Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b8ae5732-d7fc-3290-9abb-e5c24f97d441.roa
File:                     b8ae5732-d7fc-3290-9abb-e5c24f97d441.roa (raw, json)
Hash identifier:          Yaa0pJdo0da2+biURKRAowQjwhoLTd4Bax1PWIXBcPw=
Subject key identifier:   10:4F:30:6D:48:7C:53:46:0C:7D:13:BB:AA:33:7F:F8:0E:0B:44:F8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA7886C226AFBAB8D139AFC00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b8ae5732-d7fc-3290-9abb-e5c24f97d441.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0f4:2500::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:6c:22:6a:fb:ab:8d:13:9a:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=04ec1b4b-b9fc-46c2-bda5-49bb257b2b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:33:3c:ad:21:93:29:97:05:3f:7f:90:0b:99:
                    d0:29:56:fa:b2:d3:9e:06:b8:9c:e5:d8:e5:45:a9:
                    78:46:c4:73:ec:53:cb:8a:83:4f:fc:aa:26:01:78:
                    cc:b1:56:ad:d7:07:de:ef:52:71:46:d0:32:b6:23:
                    ac:f7:fc:ed:82:62:ac:68:8c:6b:34:bd:ce:48:83:
                    53:78:4b:ac:c7:b8:b2:c5:bb:ad:6d:40:52:ce:4e:
                    d3:31:6c:ed:84:03:18:90:46:b9:59:17:79:60:8f:
                    c6:52:12:b9:52:dd:b1:6f:4c:01:35:59:58:b4:6c:
                    41:ad:01:db:7e:68:09:2c:0e:b9:f3:f9:d0:3a:f1:
                    9a:56:ca:09:31:9c:ad:77:c5:ee:f6:e0:ed:50:de:
                    31:ec:5b:a4:d4:af:43:eb:eb:a6:d7:b6:d3:a1:0c:
                    5b:31:c1:57:9e:d4:3c:77:00:bf:22:18:d7:65:9b:
                    8e:45:19:24:00:83:86:a4:87:40:d8:3b:81:a7:7d:
                    fa:5b:3c:8f:6b:92:bc:cf:b3:0d:53:ee:d7:10:b1:
                    fd:9e:e2:6b:53:55:5d:94:d6:e3:1e:8b:b1:82:83:
                    ff:d8:6f:30:d7:c6:71:03:e3:74:68:dc:76:64:02:
                    73:39:78:47:34:53:87:a9:67:b7:1e:95:2f:97:2e:
                    d6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4F:30:6D:48:7C:53:46:0C:7D:13:BB:AA:33:7F:F8:0E:0B:44:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b8ae5732-d7fc-3290-9abb-e5c24f97d441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f4:2500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:eb:c8:41:b9:42:44:30:b1:8f:dc:b8:40:0b:6d:46:5c:c7:
         b0:db:1a:6b:d7:98:f3:6c:9a:46:de:75:91:7c:be:7a:c4:db:
         ad:08:6b:a3:f4:3f:a0:67:0b:fc:2c:3d:9e:b0:b1:4d:86:a7:
         13:49:cb:a0:ce:e7:b5:76:fd:1f:45:03:88:ff:b1:24:0a:ac:
         ba:80:35:04:78:b6:9c:fa:42:7d:ab:0e:e8:4e:50:65:c4:46:
         45:54:20:33:32:20:72:a5:ff:7e:07:7c:f5:84:12:ee:1c:bd:
         27:5c:15:8d:24:61:ab:0d:c9:ed:a9:c2:3b:c6:8b:98:41:64:
         97:75:8d:f7:7e:fa:5f:3f:22:a7:35:5d:51:cc:90:82:fd:ca:
         2a:51:42:c7:e0:79:53:93:d5:32:27:71:48:34:85:a1:72:dc:
         d7:88:fe:f6:c0:02:fe:cc:bb:2f:4a:56:9d:d9:b8:5e:3d:26:
         4a:8b:1e:e1:c2:0d:87:a5:fc:9b:e3:87:96:e7:b6:7d:35:d6:
         29:67:04:f9:a7:48:94:85:ed:8e:45:20:78:c6:48:ac:60:8e:
         6e:0a:77:cb:3b:b7:c9:e2:34:c7:b2:63:af:45:b1:f7:5e:9c:
         4a:50:97:48:17:51:95:f5:02:ca:19:fd:9e:78:05:05:f7:46:
         fe:7f:67:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:36:34 2026 by rpki-client