Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74fefdc2-c035-36a8-90ef-ce5e953134b4.roa
File:                     74fefdc2-c035-36a8-90ef-ce5e953134b4.roa (raw, json)
Hash identifier:          ykcRbhC7HMvzm3CnOJGICjmdEDIZzas8CSuvCo9sfyM=
Subject key identifier:   F3:39:39:0C:8C:21:0E:44:A5:0E:4A:38:01:A2:93:CA:AF:FF:6E:83
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA7886DF75E91CE25C8849300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74fefdc2-c035-36a8-90ef-ce5e953134b4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0fc:2800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:6d:f7:5e:91:ce:25:c8:84:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ce417828-d65c-4607-b77a-424256d3ec93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b6:c1:17:fa:47:c5:fc:3b:e8:c2:1b:8e:0d:
                    ab:48:b2:a9:29:29:97:85:67:0c:69:c1:cd:72:3f:
                    03:98:22:c4:c2:8c:83:95:fc:a0:96:03:88:66:3b:
                    37:6d:85:1e:c1:80:0d:a6:f3:04:85:93:36:8e:f8:
                    af:5e:a4:42:3b:f0:db:a1:d4:94:55:fe:18:6d:0d:
                    42:e9:f7:eb:0c:cf:d9:c8:40:9e:49:3f:47:ee:6a:
                    a3:92:ba:ba:55:02:79:f8:0b:ed:2b:df:dd:11:d3:
                    3b:58:74:1e:b0:ee:d8:00:39:8a:68:3d:92:f4:d9:
                    6c:93:b0:78:c6:22:b8:41:3a:20:21:10:a2:3a:24:
                    e9:35:b6:f2:60:9a:ec:eb:22:3d:19:69:9f:89:a4:
                    7c:53:7c:aa:12:21:33:7e:01:79:e2:af:1f:1a:d9:
                    f0:77:98:ab:77:42:28:a4:40:4d:85:9e:04:07:de:
                    44:2c:16:17:8a:e8:c6:a5:4d:b1:8c:3b:0e:01:3a:
                    48:f7:92:62:1f:fd:f5:4e:77:8d:97:46:98:eb:dd:
                    c5:a2:d3:7a:d6:8c:1d:01:00:44:16:ee:30:75:3f:
                    9f:00:5f:60:0a:d4:04:f7:c0:18:b4:41:ab:ab:9c:
                    10:1c:29:56:df:95:75:50:ab:40:0a:10:d2:a8:7e:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:39:39:0C:8C:21:0E:44:A5:0E:4A:38:01:A2:93:CA:AF:FF:6E:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74fefdc2-c035-36a8-90ef-ce5e953134b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0fc:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:30:a3:93:fa:6e:bb:c7:87:20:0c:a4:87:e8:2c:28:bd:10:
         97:f4:15:6f:cf:52:15:a3:5a:d8:2a:fd:b8:5a:ec:85:8e:57:
         e1:f6:e6:e7:98:ad:2b:a1:cc:c6:e9:51:bb:ab:fd:7d:9a:aa:
         27:b4:f6:97:bf:47:d8:06:c6:9d:b6:19:7e:7c:03:e1:20:77:
         17:ee:a6:63:9f:09:62:ab:7b:ab:c3:85:7d:1e:0f:63:83:30:
         10:6b:75:96:8c:b7:58:cb:c5:60:a7:53:02:eb:7b:f2:66:49:
         4e:83:cd:d8:24:d9:96:e9:68:90:d1:8e:13:4c:03:ef:3b:fe:
         67:4e:8a:46:0c:68:f6:68:bf:52:7e:8f:40:0d:6b:bb:8a:7a:
         5d:c9:23:7e:2b:0e:de:69:6b:0f:3c:84:1b:16:b2:5a:7e:40:
         29:92:df:6c:d3:23:73:95:d5:ce:ef:6a:5f:b4:69:be:39:0c:
         8e:d2:10:2d:76:23:b0:11:bf:ec:f7:eb:a5:5b:b8:82:69:a3:
         73:16:51:76:43:2c:a1:21:b0:d2:4a:3d:69:93:6d:d4:3b:83:
         16:ba:33:7c:b8:65:3f:56:c4:b4:bb:53:21:94:94:83:40:13:
         47:ad:76:62:fe:93:74:11:b5:8a:67:30:70:ce:c3:0d:de:ae:
         b3:a1:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:37:08 2026 by rpki-client