Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d364780b-4ef9-32c3-92d7-93ce73e762f9.roa
File:                     d364780b-4ef9-32c3-92d7-93ce73e762f9.roa (raw, json)
Hash identifier:          tP5ylC7eb8x4FU3G5iyNYSHFtL3aS0dKerPTmE70J2c=
Subject key identifier:   76:D9:00:DC:EE:9F:A9:F4:2F:86:C5:CD:70:D8:8B:63:8B:A1:49:ED
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6DD4C3FCFCB7C56DEB14B480
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d364780b-4ef9-32c3-92d7-93ce73e762f9.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:3900::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c3:fc:fc:b7:c5:6d:eb:14:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=1bb8e269-b1ae-4171-a2bb-52f6256812ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:4c:eb:cc:98:ef:17:2e:d2:e5:4b:d2:36:
                    a7:e6:6e:70:ad:e6:44:17:82:f0:cb:ee:5f:c1:7a:
                    e6:bf:9c:c7:46:7c:15:e4:6d:6d:36:f8:53:c0:88:
                    3c:a9:5f:98:c5:3e:f0:c0:14:6f:30:79:99:f4:ae:
                    7d:c9:5f:1a:f5:23:aa:fc:47:7e:80:74:4e:48:30:
                    58:c7:f0:05:21:e6:d6:f8:98:ea:04:4f:cd:ec:84:
                    0f:8e:32:e4:c5:0a:b2:8e:53:f1:61:80:00:71:df:
                    ca:70:eb:9a:77:fb:dc:4e:34:57:00:9e:b8:7b:33:
                    5e:32:e9:5a:af:75:bb:2e:60:c2:3a:23:0e:71:a9:
                    0a:f1:85:92:1a:b0:b1:86:d2:1a:01:36:43:30:12:
                    6a:4d:ff:fa:61:ec:b5:cb:56:5f:10:2b:59:af:60:
                    b0:47:4f:0b:15:56:81:cb:13:d9:92:78:79:39:9f:
                    1b:86:fa:01:76:c6:df:64:e3:46:9d:d7:8f:cc:32:
                    2c:75:e3:37:1f:e6:e9:a3:45:d2:e9:8c:e0:15:c6:
                    17:ea:28:6d:f6:1e:d9:5d:83:b0:6e:a7:62:c1:18:
                    79:c9:79:3d:86:bc:a3:b6:02:84:dd:fa:4e:cd:3f:
                    3d:f7:ec:21:37:81:f4:14:68:b8:b5:c9:cb:32:ff:
                    03:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D9:00:DC:EE:9F:A9:F4:2F:86:C5:CD:70:D8:8B:63:8B:A1:49:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d364780b-4ef9-32c3-92d7-93ce73e762f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:3900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9c:66:4a:5e:1b:b0:e4:c4:0c:12:a1:b6:65:18:89:1a:2e:
         1e:08:fc:9b:36:ef:19:62:1b:4d:73:05:46:5e:f5:63:25:60:
         1e:a1:01:ad:58:62:03:14:e4:10:de:63:08:5c:f2:59:ed:24:
         8c:3a:63:cc:b0:d8:da:ef:08:e8:61:d8:19:66:bd:a8:24:8b:
         24:30:ea:9b:0a:18:7d:b2:5f:17:2f:a7:fb:38:b3:7f:63:1a:
         7a:57:5a:3f:ff:be:85:75:3a:9c:8d:19:29:1f:48:64:22:b3:
         9f:d5:28:d3:b6:b4:9f:ae:6a:63:9b:14:14:09:70:4a:52:9b:
         41:50:19:b0:92:ba:03:37:0e:64:2a:a5:dc:9c:fe:7a:21:24:
         34:47:59:5f:1b:40:16:0a:94:94:66:ee:6c:e8:a1:0e:17:bb:
         ad:43:a9:37:d6:59:15:69:ef:54:06:93:1f:6e:75:22:cf:96:
         8e:89:c2:a0:70:59:92:58:82:58:84:ef:1f:5b:5e:53:a0:6d:
         1e:56:ce:4b:f3:39:f1:bc:4b:9c:8a:b6:4a:f3:cb:06:7d:21:
         36:a5:4a:d1:0a:fa:b0:7e:06:8b:ff:bc:b6:ae:82:26:2e:49:
         1b:90:8c:8e:99:b2:35:29:24:39:55:56:7f:ce:1f:14:c8:83:
         92:e8:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:49:25 2026 by rpki-client