Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f1cfd2a3-b455-3315-9b97-342138ce37a1.roa
File:                     f1cfd2a3-b455-3315-9b97-342138ce37a1.roa (raw, json)
Hash identifier:          MGqIIYRPipd6c3ETxaV7MD+Q/iZiZ0QplEy+2ySfN28=
Subject key identifier:   70:CE:C8:2E:44:8E:2B:FB:60:E9:D7:C5:28:E6:A1:82:D7:36:8D:7B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6DD4D5355E76482D69F0CB00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f1cfd2a3-b455-3315-9b97-342138ce37a1.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:1500::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:d5:35:5e:76:48:2d:69:f0:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=5d5d537d-bb63-496a-b79b-a642caa8bbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f1:8a:7e:f5:18:7a:f2:90:d8:b9:99:75:3c:
                    fb:ed:cb:55:3b:84:cc:8a:97:ea:7e:ff:43:f9:f5:
                    5f:b1:fa:92:f6:7c:b6:a5:f7:72:fb:e9:b7:75:9f:
                    a6:35:99:16:63:b5:53:ec:cc:0d:ab:20:3b:5d:1d:
                    2a:59:80:63:89:c8:bb:7f:d8:6d:63:a1:91:1e:6a:
                    c9:dc:fb:da:b9:e8:7a:31:16:eb:73:bf:43:5c:89:
                    2e:08:ff:73:c7:c0:cc:0b:0a:63:88:1e:48:1f:7e:
                    8f:70:cd:a5:6b:0e:58:4a:bd:f5:90:f3:ab:cd:3b:
                    03:cc:9e:3e:fe:bd:b4:bb:fe:d8:45:ac:6c:49:e6:
                    a8:fd:83:66:6e:3a:63:7c:3e:7c:1c:ce:8d:84:0d:
                    42:2e:fd:ed:c0:f6:47:17:e5:1e:62:3a:45:34:a5:
                    20:db:7b:5e:0f:ae:75:d7:9e:70:0a:15:e1:f4:ea:
                    a6:08:8a:24:14:16:95:84:29:43:09:03:4a:78:b2:
                    f6:95:4e:d5:38:fc:05:f7:42:8e:0d:54:69:bb:d4:
                    f3:0f:b2:62:91:45:ad:7b:18:04:8c:bd:69:5f:f5:
                    6d:a5:86:55:7b:68:c3:1d:a6:f6:a5:e3:82:ae:56:
                    30:3b:be:5f:92:74:8e:29:1b:ca:4a:94:b1:8e:b3:
                    71:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CE:C8:2E:44:8E:2B:FB:60:E9:D7:C5:28:E6:A1:82:D7:36:8D:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f1cfd2a3-b455-3315-9b97-342138ce37a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:1500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:83:47:79:93:5d:b2:bc:ad:1f:c6:bf:6d:b8:1f:17:2b:cb:
         37:6a:74:4c:29:b2:0b:99:48:d1:b8:c4:6c:2d:94:b7:4c:45:
         e6:0b:10:a6:6e:a7:ae:f5:64:18:8c:91:00:62:da:a5:cc:e6:
         ae:f4:b8:0f:93:44:c3:40:8b:d8:57:24:75:08:01:54:21:9b:
         54:77:8f:77:57:e4:cd:d6:0c:f5:9e:49:0c:df:f5:c4:4d:bd:
         32:dd:3c:84:c3:0a:df:1f:c7:6b:4e:c3:0b:4e:19:18:87:63:
         83:ca:a2:54:c1:5e:0f:90:93:13:37:77:01:52:7e:bb:1c:91:
         9a:0c:7d:41:90:b2:ec:e4:82:00:81:a1:f3:e4:97:91:0d:19:
         b3:54:b1:b3:fe:c9:e7:c1:59:f5:98:84:50:6c:76:d6:56:cf:
         0c:93:61:4a:7a:06:a5:ae:7d:fe:cc:ca:1e:b3:9a:ec:bd:26:
         5a:0c:4e:f8:5d:fa:ad:6c:9a:6b:23:ec:c6:55:b2:7d:b2:64:
         0f:b3:9c:84:0c:f7:72:2b:d3:8b:a9:26:7f:6f:0c:4e:cd:85:
         25:8c:3b:14:34:29:52:80:99:f0:2c:58:b1:14:14:36:c6:f1:
         ce:4f:0f:02:98:8c:fb:ee:6b:e8:18:b3:44:9a:ca:1d:29:58:
         e6:8d:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:53:44 2026 by rpki-client