Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0a102431-338a-3d80-995e-0684429d44e9.roa
File:                     0a102431-338a-3d80-995e-0684429d44e9.roa (raw, json)
Hash identifier:          X6d0BsrSn6kCV1h7b1mO8Xf32QeHM3mWXwUT5Bz15gc=
Subject key identifier:   81:16:E0:CC:9C:50:F6:AE:AB:FC:42:F2:AB:95:BE:85:76:61:42:DA
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F480D662DBD741CE89A46C960
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0a102431-338a-3d80-995e-0684429d44e9.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c001:5600::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:66:2d:bd:74:1c:e8:9a:46:c9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=116d12ab-27fd-445d-b4a6-2dc178d02547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e6:3b:20:d8:95:f0:8e:63:2a:b1:38:89:4d:
                    4a:6f:3f:83:0a:52:e8:7c:d5:89:d8:f7:36:6d:c6:
                    f9:c1:4b:2d:65:ff:fc:42:b1:6f:a4:87:ff:66:7e:
                    ae:a0:59:15:71:3e:73:db:06:e7:69:fc:78:12:7b:
                    5b:60:69:05:30:cb:42:84:96:e3:04:2f:72:21:67:
                    0c:29:7b:48:e7:2c:88:a9:c9:f9:87:96:cf:fb:31:
                    97:73:83:6c:31:16:61:90:78:ba:f3:3b:11:2b:87:
                    99:84:8d:85:f1:ea:41:aa:b5:18:3f:cc:1f:7b:27:
                    bf:69:9e:7a:c7:18:b5:3a:d1:16:1b:e8:ff:b7:50:
                    0c:74:aa:7f:fc:ba:10:52:ed:1e:7d:97:fb:b7:54:
                    b3:c0:bd:03:54:e9:33:d2:ca:8c:ce:45:b8:a5:85:
                    a5:eb:bb:5d:b8:ef:50:cc:00:1f:a9:d0:8d:d6:2f:
                    05:d9:dd:c8:86:00:44:fe:db:ad:6b:40:df:4b:81:
                    2a:cc:f5:87:36:8c:b2:90:6d:82:90:5d:d4:eb:14:
                    18:29:d8:dc:05:ce:45:d0:f1:0a:ed:19:d1:a3:b2:
                    a5:00:d1:2f:f1:16:79:d2:e4:72:ac:07:bb:a4:72:
                    7b:10:77:dd:e8:fe:65:9a:51:51:f9:da:59:3e:cf:
                    f1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:16:E0:CC:9C:50:F6:AE:AB:FC:42:F2:AB:95:BE:85:76:61:42:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0a102431-338a-3d80-995e-0684429d44e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:5600::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a3:5d:d2:72:ac:03:4d:84:ef:fc:36:30:9c:f5:66:46:3c:
         41:c8:5e:08:fe:e8:7a:f9:42:06:38:45:08:e0:15:7e:13:08:
         92:6c:9a:c0:b0:d2:37:a0:00:f4:77:63:cc:e6:38:8d:e0:8d:
         68:8e:77:bb:9d:f9:5d:4f:a4:ee:20:d8:83:90:09:21:db:93:
         f0:66:13:32:db:d1:a9:ca:10:63:d1:c5:7f:17:db:66:1e:74:
         f4:fa:2c:6f:a8:05:da:94:76:00:f2:59:df:cc:eb:b8:2f:1b:
         08:1b:c2:99:1a:a8:cc:70:3f:d5:eb:4b:9a:76:bc:13:e7:bf:
         49:28:8a:bf:9c:07:69:ac:66:ac:a9:de:16:8a:20:2f:ec:42:
         18:f9:46:29:9a:f6:1a:32:57:7a:a3:9c:ac:fb:5c:1c:fa:13:
         ba:e4:59:f8:82:67:71:1c:22:9a:fd:0b:35:9a:c2:44:cc:fa:
         be:02:27:bc:79:ea:50:8f:2b:09:81:3f:07:07:2f:47:30:5d:
         76:07:68:a5:28:8a:46:b8:42:d9:46:96:3b:35:b3:30:7b:de:
         fd:09:3d:e8:aa:27:e1:e9:32:f7:f5:55:3b:70:26:52:cc:7c:
         96:95:2d:e4:00:f3:89:13:1f:33:ad:28:99:13:7e:d2:04:da:
         fe:9e:c6:8c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9IDWYtvXQc6JpGyWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk
MTE2ZDEyYWItMjdmZC00NDVkLWI0YTYtMmRjMTc4ZDAyNTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOY7INiV8I5jKrE4iU1Kbz+DClLofNWJ2Pc2
bcb5wUstZf/8QrFvpIf/Zn6uoFkVcT5z2wbnafx4EntbYGkFMMtChJbjBC9yIWcM
KXtI5yyIqcn5h5bP+zGXc4NsMRZhkHi68zsRK4eZhI2F8epBqrUYP8wfeye/aZ56
xxi1OtEWG+j/t1AMdKp//LoQUu0efZf7t1SzwL0DVOkz0sqMzkW4pYWl67tduO9Q
zAAfqdCN1i8F2d3IhgBE/tuta0DfS4EqzPWHNoyykG2CkF3U6xQYKdjcBc5F0PEK
7RnRo7KlANEv8RZ50uRyrAe7pHJ7EHfd6P5lmlFR+dpZPs/xWwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIEW4MycUPauq/xC8quVvoV2YULaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGExMDI0MzEtMzM4YS0z
ZDgwLTk5NWUtMDY4NDQyOWQ0NGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAAVYw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJaNd0nKsA02E7/w2MJz1ZkY8QcheCP7oevlCBjhFCOAVfhMIkmya
wLDSN6AA9HdjzOY4jeCNaI53u535XU+k7iDYg5AJIduT8GYTMtvRqcoQY9HFfxfb
Zh509Posb6gF2pR2APJZ38zruC8bCBvCmRqozHA/1etLmna8E+e/SSiKv5wHaaxm
rKneFoogL+xCGPlGKZr2GjJXeqOcrPtcHPoTuuRZ+IJncRwimv0LNZrCRMz6vgIn
vHnqUI8rCYE/BwcvRzBddgdopSiKRrhC2UaWOzWzMHve/Qk96Kon4eky9/VVO3Am
Usx8lpUt5ADziRMfM60omRN+0gTa/p7GjA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:56:00 2026 by rpki-client