06:6c:48:e2:e0:f1:40:38:3a:3c:35:d6:d7:94:1d:
                    85:a8:49:27:4c:ae:3d:95:0c:5d:18:a6:87:4d:9d:
                    8a:cf:e9:70:24:24:3f:80:ba:f5:5d:9c:cd:c0:1c:
                    44:52:a3:9d:4d:14:a4:60:d4:a1:36:49:0a:26:25:
                    05:7a:08:e3:42:ac:58:d8:03:c4:5b:32:8c:e5:54:
                    15:7b:c4:b1:43:6b:88:65:fc:6e:41:85:30:83:4a:
                    79:0d:aa:f4:c9:37:2a:61:73:26:31:14:0b:2c:44:
                    a6:9f:ab:90:f1:5c:76:0b:d1:78:ea:2b:4b:5a:de:
                    9f:ec:15:a8:12:52:e2:0f:ef:18:9c:93:54:1d:ac:
                    71:55:b5:ba:79:01:2a:f5:7e:a0:a3:3c:d4:d0:11:
                    5b:28:b9:36:af:3e:2b:04:87:7e:7c:a6:6c:8e:d8:
                    27:91:f2:34:9c:72:cd:82:1d:5d:a9:f5:e2:92:dd:
                    9c:2a:9a:0e:0f:b1:ed:0c:c8:49:4b:af:22:3b:92:
                    f2:92:31:ed:c9:79:54:41:9e:75:9f:d0:62:9c:d4:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:43:90:18:22:1B:C1:CB:46:27:8F:47:A4:1A:E5:BA:E7:F9:B0:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3723f2b4-1fee-33d0-802c-bcc0fbee643f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c02c:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:fd:d8:a2:51:d1:dc:12:22:93:53:70:b9:79:39:6c:5f:f9:
         55:22:fb:97:b7:44:d0:57:d4:a2:7b:24:4e:eb:20:cb:45:fa:
         5d:8f:ef:2a:08:61:08:3e:45:95:6d:1c:cb:f7:44:6d:bd:6d:
         16:5f:a9:3f:19:60:5d:d2:fa:92:91:b5:ab:e8:7f:85:50:5c:
         9b:e7:a4:c3:0a:9f:39:68:e8:75:59:7d:00:6b:20:e5:52:53:
         c1:fc:e7:86:52:b8:d0:34:84:2e:4e:9b:37:3a:bc:fc:de:8e:
         6c:b9:02:d4:a8:6f:3e:0c:ff:03:3a:7b:1f:55:b4:20:fa:c5:
         d1:6a:f0:69:8e:ba:c9:52:bd:78:40:71:04:95:94:f5:09:36:
         de:cf:30:dc:7e:59:6f:4e:af:f9:9f:0a:aa:82:ed:e1:0f:9c:
         9a:59:f0:73:22:39:f6:22:07:d5:66:0c:f4:28:71:be:23:99:
         1c:e0:ae:41:07:cf:7c:ad:7d:8c:22:ac:41:f2:41:73:6e:7f:
         5f:f8:15:cf:d2:36:be:1f:91:74:02:c1:ab:03:9d:17:5e:fa:
         d6:82:33:2d:2f:ef:a9:97:aa:e6:ad:90:ed:c6:d0:ff:af:79:
         23:25:28:5d:70:f7:d0:74:1d:ee:cd:4d:89:bb:c3:9c:25:e7:
         fa:f6:e0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:47:48 2026 by rpki-client