Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c7fdcb52-7755-3db6-8043-fc05df6c4e1a.roa
File:                     c7fdcb52-7755-3db6-8043-fc05df6c4e1a.roa (raw, json)
Hash identifier:          Mg9wtAlatlTLQqWc9mPlABuUyhPBmqxbnZ+cAXZG+F0=
Subject key identifier:   57:74:5C:4D:59:55:7B:AA:AD:D7:71:42:3F:11:6A:C1:D1:DF:97:86
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DF210BB2ED52342E4F72B5A18
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c7fdcb52-7755-3db6-8043-fc05df6c4e1a.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     54253
IP address blocks:        2600:2004:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:bb:2e:d5:23:42:e4:f7:2b:5a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=cef49891-14f1-4427-9765-39ca5ece77b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:32:88:14:9d:0d:b6:0d:d1:1f:ba:b1:96:
                    59:0c:40:86:0c:3d:e4:b1:8e:83:11:f4:70:f4:8f:
                    a0:14:11:e5:6b:ea:c4:5a:7c:59:96:fe:a8:09:ea:
                    ad:98:5d:48:34:22:95:4c:0d:36:73:57:70:04:ee:
                    8a:e4:48:ea:69:4d:6d:1c:be:cb:c1:6a:ff:20:48:
                    32:97:49:47:71:94:81:57:81:c7:16:b0:10:0e:ab:
                    7f:f8:b9:de:f2:ba:97:88:72:3f:d6:50:cf:51:ff:
                    da:95:fb:87:f5:eb:ae:5f:ce:65:de:a2:1a:02:37:
                    47:fb:f7:33:68:2d:a5:bc:da:12:c3:28:d6:7e:5e:
                    bf:3c:5c:44:cd:61:fe:91:c7:71:22:d7:2c:a7:0d:
                    07:b0:4a:11:e2:51:7d:cf:c2:5c:34:be:52:ac:b6:
                    45:71:3a:90:b8:3c:8f:1e:c3:12:65:39:a4:04:c3:
                    35:43:4c:2c:3d:42:d6:51:af:8d:dc:5a:31:2b:ae:
                    63:a9:e6:e6:c2:f7:bf:0c:ee:5e:9d:12:4e:79:ec:
                    bf:0e:4e:56:3b:64:01:cc:90:ff:a2:a7:41:35:03:
                    49:53:75:ab:89:b1:fb:00:3f:7f:96:17:58:2f:cb:
                    6b:2d:24:46:b4:45:74:4d:7c:d7:bf:35:b5:7e:df:
                    bc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:74:5C:4D:59:55:7B:AA:AD:D7:71:42:3F:11:6A:C1:D1:DF:97:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c7fdcb52-7755-3db6-8043-fc05df6c4e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2004:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6f:5d:20:29:ab:d6:2e:1d:9f:da:79:0c:ac:83:9d:bd:71:
         c3:96:08:e9:fb:e0:85:17:84:fe:12:c8:fc:8b:b9:95:48:96:
         72:f0:45:97:bc:eb:ad:46:eb:8b:02:15:9d:81:54:b3:d1:8e:
         f6:09:eb:d0:5b:40:3e:64:43:c7:e8:24:64:91:21:53:6d:68:
         98:c6:50:37:c9:57:27:2c:36:06:ee:bb:0b:f8:b1:04:64:b8:
         e2:31:ad:de:02:58:f3:7e:08:cc:6d:6c:c0:9d:71:07:b0:ec:
         90:64:99:d7:0d:bb:2f:32:85:32:20:9f:f3:fb:c1:69:a4:f5:
         ab:71:55:33:25:64:6d:3e:51:af:9a:20:15:f3:70:92:f4:4b:
         27:06:d9:d3:7f:ae:8e:9b:48:b4:07:7a:59:21:63:d7:ab:48:
         30:39:8e:20:57:67:a1:c2:55:b8:36:36:33:b6:d0:3e:61:9f:
         46:5d:51:f7:1e:70:90:01:27:5a:75:64:8d:27:ea:f7:0c:7d:
         45:ba:56:6b:37:8e:ac:ee:f0:7c:ca:df:c1:05:ba:fe:99:68:
         fc:0e:3b:bf:aa:d9:28:29:63:d8:09:22:60:aa:3d:43:fb:d5:
         7a:22:4a:14:b5:2f:4f:66:68:79:f1:24:e4:18:78:7f:64:4f:
         fb:3f:75:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:05:08 2026 by rpki-client