Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/278bc694-6e6e-314d-88b3-c02a169d8da9.roa
File:                     278bc694-6e6e-314d-88b3-c02a169d8da9.roa (raw, json)
Hash identifier:          L8BpN7P3GpOPxpnaqU2fcjAjGa/mU6QrACo9gwXaex0=
Subject key identifier:   36:EB:5E:1A:D7:AC:9C:6C:C0:0C:3C:56:C5:33:36:B5:39:87:B2:DA
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F119CFC44AD6415D2C86F4A40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/278bc694-6e6e-314d-88b3-c02a169d8da9.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        2603:c012:e000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:fc:44:ad:64:15:d2:c8:6f:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=f92e5191-4836-4f08-897c-c3ea4aa4ba81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:61:e2:db:a2:af:f8:8d:77:fe:95:ee:9f:
                    da:54:a6:56:b1:cb:5e:e5:ae:03:53:c6:79:bf:dd:
                    7a:27:10:4a:bf:bd:d3:1a:88:64:59:46:5f:bb:aa:
                    be:97:8c:d0:9d:9f:6e:53:c7:22:b6:b3:00:30:05:
                    c9:86:07:bc:00:aa:53:27:83:be:7e:82:12:67:fc:
                    66:3b:e8:ca:f4:f4:11:76:c8:91:b5:ed:aa:6e:be:
                    7e:ba:d6:b3:a4:b5:2b:84:41:18:87:33:90:59:b7:
                    88:eb:c2:cc:d9:c3:f2:35:d9:bd:87:b5:29:24:3c:
                    ec:ab:e9:ac:b2:2c:77:8b:75:38:3c:ac:ed:14:6f:
                    01:1c:df:65:d0:de:68:52:b3:a7:05:b8:98:71:4f:
                    c4:4e:1f:06:41:d4:4c:34:ff:21:5a:21:03:b4:48:
                    9d:80:03:eb:38:f4:6e:1b:65:69:d3:1f:3e:13:e2:
                    9b:c0:20:62:87:2e:ed:49:06:34:20:1e:d2:4b:0f:
                    12:ac:a1:08:fd:5a:23:53:b5:3e:c9:fa:98:40:69:
                    a9:ab:35:7b:5e:69:0c:16:19:e9:7c:1e:23:b8:96:
                    95:62:e7:82:eb:c7:02:c2:e9:de:3d:1f:37:9c:8c:
                    c7:df:d1:24:e1:07:28:56:21:9a:8b:7a:d3:75:ec:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EB:5E:1A:D7:AC:9C:6C:C0:0C:3C:56:C5:33:36:B5:39:87:B2:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/278bc694-6e6e-314d-88b3-c02a169d8da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c012:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a0:66:46:d0:dd:93:ec:87:b0:ef:7d:f5:0f:da:24:f4:8a:
         e8:95:35:e7:14:8b:d1:85:50:67:d5:2c:3c:8b:76:eb:2d:84:
         6d:b7:4b:3c:49:2d:c2:ce:4d:79:73:17:1d:93:1f:f9:3f:50:
         ee:df:86:b5:a9:04:b9:fc:68:2b:dc:7e:fa:cd:7a:d6:1e:be:
         2b:80:cb:12:a0:d4:65:1d:ca:d9:7c:40:1c:68:d3:f6:d2:86:
         7f:d7:67:45:a4:f3:ee:1a:4e:3d:2a:16:6e:fb:ad:af:e9:b2:
         14:45:b3:a6:08:95:7d:38:05:86:62:e7:f7:53:c3:92:ec:e1:
         b1:cc:cd:9b:f5:9b:bb:ed:db:ef:b1:0c:84:8a:3b:d5:95:f6:
         bf:62:ed:04:17:7d:ec:8e:9e:48:5b:67:b1:87:6a:41:44:41:
         a2:b7:63:e6:60:ac:89:ff:bf:8f:b8:f3:73:3f:e6:5a:d9:2d:
         34:8c:09:c7:c3:6c:88:19:42:b9:f2:35:87:9f:6d:6e:30:90:
         5f:90:f3:49:42:5e:0c:7f:bd:7b:cd:a1:ff:c4:1f:60:b6:67:
         55:52:4f:1c:14:0a:65:b4:2c:14:47:62:e6:6c:56:09:fc:37:
         47:93:97:17:0a:00:04:a2:27:e2:7a:9c:35:2e:a8:ae:d9:9a:
         b7:13:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:57:26 2026 by rpki-client