Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6cc4ec65-a0c3-35f6-aba3-e137a0582821.roa
File:                     6cc4ec65-a0c3-35f6-aba3-e137a0582821.roa (raw, json)
Hash identifier:          0InYa0NosEshe+2eZUNaswGe5pe2YMH5J6CNm9zuKaI=
Subject key identifier:   DD:BA:85:8F:6D:1B:9E:D7:72:AF:03:65:88:0A:FA:76:28:86:1B:8F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F119CE372B96BBCA39061A380
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6cc4ec65-a0c3-35f6-aba3-e137a0582821.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:200::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:e3:72:b9:6b:bc:a3:90:61:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=41d77bef-e257-4af8-816a-c290c8780f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:2d:91:c5:57:8b:bc:66:45:36:05:be:9e:
                    e2:71:f1:34:0a:dd:d8:87:ff:d6:67:5f:5d:af:a2:
                    a2:b8:3d:76:42:b0:34:6c:db:73:5d:b5:5f:d1:35:
                    f1:5c:31:eb:c7:d4:13:90:a0:ef:54:a0:d8:5a:65:
                    cb:32:e2:75:0a:80:44:d9:59:5c:2d:a7:12:55:fa:
                    7e:4d:b8:06:34:d8:7a:b1:6a:cf:d1:10:03:36:1a:
                    38:0e:fb:f9:7e:77:95:1a:5f:56:bb:c7:6c:e2:cf:
                    11:52:c8:f4:b0:0b:2c:85:4c:7c:fb:c3:ca:28:96:
                    f1:2f:e8:03:b4:5d:19:c9:49:05:e6:68:08:7c:6f:
                    58:e6:9b:77:fb:0b:75:ca:1c:b8:36:5c:86:6a:c4:
                    b1:a9:df:28:81:99:8f:0a:77:71:6f:0b:f4:73:8f:
                    94:bc:86:af:28:39:28:5e:d6:81:68:23:0b:29:5a:
                    ea:df:e4:fd:2b:e7:a1:d7:20:e8:1f:3e:28:b5:61:
                    a3:d5:48:bb:26:d6:12:b8:b1:05:5f:bf:70:56:33:
                    de:f7:f4:fc:f0:84:0a:d2:66:b7:17:ed:1f:7d:d9:
                    f6:0d:69:b2:74:6c:c1:65:29:6f:0f:28:4b:29:e5:
                    92:d3:fd:04:0c:73:71:b9:ac:57:b2:c9:8a:92:49:
                    f3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BA:85:8F:6D:1B:9E:D7:72:AF:03:65:88:0A:FA:76:28:86:1B:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6cc4ec65-a0c3-35f6-aba3-e137a0582821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ab:fb:c1:7a:30:89:dd:5c:cc:fc:e5:57:24:a0:43:d8:6b:
         42:52:ee:85:6e:72:03:f5:7e:ea:ad:07:be:26:80:6c:f2:08:
         4a:8f:b3:cc:0b:e1:de:32:c9:cc:15:fb:f6:9b:dd:e5:93:c5:
         c4:74:a0:5b:e9:01:6b:c3:bc:1f:2e:fa:6c:4d:57:20:6a:2d:
         e8:d2:08:d5:a3:d7:18:9f:da:76:62:85:ef:22:ca:de:4d:d6:
         73:a6:67:ff:e6:77:ce:6a:ea:d5:89:02:43:bd:91:f4:80:6c:
         24:88:37:8e:56:f4:d5:e6:86:ba:d7:cb:23:5a:32:4b:de:a7:
         12:7f:06:0e:64:0c:67:52:b2:17:63:d3:60:4d:5b:f4:3b:04:
         36:a5:c6:9a:90:b0:c5:e3:ae:7f:42:73:08:4a:4e:d7:70:a7:
         34:23:7f:e0:7a:c1:ca:ed:d7:fc:03:43:22:e1:15:ce:82:3f:
         32:4a:36:59:e1:ce:db:77:0d:85:bb:b6:3f:fc:b5:02:12:e9:
         34:10:d4:31:ee:7b:dc:ae:70:90:9b:84:7d:b0:22:d9:73:5d:
         1d:f5:a5:fb:48:1f:13:10:5c:66:7b:ee:5d:11:dd:1b:54:c0:
         7a:08:66:a7:14:b7:68:1f:4b:64:6a:5b:a0:30:5f:6c:f4:26:
         40:48:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:29:06 2026 by rpki-client