Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6310b7f7-681f-3ba4-bb3f-ad25890fd064.roa
File:                     6310b7f7-681f-3ba4-bb3f-ad25890fd064.roa (raw, json)
Hash identifier:          XItAiSpaKfoCCR3u6pvbqq65lhsOkrFOApqih015o0w=
Subject key identifier:   D7:44:04:0D:51:A5:BC:17:16:12:80:A8:8B:3E:2D:C5:9C:0E:14:2F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD4C0652AB619F20C23619F60
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6310b7f7-681f-3ba4-bb3f-ad25890fd064.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c0c0:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:65:2a:b6:19:f2:0c:23:61:9f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=ec326d38-16c5-478b-88e5-93da74d35f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:ad:5f:a4:d8:45:b1:04:e6:96:b6:e5:11:
                    c9:ee:f0:b2:15:32:dd:40:b8:a9:d3:9d:2c:43:ce:
                    bb:4d:42:cf:0c:a4:bd:3f:ff:1d:55:84:1a:ec:33:
                    8a:16:ec:e0:af:5d:7f:96:49:85:c6:2f:87:a0:88:
                    c8:a8:58:0d:b6:ab:d4:6f:11:3e:7c:b0:50:cf:01:
                    12:a1:9e:db:cb:04:00:b3:15:d1:4a:18:30:cd:69:
                    c7:5c:c5:7c:29:5a:9d:42:17:3f:0f:95:87:9d:37:
                    f1:9b:8b:dd:a8:b9:99:21:16:ba:0e:b3:09:e0:8b:
                    f9:b7:94:fb:e9:f4:15:22:a0:33:b8:b3:ec:f0:dc:
                    62:56:dc:a7:2c:f7:f7:06:19:2a:96:ec:c7:fc:7b:
                    10:82:a5:1b:9c:24:67:13:2a:47:f4:aa:5c:7c:23:
                    ad:e2:ed:4e:b9:14:8c:43:42:2f:cf:00:64:01:b1:
                    de:53:26:3c:2a:c8:39:17:fe:37:35:24:f7:55:72:
                    f6:fc:ee:f1:15:23:7e:7d:43:93:f0:6a:1c:be:e1:
                    c5:51:63:2d:52:36:dc:47:ae:4d:a0:ed:96:cf:1e:
                    e5:d3:2c:cc:b9:ca:d5:98:f4:ab:3b:dd:a5:f8:be:
                    b3:04:3c:ae:86:40:21:fa:a0:66:3a:4e:6f:08:dd:
                    a1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:44:04:0D:51:A5:BC:17:16:12:80:A8:8B:3E:2D:C5:9C:0E:14:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6310b7f7-681f-3ba4-bb3f-ad25890fd064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0c0:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:6a:3c:35:74:34:0a:24:cc:80:9c:c4:69:a4:c5:08:8a:65:
         46:d6:10:a4:9a:42:60:d9:4b:46:6c:71:d9:f7:48:85:f7:7d:
         7e:d3:95:66:17:05:49:02:90:35:6f:16:ae:f7:45:b9:b8:d4:
         e9:ed:7f:02:8d:b4:3a:29:06:fb:cf:fa:3f:c7:fe:b1:6b:81:
         a8:94:03:56:ed:e9:a4:f6:08:b5:7d:d0:1f:f9:53:63:42:c5:
         c1:ba:b8:fe:62:a7:0c:bf:55:65:53:f0:8a:71:68:e6:09:46:
         88:3f:c0:46:34:36:56:23:4d:25:5a:72:b5:2c:83:e3:b1:06:
         80:82:70:ee:82:59:47:17:3d:15:83:09:dd:3c:c2:1a:ea:0e:
         c5:a3:fa:9c:a0:a8:df:b9:08:1f:38:52:d9:b7:09:a7:1b:29:
         8a:d7:e6:6b:b5:72:c2:71:b2:aa:e4:c2:df:ba:96:06:ee:14:
         82:29:45:48:55:e6:d4:f3:6a:3c:7c:78:06:43:2a:b3:63:37:
         77:ca:e6:ce:d3:20:81:0e:ef:92:17:78:6b:1b:a7:df:49:1b:
         02:98:f8:f3:52:21:ab:51:57:b4:bc:11:08:a1:4b:55:72:c7:
         8c:f8:52:fa:05:be:25:64:29:ec:f1:fb:77:c7:2a:b3:15:a7:
         c2:5b:08:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:05:06 2026 by rpki-client