Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66cf80db-f83e-3ef2-bb21-b3dde92ae791.roa
File:                     66cf80db-f83e-3ef2-bb21-b3dde92ae791.roa (raw, json)
Hash identifier:          8YJ1s9RWWmxlCoTtlyvfbuh0JdFrL/cx0plDtpe3jjw=
Subject key identifier:   75:EC:FF:9C:5B:7E:EA:4F:33:B8:2F:D1:61:11:84:B8:01:4B:F7:27
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE63C2E99093773A14EC69600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66cf80db-f83e-3ef2-bb21-b3dde92ae791.roa
Signing time:             Mon 18 Aug 2025 16:57:57 +0000
ROA not before:           Mon 18 Aug 2025 16:57:57 +0000
ROA not after:            Sun 16 Nov 2025 17:57:57 +0000
asID:                     31898
IP address blocks:        2603:c001:3a00::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:3c:2e:99:09:37:73:a1:4e:c6:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 16:57:57 2025 GMT
            Not After : Nov 16 17:57:57 2025 GMT
        Subject: CN=adb4929d-d0ec-438a-b5a6-0a1cd3778913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e4:13:b7:79:31:6d:78:bf:60:e3:3b:fe:8b:
                    f8:99:9b:16:f9:eb:81:4f:c5:11:63:79:80:06:c3:
                    36:1b:50:85:ba:68:be:de:0d:de:96:a3:4d:ca:7e:
                    cb:80:ef:72:c7:ab:ba:8f:98:52:6a:9f:60:39:b1:
                    b0:90:6f:cd:43:ae:ec:f3:e9:09:81:e1:8a:6c:e0:
                    bb:08:75:a6:66:b0:75:31:6c:84:b9:3e:76:3f:2f:
                    46:b4:5b:d0:63:0b:ef:30:73:98:fa:4b:95:9d:f5:
                    83:c5:f6:25:ba:1e:fd:11:d5:6e:95:2c:cd:1f:c0:
                    22:15:d7:6a:2a:c6:a7:3b:bf:01:c1:20:3a:f3:9f:
                    8a:80:b9:f2:c2:f1:83:cf:b0:6a:8c:76:d0:8a:ba:
                    b2:cf:9d:cd:ed:47:d7:c6:81:0e:65:93:ef:9f:77:
                    f7:03:40:06:e6:c0:dc:87:03:13:1c:ad:d8:19:b8:
                    e2:59:35:3a:2d:e6:8d:b6:19:eb:bf:00:f7:f4:34:
                    00:81:67:bb:3f:d2:41:db:24:67:9d:7d:a0:05:e4:
                    81:2c:bd:d6:39:3d:02:25:76:06:01:94:48:6b:fe:
                    8d:21:02:4e:6a:c9:b1:43:30:c2:94:67:ca:38:7e:
                    50:ea:e7:67:9c:e0:f4:83:e6:c5:bd:d0:d3:5f:ab:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EC:FF:9C:5B:7E:EA:4F:33:B8:2F:D1:61:11:84:B8:01:4B:F7:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66cf80db-f83e-3ef2-bb21-b3dde92ae791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:3a00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:90:5b:d1:fa:f8:76:44:39:88:cf:af:fa:36:f4:92:7c:d8:
         bf:a0:91:a1:3e:1e:d4:33:83:20:21:76:3c:e8:a8:34:74:75:
         75:17:11:fa:9f:ad:b0:a6:58:48:21:09:e7:55:5b:1f:4c:e9:
         b2:6b:f4:19:81:12:d3:88:cb:68:95:4f:d7:d9:be:f0:26:ce:
         62:6b:2b:9f:17:24:34:13:99:c4:a2:63:d7:26:73:94:80:6e:
         e3:e8:d4:79:a4:2f:73:31:c7:cb:b0:57:6a:e1:5a:93:4f:55:
         ff:8b:fa:47:d7:c4:82:09:21:46:23:71:c9:b5:c5:d3:da:c8:
         96:04:d8:02:2a:82:44:7f:9d:6a:1a:17:76:48:24:38:40:8f:
         4a:c6:2a:d3:7e:d7:00:d1:8a:5f:49:f8:e3:be:b5:d9:4b:2f:
         45:44:c4:f3:cb:20:ff:e5:05:58:a0:e6:98:59:70:ab:e9:31:
         06:83:50:e6:ad:ba:9b:6c:ea:69:c8:56:8a:89:39:0a:a0:cc:
         2a:fa:a1:fc:f3:a9:29:79:6a:e4:1d:89:85:13:de:d5:f8:80:
         e5:21:3b:ec:6e:69:e0:4f:31:57:05:35:fc:36:0d:65:fa:86:
         bc:ee:3b:98:7c:87:2f:91:65:91:e9:db:d5:c2:c2:0c:d4:7b:
         d8:74:7d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:42:46 2025 by rpki-client