Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfd93ae5-1762-38f4-8e3e-55a8bf257e8e.roa
File:                     bfd93ae5-1762-38f4-8e3e-55a8bf257e8e.roa (raw, json)
Hash identifier:          N64VVHNMFl+jWkVUYu+/zyzsLGWzgdsoBTQHgP1Av8w=
Subject key identifier:   2E:8D:4C:F0:F2:25:21:A3:AA:65:1D:BC:B6:6F:7E:CD:D8:26:87:14
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E1A14321F96425BC7794C2980
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfd93ae5-1762-38f4-8e3e-55a8bf257e8e.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0d1::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:32:1f:96:42:5b:c7:79:4c:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=ebc7dfac-252a-4f01-9f69-c5737f696ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:34:11:83:7e:a4:18:0e:de:d1:75:c6:83:d9:
                    a2:80:53:b8:3c:81:32:e0:9f:66:38:9e:fd:04:96:
                    f2:fc:b1:bf:70:90:e1:83:82:ff:bf:28:4e:77:f8:
                    b7:90:aa:01:e9:67:52:be:e3:9f:8d:ae:2d:29:38:
                    c7:47:4c:7a:0d:6e:b5:63:09:3b:41:22:b7:f8:50:
                    ec:61:5f:e3:16:df:f1:1d:a4:4f:67:04:4e:c6:49:
                    85:16:4f:8a:df:9a:1d:2b:04:a2:f1:23:7d:7f:28:
                    c2:01:4c:65:16:76:87:fd:4f:cc:2f:5b:64:0c:5a:
                    71:72:53:6f:8c:70:70:23:32:0f:d2:87:a9:8c:c6:
                    ee:20:29:86:ba:14:e7:36:dc:9f:93:08:fb:f0:01:
                    3e:9b:c1:7f:c5:fb:34:88:30:cf:fe:3b:64:8e:a8:
                    dd:92:69:11:36:79:7e:06:06:10:fd:90:25:91:ea:
                    d8:0e:be:12:31:e7:f7:b8:b4:d9:a1:e1:12:c8:36:
                    63:92:69:9c:db:40:1e:11:76:1f:76:3b:90:7c:21:
                    ce:8e:c2:26:fe:c0:02:49:b9:9a:1d:ce:05:fb:a3:
                    91:97:60:15:96:2b:9e:eb:02:e9:76:1a:9f:7b:05:
                    02:b3:fd:55:e3:c5:15:76:3e:ff:a6:fd:af:c7:ca:
                    aa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8D:4C:F0:F2:25:21:A3:AA:65:1D:BC:B6:6F:7E:CD:D8:26:87:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfd93ae5-1762-38f4-8e3e-55a8bf257e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0d1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5c:68:90:98:bb:01:53:e2:75:c4:2d:75:db:0b:cb:ec:43:
         39:a1:27:16:c7:a0:43:bd:ec:bc:55:3b:b1:ff:bf:32:86:76:
         c3:c1:5b:2b:3d:e4:6c:76:87:1a:3d:5c:bd:df:be:19:54:95:
         52:cc:86:cc:02:d6:77:9f:7c:79:9d:dc:e6:2c:77:81:76:a6:
         42:8e:27:b3:0b:2e:3a:f4:42:eb:0f:6d:8d:81:b6:ce:39:5f:
         24:fa:1d:14:bc:ea:91:59:2c:3e:3b:b1:26:ff:d7:3c:0b:bf:
         ab:75:fe:d8:85:aa:12:f9:fe:53:cf:18:36:f9:c0:ae:a7:f3:
         f2:1e:ef:6b:24:bf:88:6c:f8:17:2a:6f:06:b6:0b:80:89:89:
         c6:38:d6:87:aa:8e:0c:8c:2d:e0:f2:c2:43:e0:75:a7:a4:5a:
         fd:01:0e:73:88:81:ec:ab:b9:77:9a:38:67:19:a3:db:27:f3:
         6f:33:b2:ae:d5:f5:cd:b2:1f:7f:4b:04:fd:d9:ff:2a:1f:70:
         b2:67:c0:f4:62:72:22:d1:07:d6:56:aa:17:cd:a6:44:9d:6f:
         0a:e2:a0:8c:2f:2d:4f:5e:02:c8:9e:f6:37:96:34:ed:ba:a9:
         43:85:68:8e:cc:c0:ee:34:33:23:c5:48:da:58:88:96:95:2c:
         b8:ab:7e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:19:53 2026 by rpki-client