Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e1e8473-f851-3c7b-9f03-0935710818c6.roa
File:                     4e1e8473-f851-3c7b-9f03-0935710818c6.roa (raw, json)
Hash identifier:          cF1dG0U1TS0cxSqGKCv9SeBNNK6Gh332O4OqysvD/LI=
Subject key identifier:   72:B6:FF:4A:D0:F9:A0:49:10:18:51:16:E2:F8:A0:43:2D:7B:FC:F6
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E5FDF72B2F994C023C60D00D0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e1e8473-f851-3c7b-9f03-0935710818c6.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c013:8000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:72:b2:f9:94:c0:23:c6:0d:00:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=e8e4dfec-b94a-48de-89f7-7366d100c95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:d7:40:61:72:40:52:97:e7:5b:60:de:d5:
                    b4:59:f8:7f:af:32:75:10:c1:7d:7e:42:ab:35:c3:
                    e8:3d:6c:28:41:7e:13:f1:68:f1:db:83:ae:8d:ac:
                    13:7a:af:d3:5a:4c:25:2a:b5:69:10:10:b7:95:a8:
                    47:16:fc:d4:21:4e:0b:d6:55:16:fd:59:c4:79:41:
                    e4:03:22:e1:d9:d6:d9:51:a9:fa:22:b1:5e:9f:01:
                    31:5b:d9:29:c3:08:7e:20:36:70:e3:56:62:7c:41:
                    1d:1c:c6:79:c2:54:df:1b:81:b6:e2:ea:5f:77:ee:
                    70:cc:a9:d7:c9:ad:4c:16:39:ca:33:a1:8f:69:4f:
                    16:9f:0e:d9:a6:46:4a:39:a9:f9:6a:6e:11:b3:ad:
                    77:a5:04:cb:91:f0:22:f4:74:9a:fa:2f:ee:c9:93:
                    a5:bc:42:7b:1a:4a:93:3b:88:24:73:cb:94:21:81:
                    39:76:70:74:c7:38:c7:fc:13:6d:5a:59:b6:ea:df:
                    99:d5:91:6c:5d:19:36:60:f7:ec:d1:c5:09:64:e1:
                    ad:5b:73:f9:74:c4:c5:67:da:84:69:7e:63:e0:df:
                    f2:e8:62:43:c3:02:af:64:f6:21:df:65:cb:93:14:
                    96:1a:56:72:91:7a:b0:06:dc:64:7c:99:19:97:84:
                    4f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B6:FF:4A:D0:F9:A0:49:10:18:51:16:E2:F8:A0:43:2D:7B:FC:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e1e8473-f851-3c7b-9f03-0935710818c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c013:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:af:2d:d3:58:a8:01:08:bc:94:9e:ea:3b:60:3c:c3:77:11:
         75:ac:73:39:9c:ad:d9:4c:eb:10:f3:5d:51:74:ab:0e:6f:2f:
         4a:49:91:f4:48:49:e3:2c:2c:f6:87:7e:72:d8:fb:31:92:66:
         df:28:00:32:ec:d1:e6:30:e7:c2:b3:1d:33:ef:bb:b8:5b:1d:
         22:f3:ec:24:69:24:31:3b:63:8a:1d:1d:3c:cd:8c:b0:12:c9:
         50:31:74:f8:51:ed:2f:12:a5:77:95:a8:c3:61:05:52:bd:68:
         60:52:d1:a2:ea:fd:36:97:d5:ab:f5:8c:82:40:65:9e:64:00:
         4d:d2:32:70:47:cc:b1:67:b5:69:4c:5b:8d:8d:60:c4:a1:95:
         72:2f:4e:f7:20:3b:f5:23:c7:f6:ba:8f:bf:9a:af:06:c3:da:
         85:7d:95:ca:12:f9:67:55:56:fe:f5:4b:06:fe:af:3e:78:16:
         4b:f6:c4:c5:b7:4f:38:a6:3d:e1:cf:31:02:f5:a2:01:2d:19:
         17:f2:73:ed:da:b6:af:34:37:42:e5:df:0e:66:8b:00:c9:be:
         70:fb:0a:0e:b1:fb:cf:71:99:44:4b:03:10:ef:5d:48:09:47:
         b8:3d:31:0b:1f:7d:73:20:7b:8e:dc:b0:ab:5c:fc:0b:e2:6d:
         08:26:42:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:51:26 2026 by rpki-client