Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7e2231fc-d5ff-3c69-a9b6-2db66379534e.roa
File:                     7e2231fc-d5ff-3c69-a9b6-2db66379534e.roa (raw, json)
Hash identifier:          XwTXF21YM0ITcw6fFHA5t1AQeeBfT6I8uQkZQ+y2Wek=
Subject key identifier:   8D:C0:29:3E:51:8C:62:74:77:21:0E:7F:13:5C:8D:64:CF:C8:30:70
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E059C87F785670B930BB6E380
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7e2231fc-d5ff-3c69-a9b6-2db66379534e.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     54253
IP address blocks:        2603:c061::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:87:f7:85:67:0b:93:0b:b6:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=9b0542b4-db17-44aa-9787-38ba991d7555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:68:0e:af:99:5e:73:49:05:3f:d9:98:3e:
                    1e:1b:be:9f:88:d3:f9:7a:82:db:17:71:a7:9c:0d:
                    1c:ec:20:1f:5e:8b:f1:1b:bd:5b:30:04:8c:62:65:
                    7e:8a:94:ee:19:6b:82:f3:26:80:c7:27:9f:41:cc:
                    5e:43:c9:26:48:06:96:67:cb:42:8c:05:9f:db:c8:
                    2f:be:9c:91:cf:e2:b0:c8:9c:d7:94:f5:00:9f:3d:
                    f2:a3:54:2f:b1:09:45:b6:53:67:fe:e8:ee:79:65:
                    48:af:da:2f:7e:e1:5e:98:ff:27:e1:29:29:43:fa:
                    80:9b:26:d9:7c:36:11:32:e1:a9:96:9e:57:bb:0c:
                    bc:8e:70:5b:7f:1a:85:b3:cc:3c:b8:83:46:3d:ba:
                    80:ea:10:72:f1:5c:d2:80:0f:ff:a1:bb:5d:c3:d7:
                    7f:88:a7:eb:00:c8:d3:c4:db:8e:e4:bc:ff:9f:e7:
                    b4:61:74:b5:23:73:e8:12:b3:0c:63:2a:6e:90:df:
                    a4:50:bd:18:c9:10:0a:fe:82:e6:4b:50:8d:18:cc:
                    b7:4a:21:f8:4a:0f:bc:9d:5c:86:dd:c5:b0:41:0b:
                    26:9f:c8:04:46:0f:59:2c:f3:5a:ca:44:5f:71:01:
                    dd:ce:4c:ed:28:4b:ef:d9:c5:50:55:b6:ae:68:01:
                    63:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C0:29:3E:51:8C:62:74:77:21:0E:7F:13:5C:8D:64:CF:C8:30:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7e2231fc-d5ff-3c69-a9b6-2db66379534e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c061::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:be:3c:f7:50:a6:e3:44:d4:cd:24:db:74:94:b7:3b:1f:e3:
         9d:03:6a:e2:88:01:e7:11:43:18:36:ae:a0:08:26:21:4a:c1:
         e8:1f:af:b7:56:ad:74:ed:d1:d5:4c:62:b8:5e:83:a2:4d:98:
         f0:dd:27:a0:da:b2:99:9e:df:c5:0e:f2:37:32:34:a8:34:c2:
         66:9c:2c:15:c2:ea:02:df:bb:8d:4b:66:63:50:33:87:c8:90:
         4f:17:d6:4e:e1:b0:15:10:af:c5:2a:ec:df:5c:8e:98:7b:2a:
         15:54:cf:a3:23:41:2d:08:76:3e:c9:9c:ac:75:ce:42:33:f3:
         ec:1b:1b:8c:51:78:50:c8:68:31:f9:73:b9:14:31:f2:97:3f:
         f9:dd:8f:90:fe:a5:a4:82:65:08:bc:6f:43:bf:bd:75:3e:5e:
         c1:d7:76:88:19:e6:ab:63:a0:ac:38:80:43:ac:94:fe:d3:d7:
         b0:e5:4f:39:b0:f2:47:d6:57:2c:db:d9:e6:45:76:7c:3f:f1:
         47:bc:c9:85:d4:9a:21:b3:68:44:16:14:c2:f7:c1:e5:93:42:
         b7:5a:a6:bf:64:63:ef:56:18:89:48:fb:e7:9f:bb:d3:19:d3:
         83:6d:ee:cc:39:b2:60:aa:c7:49:3d:6c:e1:ef:92:7a:69:c8:
         82:cf:13:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:44 2026 by rpki-client