Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4084f0f-55e8-3175-add8-283fb84b1973.roa
File:                     a4084f0f-55e8-3175-add8-283fb84b1973.roa (raw, json)
Hash identifier:          ZHUKLLGzILPKce7hYOVD0TMdSZ8+nvfLb7voNzwTEKc=
Subject key identifier:   57:81:3B:6E:E4:C7:49:B6:9F:E6:93:F5:E3:88:AA:2B:A1:31:F2:E5
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE6B621EE28E5FC3519C09280
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4084f0f-55e8-3175-add8-283fb84b1973.roa
Signing time:             Mon 18 Aug 2025 21:03:39 +0000
ROA not before:           Mon 18 Aug 2025 21:03:39 +0000
ROA not after:            Sun 16 Nov 2025 22:03:39 +0000
asID:                     31898
IP address blocks:        2603:c001:3e00::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:b6:21:ee:28:e5:fc:35:19:c0:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 21:03:39 2025 GMT
            Not After : Nov 16 22:03:39 2025 GMT
        Subject: CN=81fcb79e-4972-4fd1-b1b9-308be2a7b1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:40:e8:dc:6a:36:c5:9e:ea:22:ae:b3:19:
                    b0:a5:2a:35:5b:ea:8d:c0:25:20:a9:78:4d:aa:f6:
                    10:5a:51:62:a7:12:c9:d8:56:6e:28:5b:ed:1d:d4:
                    7e:90:d0:75:ef:94:dc:8b:3f:b2:d6:e6:ec:0e:ff:
                    44:3b:3b:d8:38:c2:e0:e6:93:33:7e:68:99:9d:77:
                    83:c8:77:42:20:7c:8e:c0:bf:7c:64:21:2e:ec:9c:
                    a9:39:1f:72:ad:fa:fb:79:8c:e0:c0:de:c9:b1:36:
                    7d:16:f7:f8:55:e4:2f:65:d2:f2:36:d5:e7:c9:08:
                    4e:36:e5:34:0b:8e:25:eb:66:fb:d2:57:7a:77:06:
                    b9:30:0a:1b:52:23:56:15:97:ad:bb:56:bc:8d:47:
                    14:b9:84:72:bd:15:03:90:8c:78:f4:42:d3:1a:a6:
                    8f:a8:3e:00:69:80:1a:62:a0:5c:c9:3a:cc:b3:90:
                    66:c2:58:77:6a:04:b3:65:11:6a:2c:76:c8:a4:22:
                    d6:d2:bb:ff:ea:b8:15:a2:a2:7c:ee:65:96:69:c9:
                    43:11:be:f2:22:b5:42:3b:b6:ea:ec:b2:24:74:b9:
                    00:63:90:bf:4e:84:35:4a:dd:4e:26:d3:5e:a7:1e:
                    03:7d:c8:4d:82:4d:28:11:83:7c:89:16:df:58:27:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:81:3B:6E:E4:C7:49:B6:9F:E6:93:F5:E3:88:AA:2B:A1:31:F2:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4084f0f-55e8-3175-add8-283fb84b1973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:3e00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:7f:27:e2:e5:b6:13:6b:50:a7:b7:85:e8:c7:70:36:b5:67:
         1c:32:a1:f7:b7:96:ab:be:2c:46:bc:7e:03:ff:a6:dd:fc:fc:
         4b:4d:12:37:39:1c:83:73:f3:8a:55:6c:9b:67:fd:f0:7e:48:
         08:fc:3e:34:03:9a:1f:da:43:90:82:bd:05:cc:53:56:a8:c9:
         35:a9:a4:31:1b:e9:53:d7:13:31:37:ff:e0:37:0c:17:a8:f3:
         11:be:ab:c6:8c:3d:8f:ad:6c:5f:13:f2:06:c8:34:8c:37:43:
         1d:eb:d8:67:7b:7d:33:50:f9:66:b8:d1:8f:0a:67:04:c1:a8:
         29:25:a2:06:a3:8c:33:18:43:59:68:46:9c:cb:84:66:43:a7:
         29:45:04:e0:97:79:f2:f4:a1:76:27:77:78:36:0b:c2:42:d9:
         54:06:e0:3f:e4:ea:f5:70:a8:3b:12:fd:d7:77:04:f9:3a:92:
         34:a3:b6:8d:e4:bb:ff:2e:8e:4a:c2:65:74:11:e5:79:51:b9:
         cc:4e:e1:d5:c9:58:aa:ce:33:bc:ab:01:61:03:ef:39:b0:e5:
         12:1e:6c:75:02:18:a3:7a:07:58:29:19:41:d1:df:bd:31:80:
         23:8c:ce:44:83:d1:53:6f:9c:92:b6:6f:99:b6:5b:cb:11:b7:
         ea:a2:40:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:23:24 2025 by rpki-client