Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ece0ff46-4e0f-36e7-95be-f8aedb58ce8f.roa
File:                     ece0ff46-4e0f-36e7-95be-f8aedb58ce8f.roa (raw, json)
Hash identifier:          jhS1LMJFdbLb7jBGPv6GwNtoFkm09k/sYCqYf3fQVPQ=
Subject key identifier:   A2:74:7D:D6:0C:A3:92:8B:EB:11:2F:74:12:8A:53:C6:46:9C:8A:E4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E7A64FA9DCB0A74EAED1135C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ece0ff46-4e0f-36e7-95be-f8aedb58ce8f.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     31898
IP address blocks:        2603:c025::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:fa:9d:cb:0a:74:ea:ed:11:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=4d93f40e-2adf-449f-b518-85f6f3cf9e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b9:37:81:a3:b5:37:fa:e4:75:34:44:dd:d5:
                    15:b1:cd:9e:8b:2e:08:f3:fe:6b:49:2e:7f:3a:43:
                    41:2f:f5:c6:42:de:68:b1:10:2e:05:d7:40:a0:13:
                    ab:83:bc:ab:51:2b:1a:de:79:2d:32:ea:89:5f:91:
                    99:b0:41:48:b6:f9:1c:1e:6d:b1:3d:21:4b:4b:b5:
                    52:20:cd:0d:4d:a2:1a:5d:47:3f:70:b8:9a:c8:1d:
                    98:3a:1e:87:59:6d:1c:e2:f3:e5:12:b1:75:16:6b:
                    d6:1d:70:42:38:ad:2e:93:4c:54:15:b2:a0:76:44:
                    11:42:08:f5:55:d4:ba:a0:d1:5b:4d:37:3a:39:e1:
                    b3:47:80:c0:1a:98:49:f4:41:dc:0d:20:1d:7a:5a:
                    34:7c:a9:cc:23:32:c5:dc:ab:d5:46:8b:48:06:53:
                    ae:2b:7e:21:01:cd:38:4a:2f:d9:f1:0f:bd:c3:f4:
                    20:ca:64:b9:31:e2:2e:85:58:f3:08:23:65:1a:e4:
                    60:a3:4d:ac:fb:45:2e:94:82:12:d4:b3:e1:58:9b:
                    9b:7b:b4:cb:30:f1:3c:f5:63:bd:9d:19:d8:f9:09:
                    5d:26:c0:75:d8:df:b8:02:1f:51:b6:ee:5c:5d:6d:
                    c5:6d:b3:c8:5f:a7:fc:db:b3:30:33:05:67:dd:45:
                    24:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:74:7D:D6:0C:A3:92:8B:EB:11:2F:74:12:8A:53:C6:46:9C:8A:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ece0ff46-4e0f-36e7-95be-f8aedb58ce8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c025::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:69:f0:1d:3c:4d:6d:51:da:71:11:7a:7b:20:36:51:bd:0c:
         79:40:18:d3:34:d2:af:c3:e0:13:40:8e:76:fc:c9:ff:20:70:
         59:0f:e7:80:16:a5:d6:35:dc:24:85:41:7f:33:85:99:ea:b3:
         af:ae:b6:91:fa:b2:da:6d:ba:21:2b:dc:09:de:59:72:c0:49:
         c1:01:b5:22:12:b1:f5:7d:35:e0:78:00:83:b9:e9:ec:80:0a:
         71:26:02:09:4f:91:69:68:94:0e:61:3d:a2:48:58:98:21:ea:
         42:9b:09:4a:73:65:9a:08:11:25:f1:6f:bb:91:71:3a:15:48:
         51:22:7a:9e:2c:cd:ed:17:ab:f1:b2:7a:48:db:c1:cb:f8:6f:
         96:18:6c:69:be:94:59:bb:5f:3f:a7:91:94:1d:5f:96:1c:8a:
         a9:b7:37:25:3e:93:e4:a8:d7:36:7b:83:67:9c:c0:e1:a8:0d:
         6a:1e:0c:88:d0:1c:82:ff:6a:19:01:0b:be:06:77:c4:2b:7c:
         be:03:a0:00:d6:9f:c0:69:0f:d6:af:e1:cc:7a:07:0e:83:cd:
         2d:fc:ef:0e:7b:34:0e:db:20:6d:49:4a:f1:7b:bf:7f:22:31:
         85:36:68:d9:be:c8:d3:6c:31:4d:70:bc:11:63:86:d9:1e:4b:
         c5:30:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:47:47 2026 by rpki-client