Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/00c0f95a-ca9d-30ea-991e-8f2a1b5713c8.roa
File:                     00c0f95a-ca9d-30ea-991e-8f2a1b5713c8.roa (raw, json)
Hash identifier:          +kNZK6bief1Sq6C9R38LgdLpezfMxyhJfDvpTbk6d24=
Subject key identifier:   63:3B:69:EB:F9:83:67:F6:45:50:53:02:98:F2:04:D5:9A:F0:24:A6
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8AC52FD1F9BDCA54C939F880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/00c0f95a-ca9d-30ea-991e-8f2a1b5713c8.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        2603:c000:1900::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:2f:d1:f9:bd:ca:54:c9:39:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=836fda73-6c65-4c68-bce4-65a4edff9b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1f:57:25:14:47:1d:6a:84:01:f6:88:ff:9e:
                    c6:b8:fe:f3:4a:13:79:93:e5:03:d4:7b:d5:27:48:
                    7d:ab:f1:cc:88:8e:77:3a:c2:80:a6:f4:4e:89:c8:
                    b9:c4:0b:55:b4:df:f7:9e:db:3d:67:a2:eb:00:9b:
                    a3:6a:b3:ef:74:0c:63:28:1a:33:9d:1b:fb:4f:aa:
                    36:19:ed:c2:e8:b8:72:c1:04:51:dc:02:44:68:8a:
                    89:a6:1b:8c:ac:74:0a:9d:c2:ad:c4:1e:63:a6:b1:
                    24:15:9f:82:b1:f2:50:1c:dd:83:7d:f8:1a:d6:2d:
                    21:4f:d2:80:39:3c:02:9c:2b:bd:17:c1:e9:08:71:
                    fd:2f:98:4d:71:cd:5e:6c:b4:97:31:91:7f:3b:12:
                    e1:9f:11:94:42:c5:c9:9b:ac:4f:f0:5b:66:06:e2:
                    3d:34:d3:fb:b1:58:c3:c7:fa:77:51:3b:86:99:38:
                    7b:9a:0a:d5:14:f1:4b:56:0f:41:c6:b1:7b:85:73:
                    ae:58:7d:82:43:9a:3e:a0:43:8d:32:2c:5c:4d:e5:
                    43:5c:9e:96:f1:e7:18:1d:90:cc:18:5a:6b:4e:9a:
                    a4:7d:d4:06:c8:bb:05:f4:96:a6:cb:a8:86:e1:78:
                    0b:4a:57:dd:73:92:4c:54:93:20:e7:46:4b:9d:f9:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3B:69:EB:F9:83:67:F6:45:50:53:02:98:F2:04:D5:9A:F0:24:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/00c0f95a-ca9d-30ea-991e-8f2a1b5713c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:1900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f1:06:94:33:77:56:6d:7b:50:c5:8f:e2:82:4e:45:f1:d6:
         d5:86:a4:72:43:cb:36:1f:8e:b6:6a:b8:c9:71:e4:cc:3c:c4:
         0f:0c:af:6a:cb:02:bd:b5:21:03:df:fa:bc:e0:68:c9:fd:45:
         14:75:57:28:e5:be:b7:9d:34:09:be:f8:82:56:c2:55:dd:86:
         dd:1c:61:b6:3d:54:28:dd:47:68:52:f8:84:4c:79:e2:51:a2:
         f4:3b:e3:43:0d:c8:3c:d7:ae:a1:c9:5e:79:ec:2c:d4:58:d9:
         e0:d4:a6:a0:69:b3:86:e0:45:d2:5c:91:04:4b:63:83:b6:5c:
         20:0e:46:91:35:af:2a:c1:3e:62:c7:cc:cf:2f:cf:32:05:5f:
         82:2a:b8:d7:96:43:8d:32:d0:cd:a7:64:8d:5f:50:3b:7a:1f:
         06:ef:78:aa:bd:fb:c3:90:4b:fd:3b:f2:79:38:40:e3:9a:79:
         cd:a6:80:1a:48:77:2e:4b:bb:20:f9:06:41:5e:c7:46:9b:2b:
         0d:a9:9e:90:40:90:5f:2c:9b:85:f5:92:1a:c0:a2:7e:52:6b:
         91:15:44:a1:9a:54:3d:eb:8e:48:5f:e8:21:88:8a:be:ad:20:
         c8:01:63:eb:e0:b6:2d:ee:9d:63:46:3f:18:05:dc:b9:60:4b:
         dd:d3:45:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:44 2026 by rpki-client