Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/46b3a21b-31fa-32e7-be8b-725381b2074d.roa
File:                     46b3a21b-31fa-32e7-be8b-725381b2074d.roa (raw, json)
Hash identifier:          XiLGOTp8W+KAJxtRISJct/5wKpJ1Cj3KGlC1rzJEoGk=
Subject key identifier:   11:91:D0:4B:EC:0D:81:A0:78:1D:D2:9B:38:F2:C5:4A:95:6C:2D:17
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E56DFE774BC23CACD3B8A5D40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/46b3a21b-31fa-32e7-be8b-725381b2074d.roa
Signing time:             Tue 30 Jun 2026 03:39:10 +0000
ROA not before:           Tue 30 Jun 2026 03:39:10 +0000
ROA not after:            Mon 28 Sep 2026 02:54:40 +0000
asID:                     54253
IP address blocks:        2600:200d:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:df:e7:74:bc:23:ca:cd:3b:8a:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jun 30 03:39:10 2026 GMT
            Not After : Sep 28 02:54:40 2026 GMT
        Subject: CN=9c4af50a-b4d3-4b26-b77f-e6c96d093d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:7c:d9:a5:a8:ac:65:70:6e:51:3b:42:d9:
                    43:25:ff:b5:87:62:0e:61:da:7b:f4:cc:4d:85:fd:
                    27:91:b7:65:05:6a:ff:9c:db:71:98:7b:4d:e7:d2:
                    36:5f:40:0d:0d:09:d3:28:32:a7:38:e7:d2:8c:d3:
                    0e:1e:1c:69:36:b6:17:23:fc:07:3c:38:9b:6d:47:
                    e3:67:c4:da:54:1c:fb:5b:e3:9a:36:75:b4:1b:66:
                    fe:ca:cc:05:29:e4:24:6e:09:0b:6d:48:3d:d2:1b:
                    93:6f:49:e3:2e:23:b8:35:73:00:8e:ae:a7:db:29:
                    17:86:47:68:e3:70:fb:d9:64:89:e2:95:a2:33:49:
                    af:51:0a:eb:fb:66:4c:8b:a2:9f:59:d7:18:65:27:
                    01:03:39:8a:91:89:c6:83:89:bf:19:0d:07:4f:3f:
                    8f:ae:8f:f5:cd:eb:7c:30:1a:3c:7c:85:5c:2b:f1:
                    ab:51:f1:d5:82:b7:64:91:d8:56:f5:21:47:93:08:
                    a0:35:84:62:23:45:2f:28:f5:6d:41:54:46:3a:fd:
                    62:8a:5e:12:38:02:2f:54:65:4b:70:33:96:82:85:
                    41:10:ac:e8:27:4c:dd:2b:43:ca:41:cb:6c:12:f6:
                    b6:b9:50:27:fd:e0:86:6f:da:7c:ff:e4:cc:8c:79:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:91:D0:4B:EC:0D:81:A0:78:1D:D2:9B:38:F2:C5:4A:95:6C:2D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/46b3a21b-31fa-32e7-be8b-725381b2074d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:200d:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:83:98:56:2f:ce:a8:38:ef:1e:71:2c:fc:dc:1e:bd:b5:
         f6:d2:5a:e8:31:6d:7f:51:9b:7b:b0:b1:ce:76:99:42:e1:e9:
         8a:b8:cf:df:dd:15:48:35:3c:e9:53:a6:db:4b:e4:83:13:a7:
         5d:0e:7d:21:a5:18:8d:24:1b:7c:99:eb:3e:a0:50:aa:d2:33:
         73:c4:c5:02:bc:c4:d9:10:c8:c4:7f:29:d6:2c:68:27:2e:2e:
         f1:f9:e8:45:f1:0a:e3:0e:d0:c2:50:65:58:d7:61:a0:ba:60:
         ae:09:f1:8b:13:df:c2:cf:70:ef:d6:ec:1f:a7:5a:a0:9f:82:
         cf:5b:3e:2f:b8:5c:e0:9e:c0:4e:8d:e5:97:4c:2f:ed:5a:03:
         e9:6f:5a:44:a3:64:49:1c:c7:3a:94:20:83:44:f1:5f:c2:82:
         e2:e5:4d:5a:06:cd:b3:31:26:e1:f5:62:34:62:f5:15:01:d3:
         e2:16:55:ec:40:73:b8:e3:7e:68:3a:93:2b:74:70:7f:25:46:
         2a:4d:7e:29:98:b9:0c:87:e4:90:52:46:bb:17:77:6b:3a:fd:
         54:b8:97:8e:59:2d:b6:ce:df:c4:9d:96:21:df:d9:7a:35:07:
         25:0d:e8:4a:29:72:dc:b6:c1:bf:43:02:d7:c4:1e:0c:81:01:
         81:1d:2e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:48:40 2026 by rpki-client