Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7a34435-db97-3098-952b-db6b24cbf362.roa
File:                     e7a34435-db97-3098-952b-db6b24cbf362.roa (raw, json)
Hash identifier:          xveiKRHs+GsQFsry8hovWR9zqeYuLcHAI8EEDRR7axM=
Subject key identifier:   61:88:AE:6C:D8:BF:6F:B2:37:F3:B8:52:CB:5A:AD:4E:55:1F:11:78
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EAA518ADB4456C8A0FEC1EC80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7a34435-db97-3098-952b-db6b24cbf362.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     31898
IP address blocks:        2603:c001:7a00::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:8a:db:44:56:c8:a0:fe:c1:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=3c966705-d5db-4ff1-a467-d100bb465ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:96:61:3e:fa:f2:d1:03:65:2c:6a:5b:d1:57:
                    4b:3b:01:c2:e9:34:7a:bb:08:35:21:2f:ba:ab:2a:
                    2e:75:1f:86:84:1b:0c:f2:1f:82:fc:ed:69:21:f3:
                    0a:c7:6e:db:62:76:7b:49:9d:23:8f:8d:74:bb:56:
                    d0:fd:13:d0:17:43:e6:71:4c:48:e9:cd:7f:f4:94:
                    aa:f9:4d:18:9a:37:38:b6:6b:73:ad:ec:4f:be:43:
                    0d:57:67:d0:a7:5e:98:25:6d:bb:7a:6c:6c:a5:34:
                    3b:08:89:12:79:d2:7b:3d:61:b0:e1:f9:07:46:01:
                    16:a3:f5:a8:5e:d5:b0:ba:ad:d4:bc:69:81:7a:ed:
                    85:78:cc:b1:e0:05:b6:dc:3f:f1:20:ca:d8:8a:fa:
                    04:76:a0:03:2d:e6:cf:35:92:d0:32:61:2f:7b:95:
                    4e:1d:85:36:46:2c:bd:09:8e:69:6f:e7:a1:c9:a4:
                    b7:af:dd:1d:c6:55:72:86:06:0f:fe:33:55:45:f1:
                    3c:9a:ba:74:61:d9:bf:be:2a:90:04:c3:e3:34:7f:
                    26:64:d9:e8:8b:4e:ed:c0:3e:26:04:c1:b5:de:c3:
                    15:81:10:34:a4:a7:0f:64:79:58:81:b2:28:74:26:
                    32:72:ec:7d:79:3c:58:e7:b7:43:2e:6d:3e:8d:7d:
                    bb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:88:AE:6C:D8:BF:6F:B2:37:F3:B8:52:CB:5A:AD:4E:55:1F:11:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7a34435-db97-3098-952b-db6b24cbf362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:7a00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:56:f2:2e:68:8e:83:3a:7e:ef:c9:c9:1e:a2:16:26:b6:74:
         d1:f0:5b:65:3c:40:2d:0b:f3:f5:96:20:60:5d:b6:b8:60:56:
         4e:16:89:68:8f:37:18:ed:70:54:51:e7:31:ea:f5:71:a4:74:
         24:7b:84:e7:b2:cf:84:15:13:2f:67:46:21:c3:db:28:c7:17:
         5c:3c:0b:ed:cb:38:3e:46:21:37:5a:1a:85:d7:e8:5e:28:a8:
         4d:b2:89:3a:96:23:95:d6:90:dd:84:25:90:e1:96:c8:81:c5:
         53:02:c2:d8:e9:9d:bb:6e:ca:cb:f2:11:9e:e5:32:2c:76:bb:
         c1:35:92:48:97:75:7c:af:48:1b:36:19:1f:05:a7:14:3a:e8:
         a0:51:0a:27:82:42:58:f2:1a:9e:22:54:ca:49:15:69:2a:8a:
         43:40:84:4b:f0:5e:43:3c:e8:46:57:47:81:49:00:1c:0e:28:
         d5:01:8c:5e:ad:7b:36:3d:f6:58:fb:74:c7:00:fe:c4:69:ab:
         0f:f9:b4:a8:c8:a0:ec:c5:30:20:c8:86:96:43:83:be:a6:07:
         a5:11:b0:15:53:e2:d6:31:1e:9d:43:dd:b0:6b:10:fd:cf:c4:
         16:30:3e:40:60:91:a2:8a:be:c5:fb:3a:5a:00:f8:3f:67:4b:
         59:b2:12:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:09:55 2026 by rpki-client