Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffa30db7-adb5-39be-82a7-c6df86c519d2.roa
File:                     ffa30db7-adb5-39be-82a7-c6df86c519d2.roa (raw, json)
Hash identifier:          /JjSch98EF67m8L4j+hq81Gk+EKdc5N3sOtUkMBWRPY=
Subject key identifier:   FA:BF:66:FC:A2:B5:64:5A:A7:6C:00:FC:FB:C2:0E:D0:6C:E0:03:B5
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD78B0E2CA37EE173C9AA0E00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffa30db7-adb5-39be-82a7-c6df86c519d2.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     54253
IP address blocks:        2603:c0f6:c000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:0e:2c:a3:7e:e1:73:c9:aa:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=6e26898f-1987-45b7-b859-e287301b4213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:20:8c:42:f6:0a:ec:99:af:18:69:f9:fd:
                    0c:41:e3:04:24:18:0e:27:3c:e4:77:e5:79:3d:9c:
                    2e:5b:4e:61:43:16:f1:8d:a6:7d:c7:33:ca:17:05:
                    b5:3c:d4:ea:a2:09:8c:31:64:f2:ca:ff:6e:b8:27:
                    69:ca:10:2a:bc:5f:44:b7:07:c0:fa:9f:c5:4c:cb:
                    fc:04:f7:07:42:02:e6:b3:2c:f1:dd:14:28:f1:be:
                    57:a3:43:ea:f0:0f:d9:4e:05:27:84:a3:11:bc:af:
                    41:79:72:00:4b:d9:ca:bb:62:57:85:9c:54:b1:4e:
                    2e:61:58:6a:ba:d8:9a:f0:be:84:97:8a:1c:c3:27:
                    17:37:18:0d:66:ce:47:96:63:b7:68:42:e1:9a:93:
                    ae:5d:c8:37:5c:15:43:c0:cb:05:88:80:ef:94:02:
                    fd:bd:3b:f6:d9:58:b4:f2:17:09:33:43:31:d2:58:
                    25:7d:63:69:47:5d:d6:1d:7f:4d:eb:4f:c1:6e:dc:
                    a6:2d:cc:50:59:d1:af:8f:e7:89:00:5d:be:5a:f7:
                    38:99:83:61:26:9f:a6:52:75:97:e0:2d:82:28:2d:
                    40:46:98:7d:68:93:67:dc:c0:a1:6e:a3:22:f5:e3:
                    b3:3a:38:2d:2a:2f:d0:e3:b4:26:38:e8:ee:13:90:
                    af:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BF:66:FC:A2:B5:64:5A:A7:6C:00:FC:FB:C2:0E:D0:6C:E0:03:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffa30db7-adb5-39be-82a7-c6df86c519d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f6:c000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ca:79:b0:f1:7e:b6:ba:9b:02:51:0d:c1:40:60:6a:0d:29:
         95:86:a8:52:e8:8e:bf:11:c9:d0:02:8f:c0:d1:37:f5:0a:a0:
         09:b6:15:26:f4:88:32:10:5c:4f:96:8c:bf:12:63:1c:42:0c:
         d4:e1:b2:a0:e2:5c:f2:cf:04:bf:55:62:21:27:f1:bb:18:03:
         a5:35:78:bb:d8:46:37:fb:0f:45:c8:9a:e0:f0:3e:ce:9b:95:
         94:87:ef:70:51:cc:b9:f2:2a:d0:76:db:89:b3:32:99:ea:14:
         f9:70:27:b1:bd:bb:13:40:85:b4:1f:dd:7a:12:6f:62:dd:32:
         f1:87:bf:bc:8b:dd:ca:bf:2a:99:f3:68:c9:d3:2c:b6:bb:19:
         bd:72:cc:68:a2:1d:4f:10:15:2b:ae:d2:cd:26:91:b2:e9:45:
         6a:82:2b:7d:e7:9e:92:49:63:c2:80:8c:1d:0c:f5:7b:6c:82:
         1e:1f:68:dc:1e:52:37:59:34:55:1b:e0:b1:75:e4:4e:60:ef:
         c0:cf:82:a0:09:15:0b:b5:de:3b:a0:9f:22:f1:ca:9a:8b:0f:
         c2:16:67:06:48:c3:a2:24:bb:84:6a:fb:70:57:4b:d7:76:7b:
         f3:03:eb:a8:05:54:f3:25:13:07:8b:10:24:d3:14:ae:ab:51:
         29:d0:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:03:54 2026 by rpki-client