Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ef3b1c2-cce3-35b5-afa4-c3a0c90a415f.roa
File:                     1ef3b1c2-cce3-35b5-afa4-c3a0c90a415f.roa (raw, json)
Hash identifier:          go4rmIlKQIdacEbdIrpB7un2Nf1VgxybCBaqPr21zmc=
Subject key identifier:   FF:E6:DE:80:27:49:19:6F:1D:27:65:21:C5:96:5D:D7:4C:00:FE:FC
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E02D0807F5DA80C268BE1B900
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ef3b1c2-cce3-35b5-afa4-c3a0c90a415f.roa
Signing time:             Sun 31 May 2026 01:00:10 +0000
ROA not before:           Sun 31 May 2026 01:00:10 +0000
ROA not after:            Sat 29 Aug 2026 01:00:10 +0000
asID:                     54253
IP address blocks:        2603:c0d0:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:02:d0:80:7f:5d:a8:0c:26:8b:e1:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 31 01:00:10 2026 GMT
            Not After : Aug 29 01:00:10 2026 GMT
        Subject: CN=4da566c0-8182-4e77-95f9-fe2f873db8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6a:1e:ef:f3:57:f2:08:cd:3a:68:01:6f:23:
                    de:11:52:db:59:32:f1:df:3f:59:24:a4:1a:05:ad:
                    e9:dd:e2:23:b7:0c:f8:88:4b:77:ea:6a:19:33:9b:
                    8a:d6:b2:03:a6:fe:90:46:ae:24:ce:48:ab:d2:56:
                    cd:7a:ba:db:ab:60:45:99:c4:f3:ac:45:11:88:61:
                    8c:98:96:7c:8b:46:0b:b2:1f:b7:4b:2c:c2:f9:61:
                    45:41:e6:a1:f4:a9:ca:d3:9b:7c:82:25:29:93:ab:
                    66:2b:a1:34:2f:16:99:bc:53:ff:69:af:a0:65:4c:
                    b0:1c:bf:91:65:b3:a1:9f:1f:ee:3b:d8:6e:ef:83:
                    29:cb:cf:20:33:99:43:31:ad:fd:88:06:a0:41:92:
                    3a:57:3b:62:f4:c1:db:4e:4e:3c:d2:74:aa:b5:60:
                    9c:8a:17:7a:b6:d7:d5:bb:7e:4a:f0:60:df:41:0b:
                    39:09:46:9e:47:72:29:23:cc:27:26:1f:c1:41:87:
                    bd:96:ec:60:30:66:8d:80:47:a4:92:27:d2:f2:14:
                    a0:12:8b:3b:e3:fc:98:31:25:db:7a:38:b1:ea:bb:
                    86:d2:a8:fe:a1:6a:1a:b9:f3:ba:dc:1c:c1:e4:0d:
                    f0:03:96:73:0e:12:17:5e:5c:65:94:b2:30:cf:d1:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E6:DE:80:27:49:19:6F:1D:27:65:21:C5:96:5D:D7:4C:00:FE:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ef3b1c2-cce3-35b5-afa4-c3a0c90a415f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0d0:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:af:39:9f:f1:d6:98:b2:2f:0f:83:ff:54:a3:80:b3:f6:74:
         87:89:66:fb:c2:2c:81:5a:cd:29:54:c1:65:36:5c:ee:19:68:
         6d:78:06:bf:1e:60:ab:8d:c8:c4:fe:c8:62:72:41:2c:ac:b8:
         01:f4:57:b2:89:b7:60:ba:90:c1:42:e2:95:0d:d6:5b:58:4c:
         53:32:01:7d:63:22:a8:1c:ac:bc:67:24:94:65:7f:4d:c5:34:
         b8:5b:00:39:36:52:ac:21:b1:1e:79:7f:92:fc:84:62:8b:82:
         dc:e5:2c:d7:5c:39:4e:7a:05:5b:bb:0d:30:7e:22:15:ba:58:
         ca:31:88:96:23:1d:59:d1:f0:fe:e6:14:54:a9:32:c4:4a:5e:
         40:62:2e:67:6e:e6:22:3d:e3:9c:c7:a7:24:c4:49:48:df:31:
         d8:41:c2:c0:00:81:bc:2d:57:fc:70:8a:9d:39:95:a0:71:f1:
         32:b3:f8:0d:4d:62:7a:8d:5d:f8:03:b1:41:2c:1c:79:c1:c6:
         d0:a0:32:50:44:8d:7c:d0:14:a2:57:f3:d0:f8:dc:de:f5:26:
         73:28:d9:64:65:4a:12:ab:c3:d0:ed:c6:57:57:e9:7a:4c:af:
         c8:70:32:d7:78:d8:54:8c:69:30:89:b7:ad:6a:69:6d:b8:d7:
         ff:b4:26:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:22:00 2026 by rpki-client