Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bdc1d313-e722-3175-a88b-0e02110e4b88.roa
File:                     bdc1d313-e722-3175-a88b-0e02110e4b88.roa (raw, json)
Hash identifier:          nXzYL4jazqvPC/WCz8GJm7hwlU3Vb94/Jo8Dz92nzGc=
Subject key identifier:   7E:E9:C4:31:76:FB:00:CE:EB:BD:30:E9:A7:B9:A5:9C:D2:13:D2:90
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD78B0C9A5D643703B925EB40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bdc1d313-e722-3175-a88b-0e02110e4b88.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     54253
IP address blocks:        2603:c0f4:300::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:0c:9a:5d:64:37:03:b9:25:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=9995bd7f-b55d-416d-a08d-356becd3c08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:8d:16:83:90:e2:7a:24:f7:c4:49:b9:b1:
                    af:3c:db:75:30:ea:86:1d:69:54:c5:69:9a:b0:aa:
                    6e:33:21:a5:91:f4:df:2a:5d:37:42:bf:f3:e8:a9:
                    c0:68:e1:03:53:7e:16:8d:84:96:e3:41:a3:51:3b:
                    50:f6:98:f1:1f:b8:bc:91:62:80:af:e3:d6:e3:76:
                    7f:7f:46:4c:cf:f3:ed:31:33:1e:82:77:2a:f8:0f:
                    c3:f4:e8:1e:62:ec:6c:a7:ec:df:fb:28:47:5a:21:
                    75:08:e6:99:06:eb:78:6f:a6:54:41:83:49:90:0b:
                    f1:48:6e:43:4a:52:50:9c:c9:ad:e5:e1:11:e7:72:
                    6c:ab:d9:b5:e9:cd:c2:0f:b4:dd:33:1f:f2:c8:94:
                    ab:52:20:58:55:84:c9:95:95:4f:0b:b0:8e:0f:b4:
                    44:18:cd:e8:db:d6:d2:09:48:39:bd:3d:a9:a6:c1:
                    90:e4:af:27:de:65:71:55:70:e7:37:f0:99:5d:97:
                    f4:d2:35:81:71:20:f3:5f:29:42:4f:74:2e:63:41:
                    d1:1c:a4:fd:be:5f:6c:54:05:7b:7d:b9:06:c2:fb:
                    46:1a:b1:44:3f:72:47:04:34:04:d0:70:e2:21:67:
                    9f:39:43:bc:20:44:a4:84:c0:3f:9a:0c:42:6e:64:
                    71:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E9:C4:31:76:FB:00:CE:EB:BD:30:E9:A7:B9:A5:9C:D2:13:D2:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bdc1d313-e722-3175-a88b-0e02110e4b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f4:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:47:42:d1:6e:cd:20:87:7d:f8:52:e1:3d:93:0c:c8:46:24:
         8c:28:a3:75:54:b1:54:ec:03:6f:7b:27:6a:0c:50:da:cd:5b:
         81:85:4d:81:7c:0c:03:06:13:99:f5:66:6a:5a:8c:e1:06:6d:
         69:88:53:ea:e0:18:9d:48:9d:16:f7:20:f3:3d:51:7d:78:a0:
         09:53:7e:f0:2f:f1:69:50:c4:08:62:57:e2:f9:ed:9d:3f:c8:
         12:ee:d4:ea:0a:d2:78:31:b9:67:70:0f:a0:1e:92:91:26:53:
         fa:3f:2b:c7:21:df:8e:cd:c2:58:58:55:50:f3:00:a9:de:85:
         74:fe:db:ba:f1:43:82:6c:ad:7c:2d:fe:dd:69:59:b7:76:e9:
         12:93:4b:15:89:2f:4c:19:68:33:e0:cc:26:85:55:3d:73:cd:
         81:88:6e:1c:41:70:9b:ad:35:0b:31:a9:50:cd:02:49:5a:b4:
         97:f4:ff:60:52:9a:3d:5a:c9:f0:78:d1:38:3a:92:67:89:07:
         4f:83:4d:f4:d7:ea:32:63:13:ce:9d:9b:e2:b9:74:11:aa:06:
         2a:04:a0:ad:61:7e:73:3d:ad:9b:87:a6:3a:72:3d:ce:7d:44:
         36:90:95:4d:eb:38:a1:0b:f3:2b:47:e0:85:ec:b7:c3:e2:37:
         57:0d:84:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:03:41 2026 by rpki-client