Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b08e581-4bda-3bd0-8a3c-1303cb878f3b.roa
File:                     3b08e581-4bda-3bd0-8a3c-1303cb878f3b.roa (raw, json)
Hash identifier:          ffJB+YPUqcHcyEqEdKIMA9RcYFY2+fhO4o1SQciaGW4=
Subject key identifier:   8D:A5:04:70:C4:8B:C3:F6:AB:FC:44:E9:74:AA:40:C5:23:38:E9:C3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD78B0CBE2E87F185F745D580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b08e581-4bda-3bd0-8a3c-1303cb878f3b.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     54253
IP address blocks:        2603:c0e0:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:0c:be:2e:87:f1:85:f7:45:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=7754899d-00b4-4d84-9481-b4e6d02b400a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6d:58:95:4b:89:10:2d:f4:6c:c5:aa:73:d8:
                    e2:3a:7b:5f:b6:25:ee:c7:e8:f8:4e:bb:87:11:93:
                    82:cc:ba:c9:62:f1:ea:78:b3:69:15:ad:8c:1e:f6:
                    9d:a9:66:fd:1e:1d:6d:5a:d0:6d:09:7c:06:66:73:
                    c3:79:df:0e:7f:62:4d:fc:9d:78:7f:96:bc:13:a5:
                    a5:d6:2b:50:53:8b:fa:91:0a:33:d4:eb:d0:2d:0d:
                    fc:3c:2f:4d:52:a7:a4:a0:f9:c7:88:cd:a2:0b:57:
                    fa:f2:8d:88:1b:95:01:b6:e1:ed:c2:95:e1:dc:fa:
                    49:34:73:fa:86:4b:a3:ab:88:a3:a9:1f:cb:5e:da:
                    8e:a1:f7:cf:f1:ac:46:c1:b4:f2:79:07:ca:7f:ba:
                    df:4e:f1:26:13:9b:3e:28:9b:b0:66:d6:77:95:df:
                    53:81:51:72:2d:38:4c:7c:8e:27:2c:f9:76:ff:ef:
                    56:53:18:31:c9:d5:c6:80:48:1e:3f:52:81:b8:95:
                    23:ce:40:4c:3a:62:bc:61:d9:ca:73:95:4d:46:9d:
                    77:ca:fc:c6:37:a7:43:fc:a0:20:32:2f:54:41:4c:
                    1d:1a:42:f5:61:08:62:57:73:15:7c:54:b2:7e:db:
                    38:7f:30:ad:08:42:19:14:c5:fe:5f:22:e8:da:ba:
                    a3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A5:04:70:C4:8B:C3:F6:AB:FC:44:E9:74:AA:40:C5:23:38:E9:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b08e581-4bda-3bd0-8a3c-1303cb878f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0e0:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:37:f4:2d:38:b9:a7:ae:4c:30:dd:bd:70:98:e8:9a:86:d8:
         6b:39:98:30:88:cf:63:9a:cc:2c:71:9c:14:e1:c2:98:27:ed:
         ee:ca:a7:a9:79:05:b5:91:4d:8c:bd:45:0d:9e:00:8c:96:c9:
         15:af:a9:af:12:7a:c4:4b:76:0f:74:27:6c:21:87:4d:04:6d:
         31:f0:08:42:a4:e2:9e:33:62:7b:5b:89:75:86:c3:16:17:65:
         8d:7c:0e:a5:23:93:77:f0:77:c9:13:a6:38:23:6d:8f:c7:36:
         a7:ed:d4:ba:0d:d0:c2:54:ac:58:f8:da:40:c1:ef:04:bd:83:
         3a:fb:06:ca:5f:b3:7d:89:dc:7e:7c:ae:b4:14:84:20:7d:5a:
         6b:08:58:df:a4:eb:03:78:e0:b3:96:f4:7a:ac:22:1b:ea:fe:
         06:30:7c:bf:56:3b:cf:d3:b3:0f:c4:85:00:d6:39:1b:0b:f3:
         ea:96:57:f8:f9:51:7c:f2:c6:0e:5c:5f:92:c6:bb:4b:c0:d4:
         83:f7:36:43:68:27:c5:54:c4:82:aa:fa:4c:57:5a:d0:7a:1d:
         c5:33:cf:fa:99:46:90:ed:32:f7:6a:cd:c3:47:1c:e6:87:8d:
         63:0a:8e:23:ad:be:77:48:0c:3c:8b:78:0e:16:eb:da:83:a3:
         72:f5:49:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:05:09 2026 by rpki-client