Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bdc1d313-e722-3175-a88b-0e02110e4b88.roa
File:                     bdc1d313-e722-3175-a88b-0e02110e4b88.roa (raw, json)
Hash identifier:          uajauyfIMWgAkdlSENcdRreTuWq2o3rHOZ523+JsJzM=
Subject key identifier:   C7:96:F5:8E:B9:1D:A5:DA:21:1F:55:E3:50:A4:0E:43:5D:7C:53:78
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA78860AC10718F39CD745980
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bdc1d313-e722-3175-a88b-0e02110e4b88.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0f4:300::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:60:ac:10:71:8f:39:cd:74:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f26f3df8-968c-404c-8fdd-8432dcc6ac25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0b:db:f1:4c:3c:51:f8:9f:ab:dd:86:1b:5e:
                    10:95:36:00:d0:43:aa:9b:d3:d8:78:2c:73:ee:48:
                    8d:0a:0a:76:3e:72:20:a5:12:66:d7:82:10:bd:55:
                    5a:89:63:37:45:40:b6:6d:ad:1e:ce:6e:ed:79:c7:
                    71:30:a9:e9:bd:b9:1c:4c:1a:fb:fa:ed:38:42:9f:
                    77:15:d6:bb:29:05:7b:29:c5:3e:50:43:f9:ac:3a:
                    22:58:3c:4e:51:2e:cc:39:a1:58:10:3d:38:d6:eb:
                    06:cf:24:f0:31:bd:7a:01:23:0a:2a:bf:a3:d2:97:
                    19:68:d4:90:45:e6:85:e1:ed:43:3d:b0:2a:62:cf:
                    61:e2:6e:40:51:b7:f5:91:f6:5f:3d:49:98:b6:04:
                    6f:71:ea:4a:48:b8:53:66:14:9a:b6:5a:9f:ac:ee:
                    0d:db:8d:74:6a:92:72:b3:8c:ee:5b:bf:b7:20:78:
                    9a:4d:59:d2:16:18:39:29:fc:53:2b:ee:d1:2f:20:
                    85:46:d1:8b:94:53:fe:16:12:f8:60:7d:8f:48:a9:
                    ee:79:45:d8:40:e4:9f:4c:78:2a:21:45:94:73:ef:
                    da:e9:97:f3:b0:c0:fc:47:bf:37:1b:5b:cd:32:69:
                    4c:26:6d:00:9c:5f:37:6a:a7:1a:2d:af:ab:21:9f:
                    bd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:96:F5:8E:B9:1D:A5:DA:21:1F:55:E3:50:A4:0E:43:5D:7C:53:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bdc1d313-e722-3175-a88b-0e02110e4b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f4:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fd:e7:6b:89:f2:77:e8:f0:b0:99:86:a5:82:f9:1b:98:55:
         76:8e:13:e0:81:3a:9c:ff:eb:2b:cd:40:48:fd:58:6e:32:14:
         ef:1b:4a:e7:d2:cf:93:01:7d:68:70:aa:26:d9:92:e5:4c:85:
         9e:33:e3:26:24:18:1d:c0:94:2d:d1:7e:1c:32:68:43:04:f1:
         93:11:8e:9e:21:a7:b0:44:d9:51:3a:43:30:a7:93:a3:cf:1d:
         27:c1:96:a3:03:cd:9d:97:a6:b7:e4:23:84:00:4d:90:61:80:
         2b:aa:38:99:64:af:c6:7d:2d:72:48:5e:3a:5e:6f:38:45:45:
         bc:fd:f8:f8:c9:ee:3e:6c:9c:f4:7f:be:cc:2b:73:08:19:d1:
         8d:29:d4:20:30:2e:07:a3:a9:ac:cc:13:83:7b:79:7e:0c:55:
         f4:12:21:41:1f:a7:60:0b:12:48:51:af:2a:2e:8d:d0:2f:f5:
         60:90:1b:73:2d:45:e7:dc:73:2b:cd:61:ac:40:78:d3:58:c0:
         f5:61:1a:1d:3d:9d:a4:b6:2f:84:eb:32:a0:62:d1:7a:e8:d9:
         18:9b:78:d4:af:30:0e:18:7e:ab:1d:23:dc:7d:81:d7:a8:c2:
         2e:59:d2:a0:9a:9a:6f:d9:29:7a:cd:1f:74:04:5f:95:f2:eb:
         fa:2a:62:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:36:53 2026 by rpki-client