Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/657d6ade-cfec-33d0-9255-9fd78acb6a84.roa
File:                     657d6ade-cfec-33d0-9255-9fd78acb6a84.roa (raw, json)
Hash identifier:          igHQgUIfzufZlzy94zHxMPj4cCAPRxj2GAOt2U3XdiY=
Subject key identifier:   69:37:75:D9:99:6E:49:AF:C9:5D:E5:54:AD:1F:EB:DA:F9:EB:E0:B7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F4C3D660D4D08C4BBAF4B0600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/657d6ade-cfec-33d0-9255-9fd78acb6a84.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     31898
IP address blocks:        2603:c01b:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:66:0d:4d:08:c4:bb:af:4b:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=98a6b722-4713-4e5f-ba86-8969ca4b22f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:e0:d0:3b:69:fe:79:61:c0:f7:83:2a:10:
                    83:b6:5d:8b:e5:a9:49:ff:45:83:e1:81:0c:ab:df:
                    8d:15:c0:e7:c9:eb:9b:79:af:a0:0e:5f:1a:82:07:
                    1b:13:16:fe:bb:77:98:83:2f:93:9b:33:e6:76:dc:
                    05:dc:c7:27:2a:27:35:57:4c:af:5f:11:3a:fc:b5:
                    6e:96:da:bf:03:3d:a9:f7:dc:17:88:33:8c:06:d8:
                    00:24:22:98:b0:cc:3a:b4:8e:47:6f:7b:53:31:1a:
                    eb:01:82:93:47:e8:8e:b9:e5:39:cf:27:da:2f:06:
                    fe:22:18:93:e8:29:d1:e0:04:14:70:1c:28:f4:57:
                    ab:eb:bb:40:64:8b:2b:60:62:f5:fa:a6:82:9c:68:
                    cf:12:93:66:8a:96:94:e8:b9:11:02:cf:92:92:10:
                    41:76:b9:4a:1f:dc:da:d3:69:f2:de:e5:24:6f:6d:
                    a7:9a:b6:cb:a2:a4:4a:5e:56:67:b8:11:2d:27:db:
                    a3:13:ee:fb:62:b7:8c:b5:47:89:8f:12:ba:0a:9a:
                    d7:77:9d:d6:0c:88:de:41:15:2f:53:20:2f:c4:4c:
                    f6:e7:e2:cc:f8:9a:cd:a9:a0:7a:14:36:7b:a6:ff:
                    43:a7:a1:1e:22:c5:83:9a:b4:d8:73:3f:fa:e8:ce:
                    ba:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:37:75:D9:99:6E:49:AF:C9:5D:E5:54:AD:1F:EB:DA:F9:EB:E0:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/657d6ade-cfec-33d0-9255-9fd78acb6a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c01b:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:22:e2:95:34:57:b8:d8:07:33:7d:cd:62:48:0c:7a:4e:60:
         1b:69:d4:66:08:78:50:11:d5:88:d1:28:63:b2:7c:96:f1:66:
         3a:2e:05:97:50:60:42:ea:65:7e:9b:68:29:f2:2d:9c:f3:02:
         cd:14:7e:6f:d5:89:84:d4:b9:02:67:9a:ba:08:e5:e5:b9:43:
         e6:d5:b0:87:cf:82:01:c9:f6:1d:b8:15:ae:15:2c:49:01:0d:
         c4:bb:b9:5a:8f:6a:08:b5:07:e8:bd:5f:d1:7d:cb:5c:ee:ab:
         da:01:1e:a5:a7:27:eb:2c:73:bb:46:f4:df:75:40:cd:80:bc:
         45:dd:8e:6c:27:aa:08:ad:a2:b2:94:47:ee:93:3a:c4:ad:f4:
         ea:0e:ec:42:7b:87:3c:f5:75:7f:c5:ea:07:51:30:5b:c1:7e:
         3b:db:68:ab:73:ed:96:bc:90:81:b0:7e:1f:27:d4:08:f4:a2:
         05:a7:ac:f7:00:b3:88:46:21:83:33:c2:be:af:47:79:0a:34:
         14:23:6b:52:e2:7d:d2:59:4c:9a:50:d5:d0:dd:72:a8:a8:a6:
         5f:55:71:bd:21:7a:ba:89:77:6e:01:be:35:3f:27:81:54:fe:
         37:c3:40:fa:d5:ad:14:0f:3f:df:80:e9:5a:81:81:fe:b2:a3:
         bc:2e:01:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:56:45 2026 by rpki-client