Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b873ca9d-cb7e-3ffc-8ba7-053a8b03b00e.roa
File:                     b873ca9d-cb7e-3ffc-8ba7-053a8b03b00e.roa (raw, json)
Hash identifier:          8VinBUqpD04QqfSMfW6vVdF7g3/Q5O/rDfzyB8miYfA=
Subject key identifier:   A2:D3:33:C4:37:B1:52:25:E9:4B:BB:AC:55:2C:D1:5C:46:51:2D:6A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E077B60926DFA88EAF8FCA100
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b873ca9d-cb7e-3ffc-8ba7-053a8b03b00e.roa
Signing time:             Mon 01 Jun 2026 17:07:46 +0000
ROA not before:           Mon 01 Jun 2026 17:07:46 +0000
ROA not after:            Sun 30 Aug 2026 17:07:46 +0000
asID:                     31898
IP address blocks:        2603:c000:3d00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:7b:60:92:6d:fa:88:ea:f8:fc:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jun  1 17:07:46 2026 GMT
            Not After : Aug 30 17:07:46 2026 GMT
        Subject: CN=6167dc47-b16f-4406-8762-b5902d41bee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:75:2f:60:18:f1:1d:d2:0e:e6:97:a8:aa:ff:
                    86:b0:8d:35:8a:a4:1c:fb:10:fd:48:2d:41:60:09:
                    ac:84:f6:1d:1f:64:35:df:32:e7:da:00:bd:bb:5d:
                    94:62:3c:21:c5:07:5f:4c:ea:1b:24:cd:c5:b1:32:
                    f6:6e:5a:f5:c0:fa:9f:f0:36:62:56:2c:47:13:22:
                    5b:05:2d:c5:85:91:2f:b2:7a:74:4a:b1:1a:08:29:
                    c1:9c:01:35:41:97:01:0b:a7:5b:06:93:0f:07:70:
                    8b:6f:8c:1e:86:29:8d:ba:4c:9e:e4:99:12:a6:cb:
                    0f:56:a4:d0:fc:72:0c:7f:1f:df:a0:ec:84:f9:70:
                    be:16:5b:ce:61:aa:8e:9b:6c:52:da:25:1c:51:09:
                    63:3b:51:ec:63:9c:00:e0:bd:c6:c4:6d:db:ca:04:
                    22:ab:bf:49:2f:5c:75:af:e7:b9:47:1b:37:85:cf:
                    c7:4a:8f:13:49:58:3b:4e:f5:68:36:18:42:79:6c:
                    dc:e0:09:0b:2d:24:14:25:81:ef:39:f9:6b:0d:e2:
                    71:66:f1:97:d7:b6:29:6f:65:41:73:a1:90:a6:32:
                    9d:43:e4:7f:51:b9:25:26:77:b7:6e:1b:76:98:aa:
                    63:12:82:7a:a1:a5:50:69:48:6a:55:d0:d8:e9:08:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D3:33:C4:37:B1:52:25:E9:4B:BB:AC:55:2C:D1:5C:46:51:2D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b873ca9d-cb7e-3ffc-8ba7-053a8b03b00e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:3d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:19:54:a9:a1:43:97:5e:da:3f:2a:15:ae:dd:ae:79:a5:ac:
         22:a0:20:b3:93:7a:b9:6d:32:d3:c9:4d:e1:f7:29:a1:a8:44:
         f8:9f:7d:be:7c:af:b2:87:78:44:98:8d:1b:da:6e:cb:6d:9e:
         0f:c4:79:05:b2:6d:53:e3:8a:c3:b5:17:7c:cc:af:c1:54:af:
         76:a1:a8:98:66:e8:d1:7b:78:14:09:ae:b9:97:7c:5b:dd:d1:
         33:c7:ad:68:77:30:e4:68:ba:c8:42:ff:c3:ba:a6:61:a5:87:
         36:a8:ee:d1:cf:9b:e5:30:2f:e2:ee:80:f6:85:af:81:47:f3:
         90:35:70:d1:9e:1f:9d:77:7b:5c:f7:a1:60:f1:b4:b1:aa:3f:
         32:f8:f2:c6:47:ac:85:2c:35:41:58:17:5f:48:fa:83:58:9b:
         1f:5d:00:ce:4c:74:c1:e7:30:8d:f2:29:27:b2:78:cc:8f:bb:
         2b:28:d8:4f:20:bf:66:78:c3:3a:a9:65:3f:79:30:b8:37:15:
         ff:12:bf:74:02:e2:92:2c:08:92:60:42:4f:7d:e3:03:74:51:
         79:f6:ba:10:0a:3c:5f:1c:d0:5b:b7:f6:9d:0d:e4:af:58:83:
         b5:64:54:79:7c:d9:93:a1:c7:db:fa:2e:21:9d:70:3d:ab:cb:
         79:7d:4a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:11:02 2026 by rpki-client