Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42982f4e-96ee-395d-8bf7-2f63618018bc.roa
File:                     42982f4e-96ee-395d-8bf7-2f63618018bc.roa (raw, json)
Hash identifier:          C6WOle41DOXghOYeD9nxTWvbMlxIgY80IFoRnBBuz9A=
Subject key identifier:   AC:3E:26:8A:97:A4:63:E9:C3:7C:0F:32:5F:6C:6F:48:68:0D:65:0C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD4C07F005753063A84A71910
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42982f4e-96ee-395d-8bf7-2f63618018bc.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c0c6::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:7f:00:57:53:06:3a:84:a7:19:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=9d3dec68-fc28-4e8f-9b76-c38d86fef88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:32:93:7b:b2:2c:bc:14:60:df:33:db:10:
                    af:1d:14:b8:d9:ae:d3:43:5d:b1:ad:a5:0b:13:ff:
                    64:e4:49:46:b2:4e:67:ec:61:d1:95:8a:a0:40:b3:
                    a1:0a:09:f3:22:02:41:13:3d:44:93:78:be:13:75:
                    0d:8d:f3:5d:ea:d3:cd:67:c0:c2:78:03:c2:e1:9b:
                    4b:f2:93:d3:1c:0f:8d:29:6f:df:63:70:a8:d2:73:
                    28:1c:84:26:1c:9b:cf:a4:d2:4e:72:0a:7c:8f:9f:
                    d2:e7:e2:5a:f4:5a:92:8b:5a:07:db:6d:a9:ef:22:
                    76:d4:5c:4c:74:80:6a:00:30:02:b9:48:e4:61:df:
                    20:dc:d8:09:8f:22:37:ad:ad:bb:ee:bd:8c:c7:7d:
                    e0:0c:b4:23:c7:a9:b7:72:93:b6:b9:81:8c:2f:4f:
                    81:50:2c:ec:0d:72:fb:2d:a7:d5:9b:74:30:9a:ec:
                    92:47:93:07:70:69:9d:75:5d:5c:bf:42:82:88:ab:
                    66:b6:48:95:79:65:25:da:02:52:34:c7:76:d2:bc:
                    4d:d9:79:4b:10:d9:c4:d1:40:f8:e8:cc:1a:a4:26:
                    fe:45:3a:9b:50:0f:79:93:c7:ff:ab:11:bb:2c:d3:
                    3b:54:48:05:d8:c7:25:31:38:7a:bd:c6:51:69:68:
                    48:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3E:26:8A:97:A4:63:E9:C3:7C:0F:32:5F:6C:6F:48:68:0D:65:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42982f4e-96ee-395d-8bf7-2f63618018bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0c6::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e3:80:0e:a3:03:14:9a:0b:ed:2f:4f:e8:ea:05:18:03:33:
         79:ea:b9:8a:3c:a9:c6:a2:1a:98:47:97:38:08:05:63:b1:54:
         d5:cf:74:f9:65:70:6e:2d:00:44:75:e4:b2:c6:6c:c6:0e:d3:
         b0:69:91:e3:c0:88:9b:2e:12:d0:ef:aa:f7:e5:66:67:4a:f5:
         7a:00:7c:42:53:11:76:0f:3b:d3:89:32:94:e8:6d:d5:d3:9d:
         37:a3:4b:d6:1d:30:65:52:ba:de:a1:14:4d:37:0d:8b:9f:9e:
         f9:72:66:87:a7:b2:d7:82:79:c0:4e:12:ae:88:e1:56:08:fe:
         5d:a8:cc:f4:7f:ca:a0:ff:77:e6:ee:d1:1e:a3:87:4d:ca:37:
         9f:72:c1:d4:f9:bf:b3:26:de:b2:e9:33:2d:18:6f:f3:1d:2a:
         4c:73:60:a7:90:db:07:ef:86:57:d7:2c:c8:ec:81:9a:24:77:
         a3:03:ff:b0:dc:12:35:fc:c0:14:53:ac:1e:58:80:05:70:a6:
         4d:fd:5f:5f:ee:0e:66:17:48:18:83:45:fc:3b:3f:fb:b8:90:
         df:68:d5:9a:fd:1d:88:45:a8:b3:e2:f4:b1:02:00:29:f2:d6:
         9c:ab:85:f5:81:79:7e:02:6b:b4:91:4e:be:ef:1b:c1:cb:c8:
         f8:95:c2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:04:02 2026 by rpki-client