Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e5396904-45bb-3c55-a28e-3f2df23ac509.roa
File:                     e5396904-45bb-3c55-a28e-3f2df23ac509.roa (raw, json)
Hash identifier:          GJQ8KOld3RvAA8QtMOa+wtQ5r6PqSntbhq7OzLLiodU=
Subject key identifier:   38:7A:16:4A:AC:F9:9B:20:CA:8A:CB:B9:1D:28:97:CB:2D:49:A3:5F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6C6F663F1F22F59F77173240
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e5396904-45bb-3c55-a28e-3f2df23ac509.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     31898
IP address blocks:        2603:c000:2900::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:66:3f:1f:22:f5:9f:77:17:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=f5574092-3cc6-4bf1-9538-611f02f73fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:dd:44:42:33:90:e8:25:0c:97:c0:c4:d9:
                    ee:78:ed:96:fb:6a:e0:15:40:c6:9d:69:3e:fe:72:
                    8d:37:16:60:44:1c:1f:db:a2:2c:60:c1:7b:ee:4f:
                    ab:aa:ab:fb:fe:e4:a0:0b:49:20:7a:97:0e:52:ee:
                    9d:79:d5:5c:dd:38:86:0a:31:ba:c7:a6:31:45:4f:
                    ce:63:1e:ca:fa:51:34:a9:49:a6:89:3f:17:e2:d8:
                    7d:75:fc:c2:32:1c:2d:94:f5:d9:29:a0:40:a4:ae:
                    a1:8d:70:bf:5c:6a:66:3d:72:45:75:2e:c2:eb:16:
                    3f:2e:9a:6d:d2:90:a2:3c:79:fc:6a:f1:77:15:d3:
                    a7:ea:a4:f8:30:4d:c0:75:14:97:99:73:23:ff:68:
                    21:e3:44:f8:cc:74:84:66:4d:07:9c:a5:e7:84:55:
                    86:ac:c5:e1:dd:2f:47:20:c9:3a:72:7b:c1:7b:d1:
                    6d:23:02:eb:f1:c7:e0:fc:01:52:97:51:e2:88:92:
                    84:ea:20:d2:6a:d7:72:8b:5f:c6:24:4e:94:0a:da:
                    b4:10:b8:6a:1c:97:10:74:11:b2:7a:75:63:ca:3c:
                    87:32:e8:dc:f7:70:1a:2a:ec:2c:33:49:69:73:16:
                    c4:43:b7:ca:bb:80:12:f2:d6:89:4f:fe:84:16:13:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7A:16:4A:AC:F9:9B:20:CA:8A:CB:B9:1D:28:97:CB:2D:49:A3:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e5396904-45bb-3c55-a28e-3f2df23ac509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:2900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:bc:62:96:d0:4b:e5:92:c0:2e:5d:5b:9b:96:19:f7:b0:89:
         bd:74:69:18:db:5e:da:f5:16:57:2c:4d:f7:98:1c:2f:d6:00:
         9b:cb:4b:bf:22:92:d1:14:46:45:2f:33:96:d4:19:2c:4f:fe:
         dd:88:5a:5e:a1:8d:aa:dc:12:3d:b6:fa:7b:15:b6:f8:53:85:
         22:0f:eb:9b:97:08:c1:79:37:9e:0e:c7:3e:6e:73:55:cf:3b:
         e1:00:34:3d:44:2b:67:32:aa:99:2e:2c:e6:1e:5d:a7:c7:4e:
         8d:4c:3a:a8:ad:d2:32:01:f6:6b:26:d9:13:5a:84:c9:84:5c:
         15:48:56:31:6e:32:da:39:38:d3:f3:ce:8e:4c:e0:b0:2b:0e:
         da:34:73:4f:4f:c7:b9:a5:55:0e:e4:66:36:2f:c3:9f:3e:c5:
         d4:ea:12:4d:eb:f1:5e:86:78:67:84:1b:6e:b6:4b:b1:6a:be:
         c3:f1:60:f1:e4:cc:25:be:ad:dd:74:9d:10:25:d4:dc:c4:c9:
         d5:c9:b2:38:90:f7:46:f5:c8:74:3c:13:aa:b6:36:de:83:54:
         23:d5:75:68:23:65:25:0a:5d:32:3f:ed:95:39:c2:6b:f5:39:
         44:c8:14:8b:00:31:f5:1b:39:a9:cf:2c:ca:af:b0:e8:ac:25:
         d7:b3:ba:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:52:07 2026 by rpki-client