Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3cfbe63c-36cc-37cd-9746-bb78c54f49f9.roa
File:                     3cfbe63c-36cc-37cd-9746-bb78c54f49f9.roa (raw, json)
Hash identifier:          G9kCc7Z07lCkBhASY8MzI22QkfjpQTrRx13cXLrP6dk=
Subject key identifier:   99:0B:BD:31:C5:B1:CC:81:DC:7B:C5:5A:EE:91:F3:C8:19:7C:34:6F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6F3A1210E692AAA3AA8D60D0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3cfbe63c-36cc-37cd-9746-bb78c54f49f9.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        2603:c000:2500::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:12:10:e6:92:aa:a3:aa:8d:60:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=01212d9d-6527-471f-9e10-aaa70c526de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:e9:53:a0:b4:c5:15:3e:8a:47:4c:4f:26:
                    f8:c0:22:d6:d0:9e:9e:bd:94:a3:79:93:8d:9a:98:
                    82:e0:35:76:b2:5a:44:2c:20:e8:b8:fa:e4:9e:3e:
                    1e:70:02:d7:3f:d5:55:10:d9:7e:5c:62:51:09:7f:
                    8d:89:ef:cf:2a:26:e2:64:89:9a:b4:29:8b:3b:d1:
                    8b:e1:ea:c3:8f:a2:6a:f9:9d:2a:1c:3d:dc:6e:66:
                    70:a1:57:4a:6f:f5:8e:7d:97:11:ff:6a:37:9b:4a:
                    df:45:2d:50:03:e9:bf:04:47:60:2a:21:5e:cb:b5:
                    cb:0d:5e:ba:92:cc:25:33:ac:cc:53:9a:c6:9c:8f:
                    91:a5:28:c5:e6:41:2e:ac:36:ea:41:37:a4:a0:42:
                    26:e7:d2:f5:f2:dc:0d:98:a8:69:24:22:ed:ea:8f:
                    fd:4b:a1:49:9c:dd:ab:ca:93:1e:be:9d:ee:42:1d:
                    3a:7d:71:c6:c2:fb:55:a0:28:47:48:9c:11:5c:2a:
                    a2:2d:a1:42:f1:65:05:db:87:5b:b3:60:0b:3e:38:
                    08:de:eb:ec:d6:16:fe:f3:0d:8d:c8:26:2a:95:d2:
                    27:41:02:07:39:1f:3c:91:90:ce:e6:cd:1d:8c:35:
                    2c:e9:ba:13:73:af:1d:dd:d9:73:4c:11:75:b7:a7:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0B:BD:31:C5:B1:CC:81:DC:7B:C5:5A:EE:91:F3:C8:19:7C:34:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3cfbe63c-36cc-37cd-9746-bb78c54f49f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:2500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:48:a6:5b:de:9a:81:e5:7e:5f:b8:16:3d:52:0d:69:29:4b:
         8e:01:ba:b7:53:37:a7:e1:9b:23:e8:43:3c:03:c7:f3:b3:33:
         2e:86:ba:f8:e7:89:56:0c:ee:01:cf:97:8f:c7:4c:65:3e:b0:
         c9:93:43:9e:43:19:2a:15:50:2f:1e:ba:4a:62:c3:7f:6d:7d:
         08:61:77:69:dd:e7:12:79:e6:2e:17:62:63:60:75:5b:43:46:
         4e:a7:2f:fe:bc:2c:a1:8a:5d:d9:26:8e:49:00:28:ee:a4:c7:
         47:11:9d:84:18:7e:e4:67:4e:93:02:fb:17:1e:dd:b7:8a:be:
         0d:28:1f:a6:1f:26:55:3e:5e:b7:32:be:c4:70:2a:4d:5d:21:
         32:81:fc:09:7d:e5:f5:e2:ee:87:59:12:b4:31:16:99:95:74:
         f3:8a:15:79:0e:ba:5c:f5:9b:ca:11:56:2d:4c:b0:6d:37:c9:
         3d:7a:8c:73:23:c4:52:d5:ad:d9:62:6d:15:8b:0b:c6:68:44:
         15:c6:71:7c:f0:bf:5b:3c:c5:13:ff:c1:7d:8b:84:e1:80:5d:
         20:34:81:27:b3:09:08:88:d1:08:85:af:dc:93:a0:45:a3:71:
         7a:e3:05:1e:50:cd:c8:b6:f9:b2:4a:95:38:77:1c:9b:e1:d4:
         cd:c5:69:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:51:38 2026 by rpki-client