Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b6fd459c-6aef-3d67-8f6a-90902133fb68.roa
File:                     b6fd459c-6aef-3d67-8f6a-90902133fb68.roa (raw, json)
Hash identifier:          HBJaS7oXcRDeoDI8pJcqCfOw4AHUBdj9Hb5D7aNUN9E=
Subject key identifier:   EE:71:48:CA:43:47:5B:47:7F:7F:51:3B:25:C2:E8:5D:97:D9:0D:23
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F1037A4C1AC22E96B5EFFDA00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b6fd459c-6aef-3d67-8f6a-90902133fb68.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c01a:a000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a4:c1:ac:22:e9:6b:5e:ff:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=2eab47f5-9ddd-4f49-808d-8db31a485032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6a:bd:4b:bc:14:a2:4d:6f:1a:6a:8e:50:08:
                    9e:ce:c4:1e:fa:7d:d7:6a:ef:87:91:84:6c:d0:2c:
                    94:e3:43:10:90:06:66:7c:6b:39:33:26:13:b3:13:
                    1d:85:f9:74:00:58:43:6a:b1:a0:3b:aa:50:b6:86:
                    db:d9:ab:8b:95:ff:5a:ab:e2:fb:d5:76:60:02:cd:
                    43:0d:b1:8c:bb:33:0e:10:e8:4b:b8:25:a0:32:53:
                    02:42:69:bd:b3:74:ad:5d:dd:3f:10:ae:16:1c:65:
                    14:35:5c:d8:ec:b1:7d:fc:c8:e0:bb:04:be:2b:bd:
                    ab:20:31:42:34:94:e9:ae:8f:80:e3:81:48:1b:1f:
                    04:31:88:13:95:07:38:12:e9:ff:5d:55:04:80:91:
                    23:5d:6b:cd:56:2f:d7:bd:7a:51:1e:bd:54:12:db:
                    2d:ef:b2:25:ac:51:bb:41:c3:7b:5d:7d:68:30:57:
                    89:1a:f5:00:31:d9:c2:1c:de:5f:4b:b8:60:5a:3c:
                    e6:d2:d2:3c:34:c8:80:8b:28:1a:b9:30:2c:7a:0c:
                    97:c1:8e:c8:e3:b0:e9:5a:fc:05:67:e0:e7:34:74:
                    71:ef:11:20:17:b8:5c:3b:6d:02:d4:a5:e5:c5:6a:
                    d2:35:c7:85:c4:3e:ad:f5:5d:6e:c0:20:ef:d3:01:
                    fa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:71:48:CA:43:47:5B:47:7F:7F:51:3B:25:C2:E8:5D:97:D9:0D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b6fd459c-6aef-3d67-8f6a-90902133fb68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c01a:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:61:40:1a:34:6c:c5:74:3f:32:ef:7d:c2:cd:bb:e9:ae:79:
         21:1f:45:91:a6:03:7a:c8:bd:99:17:82:95:3a:bb:85:25:9e:
         50:b0:f3:40:e5:77:85:72:c8:aa:44:b8:ce:13:8d:66:2c:d8:
         3b:26:be:5c:04:0b:24:c0:94:42:99:5b:d8:f2:a6:c4:59:a9:
         45:cd:80:44:e9:7a:f0:28:ce:58:01:0d:46:4c:0e:da:74:55:
         97:4f:7e:00:78:ed:17:88:4d:6b:67:30:92:35:e4:e4:cf:62:
         e1:d6:97:e6:3e:03:d7:bc:f3:50:1d:59:5e:18:69:ad:e6:5c:
         6d:ae:7f:d1:ad:ae:a2:2c:14:ce:9a:88:70:75:21:21:2d:f3:
         71:64:45:4d:41:91:1d:a7:32:dc:ff:aa:b9:22:17:a6:39:f8:
         94:33:48:e6:60:dc:4e:b2:12:da:f9:85:bd:39:04:30:d0:96:
         c5:00:4e:d1:7a:bf:0a:73:ee:af:f1:fe:36:b0:8d:b6:a9:47:
         0a:8a:8f:5d:f7:59:72:6f:b2:11:f4:ff:ab:44:bc:95:bd:34:
         c1:39:68:70:c1:8c:4f:41:30:35:a9:97:75:96:60:8d:36:59:
         be:60:9e:60:88:e3:3f:72:7b:43:e2:d1:49:34:bf:75:ae:80:
         d0:4d:7d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:06:29 2026 by rpki-client