Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d73bcdba-dc5c-3378-bb91-a9f08cff067b.roa
File:                     d73bcdba-dc5c-3378-bb91-a9f08cff067b.roa (raw, json)
Hash identifier:          8qSwhFHsL5AWJ1C8hF25lsI0eLobVOw53vZrntX96rg=
Subject key identifier:   A3:08:8E:35:27:AA:6C:E3:5E:5A:9A:51:BD:CE:50:F5:9A:D1:43:18
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D7CCFE137E80F843D141CCD2F
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d73bcdba-dc5c-3378-bb91-a9f08cff067b.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        2603:c000:3100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:e1:37:e8:0f:84:3d:14:1c:cd:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=b38f5e63-44c1-4c11-9dd3-7dbd0cfbb3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:af:9a:be:95:00:97:50:be:32:fb:4e:9a:
                    3f:63:27:87:8b:22:b1:7e:33:be:1f:d6:1e:85:17:
                    3b:9b:04:85:67:79:1f:20:3d:ad:37:a4:b9:fe:66:
                    90:06:82:21:92:38:47:31:6d:a5:22:6f:a3:c7:b3:
                    a0:10:9e:f6:8c:7e:28:47:3e:4c:d0:bf:ce:82:69:
                    2c:6a:65:e6:25:14:8b:28:62:ee:82:a1:8d:ed:95:
                    9c:2f:ea:83:11:d1:ed:f9:1c:25:02:66:cf:09:a7:
                    da:2f:57:e6:bb:d1:88:33:25:8b:f3:21:a8:37:06:
                    ef:96:85:10:d0:a7:20:28:63:b3:25:40:f6:c6:25:
                    73:94:e0:3f:12:63:d4:46:7c:8d:bd:42:68:7f:7f:
                    f8:d1:00:2e:d9:51:2e:56:6a:c9:4e:d2:a2:75:ee:
                    3a:b8:1c:a0:e7:03:33:1e:da:8f:ae:0f:08:d2:ef:
                    5d:6e:99:5a:19:d8:9d:70:d8:64:7c:f7:c6:6e:5b:
                    5e:68:8f:10:14:3e:39:5a:ea:2c:38:06:b4:dc:84:
                    11:a2:d8:66:5e:a9:e4:64:94:2b:d1:95:2f:6d:d3:
                    ed:8e:d6:2c:29:c5:6b:0c:47:14:32:4b:b9:ef:e4:
                    b8:7d:c5:ae:c1:fb:3a:5e:eb:ac:38:ed:df:de:59:
                    51:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:08:8E:35:27:AA:6C:E3:5E:5A:9A:51:BD:CE:50:F5:9A:D1:43:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d73bcdba-dc5c-3378-bb91-a9f08cff067b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:3100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:30:6f:3a:fa:7c:f7:d7:5b:01:14:f2:0d:0e:2c:75:69:01:
         ff:41:2c:e4:50:00:f7:da:2d:01:b6:28:e2:85:52:49:9d:0d:
         e9:0a:42:95:f3:1d:07:f6:a1:a3:ee:4e:ae:38:d6:96:6a:4b:
         71:04:87:ae:d0:28:c1:04:77:5a:74:14:5a:91:ba:c6:f6:5f:
         c2:bf:09:51:65:6f:81:c3:97:6d:a7:ef:e0:b4:4f:64:28:ad:
         06:9e:15:e4:ae:3a:13:d2:1d:dc:60:06:9f:f3:75:ce:3e:d0:
         b9:8d:56:1d:0d:fc:14:b7:7d:66:28:39:ac:62:27:f7:2e:d5:
         18:29:e2:7e:40:00:a7:c7:db:ec:9c:9a:64:be:84:60:d2:a8:
         58:de:cd:1b:be:01:6f:02:68:e0:c8:8d:ef:53:44:59:a2:a9:
         fd:31:b9:5a:69:be:65:e8:3a:79:9f:49:53:47:c5:59:95:00:
         0d:75:11:9d:8c:98:18:53:48:26:ea:5c:33:4e:f4:d3:11:49:
         9f:17:97:03:c4:4f:e1:d4:6d:2e:aa:f4:bb:87:0e:61:9a:6e:
         d3:ac:e3:57:ce:b7:62:d3:2b:22:d9:cc:ab:f4:30:79:54:cc:
         3f:b6:b7:ed:a9:b7:13:c5:46:50:21:7c:c3:05:48:72:62:6e:
         df:90:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 14:38:17 2026 by rpki-client