Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/00c0f95a-ca9d-30ea-991e-8f2a1b5713c8.roa
File:                     00c0f95a-ca9d-30ea-991e-8f2a1b5713c8.roa (raw, json)
Hash identifier:          fjjnfoWmLOWSV+7Nf4TwQeyCeNlz3TvSJqrhPfjC080=
Subject key identifier:   09:07:66:B1:19:C0:3B:59:23:A6:50:63:8D:C6:38:CA:91:06:F3:40
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F0D6CD5887D8FA0584B7B7800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/00c0f95a-ca9d-30ea-991e-8f2a1b5713c8.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c000:1900::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:d5:88:7d:8f:a0:58:4b:7b:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=6b9d36fa-2c84-4c30-a575-6c41dab871e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:44:5f:94:5c:84:fa:15:05:b9:b0:66:c7:92:
                    fe:04:6c:32:f6:fb:0a:b3:67:94:f1:16:27:66:5a:
                    70:13:f4:8e:33:36:65:b7:96:5a:3e:f9:87:f8:5b:
                    ba:67:1d:01:42:17:7f:37:f6:51:bb:1c:85:04:0c:
                    60:2a:10:f9:d0:80:5f:4a:f5:a8:55:26:88:83:82:
                    e1:d6:0a:5a:b8:eb:ca:95:1b:62:cf:72:f4:83:d9:
                    a5:55:56:7f:be:33:78:c9:81:d8:c5:90:9e:30:7d:
                    f7:8b:bf:ff:cd:d8:bd:de:68:8b:92:eb:2d:fe:b1:
                    7b:d7:c9:79:8b:4c:c3:46:18:cb:9a:30:0d:d2:d8:
                    85:8c:e4:6a:b4:2f:79:a1:ea:1b:e2:c7:6b:ab:f5:
                    02:46:4e:91:1a:13:01:d0:96:98:07:74:e8:18:5e:
                    bc:33:ab:d5:d9:4a:4c:58:38:97:d2:97:ed:ac:52:
                    82:73:8a:68:20:f8:98:2f:02:d2:3c:00:e6:6b:e7:
                    e8:cf:fc:3c:51:95:f2:59:6d:0d:14:37:4e:19:3f:
                    36:8e:7b:52:9b:3e:06:69:64:06:a2:fb:3c:86:41:
                    7f:bb:ad:8f:3d:e6:f7:1e:7c:10:9c:75:4e:54:58:
                    b7:c9:7d:25:fd:62:61:2f:c0:5e:fb:02:08:49:59:
                    ac:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:07:66:B1:19:C0:3B:59:23:A6:50:63:8D:C6:38:CA:91:06:F3:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/00c0f95a-ca9d-30ea-991e-8f2a1b5713c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:1900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:0d:17:92:34:c4:d6:52:e1:e4:9d:78:9c:91:a6:e0:dc:8e:
         85:88:5f:a5:c5:e2:e7:80:05:d2:27:17:52:5b:65:8a:9e:12:
         d0:7d:3d:b8:cb:00:39:09:d3:42:8d:3c:6d:34:f5:0d:d0:97:
         65:a1:a2:7f:28:41:d4:07:d9:f0:f8:40:8e:2a:4f:5d:7d:7e:
         7a:13:d6:71:62:dc:7e:45:aa:53:51:86:61:79:55:e1:62:60:
         a6:a4:04:e1:04:69:ce:f7:e7:d3:0e:2d:c0:ab:6e:74:be:7b:
         66:58:64:03:1f:4e:1c:eb:ae:54:7e:22:21:ec:c2:f4:70:e7:
         cb:7d:ce:a5:ea:63:e7:85:40:9f:7f:72:d6:2d:64:af:b7:35:
         a1:4a:0b:4b:cc:02:a4:f3:e4:8a:6a:55:a0:78:de:be:4f:42:
         09:f4:4b:3f:31:02:65:6b:66:e6:15:09:1a:30:92:c8:75:93:
         62:6d:83:ea:42:bf:91:5b:e5:d8:51:05:16:84:72:79:bc:9f:
         8c:5d:3e:fb:56:2f:24:8f:f2:86:32:33:ce:2d:b0:4d:ec:57:
         47:3f:f2:28:1f:68:c8:b0:04:c0:4f:fa:df:10:98:22:ea:e0:
         f2:14:d9:bb:6e:a6:49:d5:03:5f:0e:cf:1b:96:f9:47:d1:43:
         87:39:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:58:07 2026 by rpki-client