Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/547cba74-d5ee-3a43-a052-52cba2866c97.roa
File:                     547cba74-d5ee-3a43-a052-52cba2866c97.roa (raw, json)
Hash identifier:          N3RaNlLayezpiONUtjYtjhFrnodKfUhpi3ssf+097S0=
Subject key identifier:   47:BB:A5:0C:F8:16:8F:3B:B4:E4:C0:9F:DC:4C:B1:D5:CB:86:F2:8B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F20F7B537BA813E601ED78F80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/547cba74-d5ee-3a43-a052-52cba2866c97.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:3100::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b5:37:ba:81:3e:60:1e:d7:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=794763fd-ec6a-41fc-98b9-1a142c9614fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:ce:6a:43:45:83:00:c1:7d:c4:e3:e5:41:
                    fb:87:84:9e:b4:ee:8d:4a:56:e6:fb:cb:bf:5e:29:
                    a0:93:53:1a:46:f7:16:ac:be:a7:1e:f1:6b:a9:dd:
                    03:39:3d:19:d4:a5:9e:f9:89:3b:f5:ae:32:71:f8:
                    fa:da:b2:f9:b7:29:3a:62:a8:41:c7:7d:b2:33:2e:
                    a4:8d:0c:4b:9f:f9:49:40:59:eb:48:04:69:d6:a9:
                    e4:c3:14:59:74:6c:d5:e5:9b:22:be:69:71:f2:bb:
                    33:24:b8:59:a2:be:24:0b:54:15:22:20:a4:6e:9e:
                    7e:21:63:33:c3:cd:1b:26:e1:d3:d9:56:4d:3f:fe:
                    ee:9b:a4:65:78:99:5d:43:5c:b7:d1:3e:8b:f4:fd:
                    1a:21:4f:72:43:1c:f0:b2:1c:31:a5:d5:c9:0f:f5:
                    d9:98:1a:1a:d2:a2:0e:98:f6:26:ac:14:a1:f9:cb:
                    84:cc:57:10:b5:cd:47:ce:a9:dc:d0:44:3a:f3:20:
                    13:21:49:60:bf:13:54:2d:45:74:7b:e6:03:57:3b:
                    51:16:3f:63:71:5e:61:04:06:be:71:8e:00:00:50:
                    dd:fa:af:a6:3f:a5:c1:c8:6f:0f:ce:d9:0e:be:69:
                    eb:91:f6:11:e5:5a:4b:01:a2:af:5b:16:29:1a:70:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BB:A5:0C:F8:16:8F:3B:B4:E4:C0:9F:DC:4C:B1:D5:CB:86:F2:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/547cba74-d5ee-3a43-a052-52cba2866c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:3100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:92:4b:45:ce:47:f6:21:95:56:8a:2b:49:23:34:c2:75:98:
         de:de:a4:5b:f7:8a:c8:d9:5f:4b:22:0f:75:5d:58:a8:8a:96:
         af:5d:a7:46:36:36:2d:5b:af:32:7c:5e:98:d6:94:10:e4:d8:
         bd:e0:71:4d:26:47:3a:fa:59:ed:f3:da:bb:00:f1:c0:3f:d8:
         db:72:17:dc:4c:af:7c:df:c3:8f:0d:b7:49:55:80:cd:69:4e:
         43:18:99:6a:14:ae:97:45:76:cb:d7:db:da:12:25:2f:0c:78:
         98:3c:59:ee:1f:72:6e:4f:2e:6d:cb:66:cf:f7:64:26:ef:bd:
         47:46:04:a0:41:4f:8f:d3:63:33:77:24:d9:a2:c2:bc:00:72:
         39:c8:33:e5:4e:17:f5:f2:db:ec:9a:02:e1:58:6b:41:7c:d4:
         61:66:b8:2d:c7:6e:22:3a:7c:c3:57:89:8a:44:d4:2e:ca:59:
         ff:64:ac:de:6c:28:2f:fe:15:59:a9:46:2a:f2:1e:b8:cf:98:
         d1:1d:dc:dc:d9:67:55:3d:e7:b3:a9:76:50:d9:7e:b2:25:98:
         59:c6:02:0c:95:fa:c6:d4:46:c3:64:1a:9b:e2:1f:09:c6:30:
         d6:ba:1c:76:96:3a:d2:ab:d5:44:7d:6a:08:90:a7:74:e1:4a:
         fb:f4:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:45:44 2026 by rpki-client