Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fab8bc96-78c8-3a3a-8592-1f5ada4f15ba.roa
File:                     fab8bc96-78c8-3a3a-8592-1f5ada4f15ba.roa (raw, json)
Hash identifier:          FvFytyW1Ta6hVy+5r899p2MU+CilxfPPTpZFtWfP4gQ=
Subject key identifier:   41:5C:24:37:B3:0C:D8:CE:D4:9A:0D:64:58:98:4E:E0:BB:FF:F7:C4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E736A3A91387BAA84E9CD8700
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fab8bc96-78c8-3a3a-8592-1f5ada4f15ba.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c030::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:3a:91:38:7b:aa:84:e9:cd:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=ed297226-66cd-43d5-bff6-345ec315637d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:c3:f0:f5:4f:4f:b2:2b:72:c7:ff:6a:8f:
                    81:25:73:99:99:0b:e7:4a:1d:cf:f8:a8:f6:9e:c2:
                    1e:ed:92:33:f9:b6:26:9c:05:9d:12:33:6d:b8:af:
                    28:f0:3b:c1:29:d0:ef:d7:66:4c:d7:e7:a6:9b:84:
                    d0:a3:e5:cc:61:d9:cd:97:b8:2c:d7:11:b3:9c:a4:
                    33:82:1c:98:6b:ea:24:f3:c8:ba:ce:3e:9e:13:97:
                    f2:e1:4c:8a:dd:36:8b:51:1a:62:6d:68:08:a1:f4:
                    3c:23:99:3a:6c:8b:64:54:d7:98:b7:1c:63:16:33:
                    a4:23:6b:45:ec:34:63:61:a9:41:0a:bf:25:1b:e8:
                    06:b3:f8:37:49:fb:1c:5d:64:74:32:74:3a:bb:4b:
                    24:43:90:07:ec:1d:b9:88:ad:d1:b5:d3:ce:44:88:
                    27:d8:38:1b:a7:33:25:ef:bf:c9:10:4e:50:9c:9a:
                    0f:40:39:6d:20:5f:78:84:f3:d3:f0:07:20:82:19:
                    22:a7:dc:da:e3:c7:cd:29:ae:ce:3d:dd:3c:79:21:
                    43:8c:60:28:2b:52:55:7b:d0:b5:96:cb:59:2d:8c:
                    7d:c5:5b:41:6d:3d:e3:01:41:9c:1c:e9:59:97:fe:
                    f9:a5:3f:55:13:81:af:43:75:e7:48:d2:fc:da:04:
                    1d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5C:24:37:B3:0C:D8:CE:D4:9A:0D:64:58:98:4E:E0:BB:FF:F7:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fab8bc96-78c8-3a3a-8592-1f5ada4f15ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c030::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:d9:c5:fc:7b:9a:7e:13:ee:de:f9:2e:47:71:16:36:30:
         7d:e0:5a:9f:d5:85:17:99:9e:64:7a:52:57:ac:b1:97:22:b6:
         e1:a9:7e:ee:33:07:42:00:e7:e1:cb:ce:fc:1c:e7:c4:f4:45:
         ab:dc:05:34:ef:f3:a5:05:3c:a3:c7:7a:3b:3c:5a:ff:af:17:
         45:0d:03:38:c8:20:99:61:98:82:ab:54:30:8e:f4:0f:2c:8f:
         f7:c5:a4:03:49:a5:3b:43:9e:97:b2:8c:9f:d6:00:c6:fb:89:
         3a:92:71:5d:c2:cf:61:bb:41:8a:3a:f9:bd:fe:fa:e8:19:47:
         f1:13:2e:8e:a9:7d:f2:af:00:1a:ba:dc:a9:1d:53:5b:45:42:
         c5:f0:ca:99:c6:85:26:0b:dc:46:27:43:7a:7d:55:d1:3a:b4:
         3a:7d:d9:d0:e4:36:f5:92:81:d8:e8:3e:a8:bf:c0:32:01:89:
         04:6b:ff:cc:f1:18:02:22:97:0e:f5:16:b2:3d:97:4b:af:dd:
         ec:92:f8:68:9f:4e:a7:49:89:f0:7f:3e:72:ac:12:77:26:cc:
         30:19:97:e7:61:57:ea:dd:b8:d7:a1:59:ec:43:b6:4b:15:49:
         8d:c5:7f:5e:79:74:c6:07:97:10:0c:0c:b7:04:5f:53:b5:dc:
         51:4e:73:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:53:46 2026 by rpki-client