Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb2ecdd2-9e73-3764-a349-9bcdfde9d1e6.roa
File:                     cb2ecdd2-9e73-3764-a349-9bcdfde9d1e6.roa (raw, json)
Hash identifier:          3DENJtzDVJHfOIj+s8sdgTE0gsJRqpPWBsLfzW1fAeo=
Subject key identifier:   0D:1A:30:AC:D6:AD:15:F6:79:01:05:84:83:FD:39:2F:4D:34:4C:CB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE8C5FD2A9797B654ECB17AC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb2ecdd2-9e73-3764-a349-9bcdfde9d1e6.roa
Signing time:             Tue 19 Aug 2025 14:47:13 +0000
ROA not before:           Tue 19 Aug 2025 14:47:13 +0000
ROA not after:            Mon 17 Nov 2025 15:47:13 +0000
asID:                     31898
IP address blocks:        2603:c001:4000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:c5:fd:2a:97:97:b6:54:ec:b1:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 19 14:47:13 2025 GMT
            Not After : Nov 17 15:47:13 2025 GMT
        Subject: CN=fbed38c9-7fd3-4fb4-9989-8a5b4f06cfb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:da:10:1a:77:e6:99:63:ec:35:8e:83:ff:
                    7c:92:73:cf:6b:bf:20:43:5a:91:dc:1e:9a:ba:c5:
                    84:c2:53:90:d4:f4:4b:31:9b:51:65:e7:90:f5:99:
                    0b:c2:7e:40:4f:96:87:3b:00:c1:8b:75:67:51:c3:
                    42:77:e0:cf:eb:52:9a:08:b5:03:2f:70:6b:cf:5b:
                    64:4b:04:f8:33:fa:9d:cc:47:c9:d1:3a:fa:e1:0d:
                    78:32:2b:37:7f:9c:b6:9b:e9:77:7a:42:62:26:e4:
                    82:59:0b:4e:b5:a6:e5:29:c9:16:d6:aa:51:10:e3:
                    9b:46:52:56:ef:74:49:b4:b8:5b:65:9e:a9:0b:bc:
                    7e:91:e7:ec:34:9a:9a:18:6e:29:73:33:3d:08:c6:
                    8e:aa:c6:a5:08:ea:57:5d:5d:50:f8:67:32:22:32:
                    df:d5:98:74:9b:8f:fb:b8:c9:33:63:25:48:f9:43:
                    25:ae:83:1b:fe:94:e1:a7:c6:55:6f:62:4f:8d:13:
                    63:c3:34:d8:a0:c0:7b:16:63:fb:63:7d:fa:cd:14:
                    05:61:02:ba:5e:9f:67:b6:51:f8:a4:01:64:d8:b2:
                    73:17:52:fe:a4:3a:51:92:4d:80:e3:e8:bc:6e:69:
                    dd:da:2b:aa:17:78:f9:e0:e4:d9:1f:01:f8:cc:e5:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1A:30:AC:D6:AD:15:F6:79:01:05:84:83:FD:39:2F:4D:34:4C:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb2ecdd2-9e73-3764-a349-9bcdfde9d1e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:4000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ad:a6:2b:d1:d1:cf:81:e3:12:65:23:64:35:ea:67:47:40:
         78:5e:72:34:c8:54:f9:c7:84:be:26:81:26:7a:4c:e6:41:91:
         f9:75:00:dc:e4:de:d3:2f:83:40:b0:45:44:52:57:20:96:eb:
         87:0e:7d:93:fc:2a:10:28:ec:db:33:9d:1b:6f:23:8b:f5:a5:
         36:0e:57:7d:a1:d7:56:76:b5:9f:09:1b:e4:74:9f:2b:6a:b9:
         71:67:a8:a5:6b:fa:05:0e:d6:94:be:74:19:1f:13:27:41:39:
         fc:52:fd:ee:ac:2b:2f:6a:b0:ae:5c:f8:30:61:8d:39:ac:24:
         af:51:ce:f9:0f:9d:22:23:ca:8b:33:c5:85:73:52:09:09:fa:
         dd:c6:43:29:45:3d:8d:f7:82:9c:20:93:6f:08:da:00:4e:c0:
         bd:f8:fa:5f:d9:ed:31:27:04:2a:5b:bf:ff:fe:33:99:10:d4:
         3b:96:80:70:47:d2:80:53:12:8c:77:8e:c7:dc:54:01:bb:d3:
         03:49:b7:c3:f0:62:b8:a4:b4:c9:e9:a8:82:9b:75:b8:ed:b9:
         ff:d1:34:7c:cb:1f:6c:57:09:62:6e:a6:cd:13:b6:7d:4f:52:
         91:12:2b:84:01:e2:49:45:27:42:09:e0:bf:cc:62:95:8f:d5:
         cc:e5:79:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:22:55 2025 by rpki-client