Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40a05fdb-2849-3818-929d-944c15f89f17.roa
File:                     40a05fdb-2849-3818-929d-944c15f89f17.roa (raw, json)
Hash identifier:          iqNAXsKAHL+LdwCkZjbdSz9KCbVGfkgSzxMa0DkVWdM=
Subject key identifier:   6D:82:57:EF:BF:4B:49:08:C5:FB:9C:C2:B0:8F:60:D7:F9:81:59:3B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA78712C84135E39B2709F0C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40a05fdb-2849-3818-929d-944c15f89f17.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c048:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:12:c8:41:35:e3:9b:27:09:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=39f36e92-3e63-4274-9a49-e7bd8cb6a34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:cc:f4:01:07:f7:73:e5:ad:d0:ba:2a:35:
                    c1:c7:d7:32:c3:ce:ce:90:09:84:27:60:83:8e:df:
                    17:c8:9f:b0:9b:4e:71:b8:f4:9a:55:98:49:00:23:
                    b6:f1:e2:f3:2f:90:6b:cd:e5:c6:80:39:a2:15:2e:
                    f2:48:36:ac:c5:e3:d8:b1:89:1f:b4:fa:c4:15:84:
                    36:ce:74:72:70:c1:3f:98:ce:ad:6e:b2:25:a6:a0:
                    da:02:0a:f1:61:27:f9:98:14:ee:71:97:9b:df:e4:
                    d0:f0:cd:71:9b:96:40:6a:fc:81:6a:d4:67:c7:f8:
                    a9:60:46:7f:75:fb:38:75:40:4e:ce:7c:24:47:c7:
                    fc:bc:3b:87:e6:56:b5:3a:4d:42:97:d9:fb:50:29:
                    60:d0:04:9f:44:da:17:a3:69:25:7c:db:e9:d3:e7:
                    f2:8f:1b:c5:05:e8:05:c1:cd:58:fd:8f:f2:b6:fa:
                    d8:5f:20:62:38:23:9b:c3:dd:ef:2a:bc:41:6b:2f:
                    7c:bf:56:eb:b0:d4:14:94:09:93:7c:58:60:5c:cc:
                    df:55:71:d0:97:f5:c5:99:07:a9:ca:7f:3f:4a:ef:
                    47:38:bf:ed:66:57:b2:95:f0:3c:31:56:dc:57:b3:
                    f6:64:84:99:3e:63:b1:76:cf:61:c0:bc:ce:29:b6:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:82:57:EF:BF:4B:49:08:C5:FB:9C:C2:B0:8F:60:D7:F9:81:59:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40a05fdb-2849-3818-929d-944c15f89f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c048:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:00:11:b5:37:65:a8:4a:8e:2e:c5:55:4d:9a:76:4a:da:e9:
         ba:9d:d0:3f:d7:ed:5b:04:08:ee:5b:3a:09:c1:de:fe:ac:e0:
         fd:58:c7:fc:72:5c:06:6d:05:62:db:dc:27:6b:56:39:ca:5d:
         33:07:a2:ea:6f:d8:b4:b4:bd:2a:f8:ec:75:40:7c:4c:50:9b:
         39:99:74:bf:f7:64:04:d7:8c:cc:5b:67:93:0b:58:19:c3:1f:
         2c:15:6e:b5:20:97:0c:ae:36:d1:7b:15:2c:2e:14:02:72:90:
         e8:19:07:6f:64:12:60:d6:41:84:f8:5a:58:53:34:89:f3:12:
         53:57:d7:92:e3:c2:38:4c:62:10:22:29:68:c2:fb:fb:91:5a:
         5a:32:31:c1:0d:17:fa:d1:30:98:ee:b1:fc:49:81:4f:33:4b:
         4a:b2:2c:f1:90:27:96:72:c7:6c:ab:a4:91:7c:73:d9:fe:54:
         0e:84:83:2f:a5:e3:12:70:8f:89:5e:be:3a:e2:41:db:f5:c2:
         e4:59:ed:1e:4a:92:8f:29:02:5a:00:40:a9:31:34:d4:55:25:
         dd:51:79:a5:a8:83:94:93:9c:66:12:d0:7f:e7:b4:9e:fa:c6:
         5c:5a:e7:14:3c:49:e8:76:f3:1f:8c:50:c2:67:31:5e:25:38:
         80:39:02:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:08:08 2026 by rpki-client