Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f4a9db-a831-34c8-bee6-1cc7d39828ca.roa
File:                     e9f4a9db-a831-34c8-bee6-1cc7d39828ca.roa (raw, json)
Hash identifier:          dtHkRd1x6lh4KQ83JU7Fq7ACJmb6l5CbcvWNGsptyps=
Subject key identifier:   42:9C:3F:29:49:0A:89:DB:5B:B0:C7:16:E8:72:92:A3:AB:18:58:6A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD78B0AF2FCBFE05B509DA6C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f4a9db-a831-34c8-bee6-1cc7d39828ca.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     54253
IP address blocks:        2603:c0f6:8000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:0a:f2:fc:bf:e0:5b:50:9d:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=8e7b0d23-c1d7-4d1b-9252-fd0d2b25c7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3c:74:41:cd:2a:e0:67:e4:fc:c2:95:bc:30:
                    6b:6c:97:ba:0c:ea:9a:dc:38:df:26:f1:40:6b:39:
                    f2:11:13:f7:56:e4:97:9c:90:32:9a:98:ce:e8:a6:
                    a1:90:95:c0:00:87:eb:07:7d:dd:00:f4:c4:72:ee:
                    e9:34:7b:4b:3a:97:25:d4:e5:ac:c0:fb:8c:e3:0d:
                    58:ca:e6:85:2c:11:72:04:d1:47:14:ed:1c:83:62:
                    19:a4:39:ba:cd:f6:da:cd:ac:06:d1:7f:86:9a:bf:
                    78:fe:b5:0f:6a:ab:18:25:88:19:2a:13:98:d5:8b:
                    b5:c8:cc:83:5f:88:c4:93:e2:83:4f:94:14:84:88:
                    db:aa:cd:72:4d:0d:3b:f3:27:7f:de:1f:43:5b:ff:
                    25:04:c2:23:57:09:45:c4:29:d6:76:ac:c3:26:98:
                    08:66:ac:05:1e:f5:26:b1:cd:d6:8a:22:1d:09:73:
                    69:08:fd:ed:a3:bd:5b:d5:86:d3:de:ec:68:28:a0:
                    6e:50:d2:3b:2e:15:9a:80:90:6f:79:b0:e0:c2:ad:
                    10:ef:72:27:9e:b8:8a:f3:06:b2:29:57:3d:35:f8:
                    5a:d0:88:82:df:b1:a2:13:b0:8a:32:75:15:1d:92:
                    1a:b1:9c:25:b7:e5:e1:1a:f0:50:7a:8d:65:d3:3c:
                    2d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9C:3F:29:49:0A:89:DB:5B:B0:C7:16:E8:72:92:A3:AB:18:58:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f4a9db-a831-34c8-bee6-1cc7d39828ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f6:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:87:a6:84:90:c2:88:86:48:66:50:72:a2:9a:1b:5e:17:b1:
         64:21:02:d7:bc:7a:b1:58:45:af:a8:1f:ab:9c:ab:26:11:c9:
         91:e4:01:8a:0d:1b:5f:29:12:c8:03:95:0b:ce:0e:19:41:84:
         95:d1:53:7e:85:09:78:69:6c:5d:61:40:b2:a8:be:6f:86:2a:
         ff:9d:42:a6:e1:08:7e:38:7c:5d:09:34:ad:74:6f:00:08:b6:
         33:43:1b:70:5b:2e:a0:75:98:e1:93:d9:07:87:ff:fa:97:07:
         d2:7d:03:76:40:e7:62:58:1b:e1:88:45:bb:a4:ad:ea:aa:f9:
         71:19:95:d4:15:e1:24:71:9f:13:f0:85:57:37:0e:bf:26:68:
         dd:23:e9:17:22:93:a9:72:39:3d:be:6f:22:c8:25:a4:8c:48:
         4c:7a:b1:93:d0:f3:86:db:82:50:46:28:db:be:15:5b:67:86:
         f1:9f:9f:7a:92:9c:c4:4b:54:a4:78:d7:a7:90:4c:a1:cf:16:
         29:74:12:1f:d0:48:95:01:0d:93:ce:5d:4c:2c:a6:47:ec:39:
         b6:b5:9b:30:0b:f2:52:e7:66:39:8c:25:f6:cf:cd:f2:0b:00:
         9b:9a:7f:22:38:08:68:a5:1e:68:15:4e:d6:03:2a:fe:1c:20:
         cc:c5:4a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:03:33 2026 by rpki-client