Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa
File:                     c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa (raw, json)
Hash identifier:          N1NzHarmeYlGI9NHkBm7eSVgYGMMCH+Rj7IZZZamZ7A=
Subject key identifier:   88:F3:AF:C1:02:66:75:3E:DE:51:5C:D8:68:BC:C9:7D:E1:71:69:A1
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6F3A2E8A89270DE1DEADE030
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        2603:c000:2300::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:2e:8a:89:27:0d:e1:de:ad:e0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=1c573c58-1ee9-4d84-aebf-8412a0762bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:68:57:62:58:f6:91:86:69:ab:82:52:c9:
                    27:1d:d2:8c:b3:af:ff:f3:1e:54:5d:df:d5:05:bf:
                    66:37:24:61:65:e0:f8:ea:a7:88:6b:12:09:99:36:
                    8b:41:ce:29:b4:c4:16:35:61:03:d5:e2:1f:9d:6a:
                    61:56:e8:81:1b:64:55:46:03:74:a5:98:30:dd:60:
                    9b:d6:04:c4:08:68:ab:f4:fe:31:bc:27:d8:3e:16:
                    ad:58:b5:b4:ab:e6:9c:98:7b:51:87:25:a4:12:9c:
                    9c:03:ce:57:f3:c2:a8:1b:fb:ca:d6:29:59:30:b3:
                    1b:4a:ec:84:81:5c:dd:5b:4f:28:1b:c4:99:e5:9d:
                    51:01:0e:13:e7:80:7f:b2:03:7d:2f:df:21:05:54:
                    a6:54:a8:e5:b6:ad:f9:6d:1e:e4:26:e8:32:1b:47:
                    2e:d5:f3:de:e0:b5:de:f0:7f:3d:a4:7d:ae:89:4b:
                    fe:bd:7c:3c:06:cc:02:a5:47:fb:11:05:69:19:96:
                    8b:ad:a4:70:ef:46:90:e5:1c:d0:a3:53:74:e0:59:
                    89:77:ab:ee:3e:17:d0:86:7d:fa:e1:c6:55:a8:d9:
                    08:fb:c5:c7:82:2b:d1:bf:50:f4:4e:eb:8b:d0:0c:
                    41:9d:7e:63:d7:51:7f:70:2d:3b:06:29:34:b9:a9:
                    21:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F3:AF:C1:02:66:75:3E:DE:51:5C:D8:68:BC:C9:7D:E1:71:69:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:2300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:14:23:0d:87:e6:a6:e3:c7:39:e5:d7:8a:6b:08:c4:70:31:
         3e:a8:3d:b2:04:59:c8:69:32:b3:e6:53:83:f4:d1:62:cc:de:
         33:75:96:92:5e:c2:06:af:d9:65:c5:85:f6:e5:fa:40:ff:c0:
         17:c4:65:b5:7b:a9:45:7f:00:4e:83:33:cb:72:0f:f9:01:45:
         d2:0a:36:57:ae:5a:07:20:53:0d:94:94:09:46:6a:25:fd:ea:
         85:73:c4:ad:83:6c:6e:93:04:4e:ce:6c:c4:33:37:2b:69:cf:
         ab:59:1a:85:8d:f4:57:5e:4a:e4:a8:be:6f:e4:2a:cf:94:2e:
         0a:14:de:9a:eb:f6:4c:c2:27:80:32:48:fd:7a:41:72:05:37:
         77:e6:5b:0f:b1:1d:a0:f6:56:46:4f:ec:dd:dd:9c:a3:98:28:
         55:7f:79:b2:76:de:bc:76:60:34:bf:f6:bd:54:07:ad:5f:71:
         77:e8:28:63:f1:d8:67:a7:5e:25:d9:e4:c3:3b:5a:82:b5:30:
         67:ee:65:f5:f5:d6:c2:9f:aa:de:89:88:51:2f:8f:0f:c8:01:
         6f:97:e5:37:72:17:48:ca:dc:55:e3:5d:cd:35:d9:06:13:42:
         cf:84:d1:dd:7e:79:24:e5:c9:b5:1c:6f:ab:f2:59:92:57:a4:
         59:20:cb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:51:59 2026 by rpki-client