Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8718ef9-e0fa-39c2-a4eb-1167d8ea1b9d.roa
File:                     e8718ef9-e0fa-39c2-a4eb-1167d8ea1b9d.roa (raw, json)
Hash identifier:          qvqi4i2nA55hwLYhyAAOjORUa+G9eHWU7UlE+eQ422w=
Subject key identifier:   2A:32:8E:B5:BB:97:DB:C0:36:02:FE:2A:D1:1C:83:5B:F8:52:46:BA
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD4C082E42EEB3027C8C9CBE0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8718ef9-e0fa-39c2-a4eb-1167d8ea1b9d.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c0ed::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:82:e4:2e:eb:30:27:c8:c9:cb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=b991c2ab-b199-42dc-9c0b-54b048aeca73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fd:08:9b:67:89:66:1b:73:6d:c7:ee:2c:de:
                    46:4d:b1:d3:36:f5:85:bf:0e:d9:ec:62:03:01:7f:
                    8d:42:cb:15:89:bb:8d:ba:8f:4e:23:65:10:15:3f:
                    fe:6b:c4:67:18:c2:26:00:74:29:64:e3:49:9d:ec:
                    e0:85:50:7f:47:8c:0e:c0:d2:22:29:d1:e2:b1:1e:
                    e5:a5:29:71:1c:c3:df:0f:5d:f9:fd:54:a7:b0:ae:
                    ae:c3:96:12:70:84:84:78:84:7c:67:3e:2f:ee:42:
                    0f:f4:e1:6c:ce:84:b7:07:49:87:fb:55:7e:4c:73:
                    a9:c4:5d:75:bd:5e:3d:8f:c8:e7:95:ea:47:50:b5:
                    dc:90:cc:a1:0d:93:69:fc:08:37:8d:6a:ef:31:a4:
                    12:f9:4e:06:e4:d9:cb:53:eb:42:41:f8:cf:a0:e8:
                    a1:1a:71:2e:af:6b:3f:29:52:42:a1:3a:6d:a6:28:
                    f1:c7:2a:39:0b:b2:91:cf:32:61:07:7c:aa:9f:95:
                    a9:e5:7b:35:54:c8:af:be:aa:df:9b:84:b5:5a:7b:
                    48:78:00:c2:d4:2a:c9:01:08:71:5c:af:49:f5:8d:
                    f0:bc:08:e2:b6:54:bd:f0:85:05:ea:81:21:73:16:
                    25:15:5c:9e:3f:ee:5f:b0:1b:42:e5:b3:90:0e:62:
                    bb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:32:8E:B5:BB:97:DB:C0:36:02:FE:2A:D1:1C:83:5B:F8:52:46:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8718ef9-e0fa-39c2-a4eb-1167d8ea1b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0ed::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3c:b6:0e:6b:49:5b:cf:30:be:5f:02:36:85:d4:ae:0f:54:
         1a:9c:fb:1f:03:49:8e:25:37:1a:01:1c:fd:b4:75:ef:63:7e:
         d7:f9:7e:ab:92:80:4c:c0:cc:42:ba:99:fd:8f:60:a3:4d:de:
         1a:ff:a2:be:30:44:ca:5d:9c:91:15:12:dd:3c:8b:73:d4:44:
         d1:c2:1e:09:42:2a:e2:37:c7:8d:98:7b:f9:b2:06:3c:71:97:
         1c:98:eb:de:51:d1:d8:42:47:e7:4c:5e:dc:be:54:6e:6c:da:
         de:f8:c6:1a:ed:fa:5f:4a:46:35:ac:85:53:4c:3f:27:2d:cb:
         c5:de:67:9b:70:be:43:27:62:35:b6:27:9f:9e:f7:53:7e:b7:
         80:69:a2:a3:a9:36:55:1f:9d:e4:9d:02:13:a2:25:b4:cc:fc:
         35:87:5b:f5:0f:2d:7e:d3:bf:62:61:42:68:dd:fd:e9:08:0f:
         53:ac:24:bc:5c:bd:cd:b4:22:3a:fd:4b:62:10:17:c0:e4:e7:
         ce:05:3c:35:69:c7:cd:f2:bc:28:94:fa:dd:00:9f:bc:f1:4e:
         3c:3c:45:1b:a9:28:e6:70:2d:81:5e:d7:53:c3:85:3b:f4:47:
         b5:14:63:ef:2f:ec:9b:46:3f:3e:99:b0:c4:dd:11:e4:96:75:
         74:b3:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:02:45 2026 by rpki-client