Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/991582d5-64eb-3917-82ee-6e9a7c0014c7.roa
File:                     991582d5-64eb-3917-82ee-6e9a7c0014c7.roa (raw, json)
Hash identifier:          4+69oZqD0CtE3wkkGKUfF3Q7TLKYhy4BvoLG7k3g2nM=
Subject key identifier:   5F:42:93:DF:57:7F:E6:E9:45:D4:1E:0F:C5:D3:D1:83:E9:39:82:65
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA7A09EC7E52CD8851D1D6B80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/991582d5-64eb-3917-82ee-6e9a7c0014c7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c062::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:9e:c7:e5:2c:d8:85:1d:1d:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=807b8d8d-b7fa-48c1-8e31-84d38d560819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c3:18:05:c1:13:0e:30:a3:63:c5:02:74:36:
                    dd:38:1d:57:da:f7:8a:b3:ba:9a:b1:13:8b:02:a8:
                    b2:0f:fb:cd:f1:01:52:88:02:81:6c:36:e2:cf:47:
                    62:d3:59:08:d5:ed:a0:38:34:63:6b:02:81:da:3c:
                    03:4b:f2:55:49:1f:4e:77:4f:39:1c:1b:a9:0d:64:
                    07:b2:1b:11:00:eb:51:0e:f6:a9:6b:3d:d7:57:59:
                    7a:62:b5:47:04:5c:cd:c8:7e:3f:cc:bd:61:d3:a8:
                    ee:d1:f2:72:c8:92:82:1b:28:b5:a1:82:a9:a5:10:
                    b0:d1:a3:c9:4e:84:10:0f:dc:85:70:6a:fb:96:dd:
                    b3:41:bd:2a:20:c3:4c:fa:3f:54:d6:91:79:9a:08:
                    39:b5:1c:e2:74:57:8d:a8:0c:96:39:f6:89:0e:af:
                    29:fb:50:a8:9e:4f:1a:69:3c:61:2e:a5:7a:1e:11:
                    7e:46:ac:f4:b1:93:00:d6:d2:4b:e1:ff:c7:83:df:
                    d8:cd:ce:0c:89:4d:ec:66:10:93:91:6f:52:44:d3:
                    11:69:03:e4:a8:35:19:91:fb:5e:1b:c2:f8:38:fb:
                    b6:3a:ef:5a:a5:63:6b:2e:0b:fa:0b:a5:d5:c0:ef:
                    fc:2c:9c:61:6d:d0:c2:4d:41:36:96:f1:2c:18:84:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:42:93:DF:57:7F:E6:E9:45:D4:1E:0F:C5:D3:D1:83:E9:39:82:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/991582d5-64eb-3917-82ee-6e9a7c0014c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c062::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2c:07:ea:03:8c:12:bc:9a:90:6e:69:ce:0b:2c:e0:44:15:
         4f:73:0b:c5:3c:6f:5d:a2:e5:6c:64:d5:6f:82:36:de:31:5f:
         8a:a9:6c:c4:eb:82:a4:f9:f5:e8:35:0c:bc:97:44:67:fa:43:
         1b:1a:5d:2a:08:18:7a:e7:ac:0e:4c:20:bf:0f:13:c2:b0:ed:
         53:3e:39:dd:23:bc:82:77:06:7a:7a:87:02:6d:59:8d:80:50:
         90:aa:2b:c1:0d:97:df:90:e5:72:f5:c2:e0:cc:e9:6e:42:a8:
         4b:90:3b:5d:a5:85:6d:11:c4:a4:50:89:bb:72:0a:52:93:15:
         61:bf:47:9e:a5:c2:00:7f:32:0b:20:67:39:32:06:ce:02:39:
         2e:e3:c1:d2:0b:db:d2:c0:cc:2a:ea:c8:11:d1:0a:6f:22:06:
         74:f5:22:a1:f5:36:36:71:49:cb:e7:51:76:9e:8f:e6:3c:84:
         11:1c:4d:6c:14:d4:92:7b:63:ba:6c:6f:55:61:c0:6f:b8:bc:
         76:6d:9d:36:1a:70:79:e9:0f:68:be:a0:e5:7f:85:5d:44:ac:
         a7:cd:c2:5f:68:75:0d:aa:d5:52:91:e6:80:d6:57:4b:4e:b1:
         d0:e5:2e:ce:26:0e:90:e2:80:38:18:de:a0:b1:14:97:88:79:
         6d:31:e0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:12:16 2026 by rpki-client