Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7df77ef4-ad9a-348a-a5e3-24f5d4c70a58.roa
File:                     7df77ef4-ad9a-348a-a5e3-24f5d4c70a58.roa (raw, json)
Hash identifier:          960trfmv89MAEP1CWn3ppcdyCKt95sa3+6gkZZ/u7qw=
Subject key identifier:   35:9D:B1:3C:0C:CF:5C:20:49:1F:2A:DC:7F:04:A7:B0:82:ED:4A:C6
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F20F7CCBC4C41C722A7332CA0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7df77ef4-ad9a-348a-a5e3-24f5d4c70a58.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:b400::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:cc:bc:4c:41:c7:22:a7:33:2c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=37638cef-9110-4832-a536-07da6ddaa203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:da:3b:c8:39:f0:39:d1:53:00:b9:74:5f:96:
                    20:a2:67:4a:fc:f6:d8:db:d2:26:70:d7:d1:97:a9:
                    f3:15:1c:a2:07:ac:ff:71:3b:0e:61:28:59:cd:a2:
                    20:36:66:76:e6:8a:35:5b:45:98:b2:41:b4:02:b4:
                    99:73:25:44:7c:e7:10:ec:ef:4d:41:ed:38:1a:25:
                    9d:9f:10:a3:73:09:cc:a7:ac:1b:37:cc:ce:a9:77:
                    45:e0:f8:51:16:a0:d7:f0:c7:55:b5:ab:ba:12:ae:
                    6f:80:9d:3d:7c:64:41:f4:7d:88:ec:ca:2b:22:44:
                    c1:f4:23:1a:ee:98:2f:bf:e2:b7:c2:e2:76:b9:df:
                    a3:a7:75:ed:79:ab:82:64:b2:ce:5c:4a:67:3f:99:
                    89:8f:36:11:84:a7:79:e7:50:3a:18:0a:0c:d8:0e:
                    a4:0a:d0:4c:ec:7e:83:94:24:1e:cf:04:57:8b:cc:
                    dd:19:50:f8:5d:27:46:91:90:53:84:cc:e6:a2:40:
                    6b:cd:22:da:96:f6:4f:86:bd:d6:82:55:9d:43:1f:
                    af:0a:bc:9d:ad:58:6d:e2:8d:7c:b3:2f:10:ee:cf:
                    59:8b:06:cf:e4:e5:bd:23:58:d0:cf:f6:25:d8:3f:
                    52:26:13:96:5c:77:2e:65:b8:8b:5c:1e:48:b1:69:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9D:B1:3C:0C:CF:5C:20:49:1F:2A:DC:7F:04:A7:B0:82:ED:4A:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7df77ef4-ad9a-348a-a5e3-24f5d4c70a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:b400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d2:1e:fb:f9:97:0a:fe:87:07:02:7c:e8:e9:f0:de:1f:9a:
         30:03:f0:6e:be:40:ef:c0:42:6a:44:62:8d:93:9e:0c:3a:eb:
         eb:d6:21:18:6e:2d:d7:51:3e:d6:1d:77:3f:c0:f1:9a:b2:21:
         20:a0:c4:f0:07:a7:70:6a:6c:3b:d4:88:3b:86:ad:f7:af:56:
         ba:40:4f:24:cf:39:1c:3f:11:2e:4d:07:f7:00:be:64:b8:45:
         4a:aa:a1:52:df:03:a1:47:69:f4:4a:47:71:cf:6d:a1:80:cd:
         dd:b2:47:59:e1:52:52:27:22:9d:c2:71:04:5d:5f:31:63:d1:
         ca:ec:c1:ec:5b:25:35:fa:a6:14:e8:a1:c7:d6:a5:c8:96:ac:
         d9:f0:8e:16:08:e7:3e:b4:8f:8b:3e:45:04:ba:6a:45:b2:7c:
         56:25:14:1e:ab:c9:e2:4f:8b:be:3c:2b:13:74:e8:26:91:4e:
         8f:4a:7e:ea:65:b3:12:6d:89:14:d2:68:84:18:9e:d0:18:13:
         53:44:a2:b0:f7:79:3d:60:b9:fb:91:06:96:d7:11:cf:74:af:
         03:07:75:1f:66:24:c9:56:1a:0e:06:1c:ee:78:88:07:e9:27:
         2a:9e:fc:07:93:15:3e:91:4e:0a:f8:96:f8:c8:0b:41:85:1e:
         32:81:07:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:49:02 2026 by rpki-client