Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/474ee0bf-2236-3cd3-939e-3fa4bb90a1eb.roa
File:                     474ee0bf-2236-3cd3-939e-3fa4bb90a1eb.roa (raw, json)
Hash identifier:          UcONwPp8oLjyw5C3szAz+2m4UtZvdUVoOMUM6Y30Lgw=
Subject key identifier:   A7:8A:01:95:EB:1A:E9:8C:13:73:8B:1F:52:FA:60:01:41:C1:1E:F0
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE67A5A74FDEE71BF8E3F3000
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/474ee0bf-2236-3cd3-939e-3fa4bb90a1eb.roa
Signing time:             Mon 18 Aug 2025 19:03:13 +0000
ROA not before:           Mon 18 Aug 2025 19:03:13 +0000
ROA not after:            Sun 16 Nov 2025 20:03:13 +0000
asID:                     31898
IP address blocks:        2603:c002:8e00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:7a:5a:74:fd:ee:71:bf:8e:3f:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 19:03:13 2025 GMT
            Not After : Nov 16 20:03:13 2025 GMT
        Subject: CN=2042fb5a-99fa-472d-bdaa-50d6f2b6e16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:3c:ab:82:96:8d:14:47:7c:98:15:a5:71:
                    52:39:f6:a2:07:21:f3:ce:db:f7:33:87:d1:d6:dc:
                    bd:e1:21:e5:a9:29:f2:68:5a:4b:f6:71:4e:2e:2d:
                    78:4d:5d:64:e3:e6:11:0f:d6:f3:b9:f7:7a:98:7e:
                    10:fb:0d:d5:76:01:3b:45:f6:93:da:14:1e:ec:c8:
                    1f:d6:0c:0e:23:ea:95:19:af:fd:a7:a7:49:4f:fe:
                    08:01:80:6c:a0:04:bc:ed:44:e4:97:81:ca:7a:f6:
                    54:cd:3e:ce:b1:fd:33:06:3d:f3:b4:d9:c5:ec:fb:
                    3e:81:2b:9c:94:cd:aa:1c:b5:62:50:80:66:69:7f:
                    de:7f:a3:06:a9:49:e9:f7:ae:c9:d2:76:52:21:c0:
                    6c:b5:52:99:51:14:48:ec:e7:bb:a3:41:91:a5:c3:
                    81:9c:a4:58:0e:3b:9e:c0:67:d9:26:bb:af:6f:2e:
                    91:5e:16:de:0c:d2:19:1d:9f:ac:d3:c6:61:09:4d:
                    be:25:a7:f4:c6:f4:53:43:ef:20:ee:48:e2:e6:b9:
                    d8:5c:7f:86:65:fd:4f:8e:48:07:dc:fd:6d:fd:54:
                    67:c4:15:a9:e5:9d:5c:bb:0d:f6:75:c6:aa:d2:a5:
                    e1:d1:ce:15:69:7f:92:d8:ac:3e:1e:38:45:0d:b5:
                    84:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8A:01:95:EB:1A:E9:8C:13:73:8B:1F:52:FA:60:01:41:C1:1E:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/474ee0bf-2236-3cd3-939e-3fa4bb90a1eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:8e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:44:96:41:75:5e:25:74:98:ec:74:c7:33:c9:c0:8b:0c:23:
         10:fb:36:5d:a0:77:b5:f6:9c:1c:1e:31:20:96:68:0f:16:cc:
         57:80:93:97:f2:9c:f7:da:90:6b:1e:d5:ed:00:ab:3e:d5:c9:
         5a:7d:61:a0:6d:5a:c9:3a:6f:c7:df:81:ab:85:b8:32:12:5c:
         45:52:08:12:e1:e0:b3:47:f7:f0:59:74:1d:a1:f7:6e:fe:b3:
         e2:08:84:9a:78:60:6a:4b:95:33:27:eb:c3:99:55:b6:01:b1:
         87:4e:1f:c7:31:06:68:4a:96:92:11:93:05:55:27:56:68:3c:
         cb:96:93:02:4f:31:e5:4c:44:4a:04:40:36:4b:67:2c:f1:20:
         05:27:fe:45:04:a4:a2:61:12:1f:fc:f0:b6:4d:dd:da:33:51:
         0d:58:40:21:35:21:a5:cc:f3:92:ce:ea:da:06:88:79:51:91:
         6e:30:19:c3:08:3a:0b:26:33:79:a7:b2:46:ba:21:60:54:7b:
         bd:46:b1:50:ed:5f:1b:a6:e7:8e:99:a4:e5:aa:36:2f:b0:2c:
         76:b4:d7:d2:e6:69:62:e0:32:b1:dd:7d:82:79:cf:46:2f:d3:
         96:d1:2d:f2:dd:bd:98:8f:02:c7:cd:1c:b1:2e:0f:2b:e2:ef:
         09:e7:5c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:31:30 2025 by rpki-client