Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b21a7fb-82e9-33f5-8c6d-bee5f73dabcc.roa
File:                     3b21a7fb-82e9-33f5-8c6d-bee5f73dabcc.roa (raw, json)
Hash identifier:          p3WTryNjNA50R649Iz4TmP5fz3euxGgsgtCVIPglOP8=
Subject key identifier:   5B:C1:A7:57:51:D0:28:F7:9F:BB:58:C6:06:75:6D:04:CD:B3:9A:63
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E709F6D9139BC0805CC28D580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b21a7fb-82e9-33f5-8c6d-bee5f73dabcc.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     31898
IP address blocks:        2603:c002:8d00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:6d:91:39:bc:08:05:cc:28:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=7dcba078-c326-43f0-8524-6b7e3884796b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f0:39:a6:53:70:4b:ab:35:2a:89:dc:1b:f2:
                    c7:b4:90:51:77:2f:46:9b:57:b8:ef:10:d5:63:b8:
                    a4:01:3f:6f:90:a0:1d:72:84:e6:33:54:8e:9c:ac:
                    3a:13:c0:53:96:7d:42:82:25:7a:a3:1d:ff:d6:9e:
                    27:21:0e:5b:24:69:5c:ab:b7:45:ff:8e:38:bb:20:
                    b6:93:86:ca:06:22:5f:2c:26:70:5b:ce:f7:81:a3:
                    f1:08:97:ba:71:65:11:cd:17:26:a2:7c:a8:b6:f4:
                    46:2a:a5:f1:53:d9:5d:e6:3e:7b:1b:59:ef:6d:2e:
                    55:ad:0c:59:c3:ae:69:f9:9e:a3:23:8a:8b:e1:fb:
                    d1:78:13:92:bc:55:64:28:43:f7:a4:0b:20:1e:4d:
                    4f:64:d4:f8:a5:bc:5e:76:60:34:2a:0f:96:4c:a4:
                    cf:93:eb:88:0f:14:99:42:9b:df:2a:69:bc:dc:0d:
                    22:c7:2a:70:42:b4:74:fb:b8:3c:b9:cb:e4:92:3e:
                    8a:e1:3b:f7:b2:10:31:b3:be:1e:f8:b4:29:7a:17:
                    f2:04:32:5d:ef:f7:49:52:5d:87:53:e8:6b:25:a9:
                    c3:b4:92:f9:8b:2a:29:f1:e1:9e:da:b9:bc:2c:d3:
                    35:d6:cf:d4:64:e5:82:2d:54:40:72:24:ae:c5:da:
                    d6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C1:A7:57:51:D0:28:F7:9F:BB:58:C6:06:75:6D:04:CD:B3:9A:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b21a7fb-82e9-33f5-8c6d-bee5f73dabcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:8d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1a:ca:39:0b:fa:76:15:a3:37:55:1b:6d:29:69:8f:f2:af:
         d0:10:f9:67:48:b4:37:64:fb:28:07:3f:33:8a:cc:6c:a0:35:
         0d:2e:02:10:4f:e1:33:8d:16:d9:8e:c3:2f:55:54:e4:32:59:
         5e:d0:b6:ae:ca:9f:ef:3a:6d:ae:86:26:68:74:12:9a:57:af:
         bc:60:35:89:f9:67:c2:84:1c:70:60:8d:f2:87:1b:7f:59:9e:
         f4:19:df:6f:e0:08:bc:8a:1f:f4:99:86:7a:26:ac:6b:7f:4e:
         e0:31:8e:f9:24:db:1e:d8:99:14:47:68:06:d3:44:f4:51:0e:
         62:90:70:a5:de:04:74:71:09:7f:48:d7:03:3e:a4:3e:45:89:
         43:f3:12:c3:01:7f:28:bf:07:f7:ca:3c:8b:88:41:fe:08:af:
         70:19:92:39:91:24:9c:2e:b9:16:1b:ba:b3:60:f9:30:58:25:
         9a:31:b8:a8:d0:06:4f:03:5b:81:10:ee:e4:6e:8b:98:ec:1c:
         5a:17:5e:6b:ad:72:10:07:46:d0:f7:9e:ab:1c:f2:b2:58:e0:
         af:71:f8:5d:56:96:8d:58:1d:fc:ee:42:67:2d:a8:8f:3d:ab:
         09:fd:55:98:d9:e2:f9:ce:3b:29:74:2d:eb:db:01:2c:03:e3:
         a1:f9:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:47:45 2026 by rpki-client