Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f34e2f43-d2a8-3116-973c-1b8606864fcf.roa
File:                     f34e2f43-d2a8-3116-973c-1b8606864fcf.roa (raw, json)
Hash identifier:          /MBtV3BuUHREOnTEUipTuUSmXQoaOBcOGQKeT1c/fwA=
Subject key identifier:   99:6E:AB:5B:55:F2:AF:05:18:B5:FE:5B:6F:6B:FE:A3:C2:20:40:17
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA78755A0C38AF81A61E4F900
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f34e2f43-d2a8-3116-973c-1b8606864fcf.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c08c:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:55:a0:c3:8a:f8:1a:61:e4:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=88088be4-586b-4881-93d1-11f1c8932d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1a:26:1b:c7:92:2b:6b:bb:c2:e3:d3:4e:bd:
                    d3:54:7b:71:72:b3:7e:61:8e:dd:80:6c:2f:7a:5b:
                    1a:48:03:d4:7e:c8:cc:19:77:f7:2f:bf:0b:3d:16:
                    08:7b:ca:c5:26:dd:22:db:02:63:c6:24:49:92:e1:
                    b2:46:51:8c:05:e3:5d:23:9f:28:29:07:00:54:39:
                    47:5d:48:de:b0:82:28:14:84:47:b3:5e:99:3f:ee:
                    04:b8:5c:cd:89:10:aa:55:32:6f:09:6f:4c:a3:6a:
                    1e:f3:54:fe:2b:bc:fd:c0:17:b5:3f:59:53:0b:04:
                    14:fa:1f:19:1d:39:21:d9:a2:98:82:ac:38:bb:9a:
                    bd:c4:12:74:28:be:00:10:68:f2:ef:1b:5b:5b:4e:
                    7e:7c:37:ba:45:e4:5d:92:78:c3:14:d3:4c:23:1b:
                    cc:95:d1:f8:73:09:e3:be:71:9d:99:f4:ab:f4:4f:
                    28:62:cb:e2:c7:b3:3b:a4:ff:c8:77:cc:25:96:aa:
                    ed:c3:2b:13:59:ec:f1:0a:13:d4:ee:97:c7:65:11:
                    1d:78:b5:95:22:83:54:01:73:b8:6c:cc:5c:6b:58:
                    b5:88:b5:46:cb:22:5a:95:59:2c:87:f8:10:74:1d:
                    c5:d1:da:fc:04:00:7e:51:3c:e4:fe:3f:c9:6e:7b:
                    13:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6E:AB:5B:55:F2:AF:05:18:B5:FE:5B:6F:6B:FE:A3:C2:20:40:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f34e2f43-d2a8-3116-973c-1b8606864fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c08c:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:5c:fa:4e:a1:5c:f3:19:1f:d0:c1:9d:3b:af:81:37:f2:13:
         d8:b2:34:6d:d2:e1:77:dd:7e:d4:f0:6d:a4:d9:50:b3:77:57:
         8c:14:25:eb:36:f5:d5:04:50:b1:54:40:3a:10:fd:9f:46:f1:
         dd:35:6b:54:0f:66:cf:30:97:9b:be:1c:0c:b4:5a:cc:fa:fc:
         e5:12:34:7d:15:8b:58:7d:a2:fc:f8:fa:1a:c6:35:a0:16:c3:
         e9:4c:5b:83:72:ed:cf:0f:21:60:80:a4:f8:79:02:1f:a6:f4:
         b3:91:f8:40:ae:97:62:f7:95:a0:ee:dc:94:92:7c:18:8a:aa:
         41:b9:fd:79:fe:d6:0e:0b:53:99:78:c6:35:d6:24:d1:e1:c2:
         50:16:e3:c6:dc:7e:c2:5f:97:ee:1d:7a:af:06:22:57:37:22:
         af:2e:4b:43:69:23:0c:e4:64:33:83:1b:d4:2e:ee:60:a9:0e:
         10:75:2b:3b:89:bb:fb:90:9c:eb:cf:7d:8d:d2:9f:85:f4:18:
         7a:82:6f:2f:37:66:42:82:16:90:0d:95:63:a2:c7:f0:0c:83:
         36:f4:89:c8:7a:be:17:27:5d:b3:54:c4:93:c0:c7:73:84:f2:
         b6:80:1f:6c:d4:2e:ee:bd:d0:a7:ee:e2:a4:0d:bb:88:d3:64:
         9d:74:45:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:37:03 2026 by rpki-client