Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aba10186-516f-37e9-b018-079e3113d4c9.roa
File:                     aba10186-516f-37e9-b018-079e3113d4c9.roa (raw, json)
Hash identifier:          4A5P3M9eqnBBce6P0lyVSX1jg556U/5OXkANdWWwbcA=
Subject key identifier:   A3:F2:CB:D4:F3:51:03:2D:21:DF:4B:16:C6:5C:01:14:1D:B9:38:B3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE661FC1E54AD9763FA234180
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aba10186-516f-37e9-b018-079e3113d4c9.roa
Signing time:             Mon 18 Aug 2025 18:14:07 +0000
ROA not before:           Mon 18 Aug 2025 18:14:07 +0000
ROA not after:            Sun 16 Nov 2025 19:14:07 +0000
asID:                     31898
IP address blocks:        2603:c010:c000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:61:fc:1e:54:ad:97:63:fa:23:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 18:14:07 2025 GMT
            Not After : Nov 16 19:14:07 2025 GMT
        Subject: CN=f9c0b1a7-c09b-4de8-9a6b-0be6a199b94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:88:dd:4f:43:04:ec:e0:81:64:bf:1e:36:49:
                    69:d5:ae:4b:34:fb:30:e7:1c:5c:10:8f:70:2b:68:
                    ac:99:eb:69:5b:cb:1c:e3:63:3f:a9:c5:c8:21:e6:
                    4e:76:ac:6a:e3:ca:67:58:f5:af:6e:46:6f:97:5f:
                    e9:63:07:4e:fe:77:f8:32:17:0b:37:d2:82:b3:97:
                    a6:04:7a:25:09:8c:22:18:69:66:65:95:80:50:9f:
                    5f:2c:77:77:fa:21:63:fe:e1:3c:5f:90:bd:0e:b4:
                    6f:a3:1d:25:f8:dd:f4:5a:7b:4f:42:4f:62:82:e1:
                    0e:ac:08:b9:ba:90:49:cb:7c:9e:64:09:2d:bf:c6:
                    5d:78:e6:96:1d:bb:db:bf:ba:a1:df:ef:d7:8a:63:
                    9a:2e:fb:63:1e:3f:7c:83:2c:8d:30:35:bc:8c:f1:
                    a2:c0:d6:bb:d9:16:c7:94:aa:3e:3a:54:9a:17:28:
                    4e:0f:b3:f9:1c:7f:c4:fa:00:6b:20:1b:f2:1e:6e:
                    e6:02:6d:b8:e1:e6:1c:73:ac:71:13:09:9b:8a:b8:
                    ee:ee:63:c0:6f:98:29:0a:92:84:12:26:1f:c9:97:
                    5e:aa:7b:c5:4d:47:a3:cb:85:ab:9a:1e:56:01:d1:
                    a9:08:9b:39:a9:d2:8f:6a:d3:4e:4f:01:32:8d:47:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F2:CB:D4:F3:51:03:2D:21:DF:4B:16:C6:5C:01:14:1D:B9:38:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aba10186-516f-37e9-b018-079e3113d4c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c010:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:7e:99:32:c9:cd:87:ca:3a:86:da:4c:34:5f:66:11:97:68:
         8e:a8:a2:04:ec:a0:9d:a1:e9:8f:e4:c7:83:92:62:61:1d:ca:
         33:9a:4a:71:47:98:72:aa:51:f8:cd:a8:90:91:85:b2:26:25:
         bb:09:80:69:ce:3f:ac:72:2d:a3:cc:41:1e:26:6b:29:93:76:
         a3:b9:16:5a:c5:e1:31:73:d3:04:03:73:cd:7f:36:18:fa:d6:
         e3:fc:75:d7:aa:ca:d7:e7:f4:cb:30:05:08:ab:16:5d:6a:0a:
         94:fd:7b:f5:d7:e9:0b:df:63:17:a9:f0:01:f5:b2:fc:0f:81:
         f4:13:3e:82:88:e5:18:43:a2:b4:0e:94:3e:87:57:27:af:59:
         de:36:86:7e:f8:0a:4e:58:cb:9c:4c:41:42:3c:ef:f7:38:c2:
         a3:c9:0f:56:90:54:42:a8:a7:e7:da:e6:c1:c8:8f:56:00:90:
         44:00:f7:8e:e5:b8:6c:e0:c4:d7:28:46:33:9a:89:81:97:8c:
         a7:21:d4:dd:fe:fc:eb:6b:ef:69:b4:97:9f:ba:10:d6:bf:9d:
         47:d3:47:86:c7:ef:96:2d:6e:30:8e:e4:33:5f:e1:35:33:fe:
         2b:fa:15:a3:ca:c0:04:db:84:2b:9f:6e:3f:a5:c9:ac:6f:80:
         4d:b5:33:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:31:31 2025 by rpki-client