Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0db277f-4bbd-393d-8956-fe38b25d5599.roa
File:                     d0db277f-4bbd-393d-8956-fe38b25d5599.roa (raw, json)
Hash identifier:          UYTY0eQ61MyolZ41ou+R2G1BE8CqAQTlo+j9TDtlKoU=
Subject key identifier:   DE:A6:CC:7D:B1:F9:C8:0A:56:CC:86:C1:B2:03:E3:B5:25:70:24:E8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F1B6252C99071C61D52060B20
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0db277f-4bbd-393d-8956-fe38b25d5599.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:8100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:52:c9:90:71:c6:1d:52:06:0b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=65bb3b47-4c3b-4d2e-a473-148b79b34570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ad:2f:02:72:63:2d:e1:82:ef:71:0a:f0:3a:
                    25:09:bd:f3:9e:29:ab:03:bf:b7:6d:37:6b:3a:df:
                    f1:2f:7b:d2:f1:8c:92:6e:62:cf:08:6d:d6:fc:42:
                    f5:b3:40:4c:c0:69:a9:d6:f2:0e:73:de:f0:31:00:
                    4c:ad:7a:6e:67:e2:07:c2:4a:9b:71:7d:bd:bd:88:
                    87:6f:10:44:0d:c3:0a:87:5e:c4:d0:a1:3a:63:2f:
                    04:e1:a0:d8:4e:0a:3c:35:f2:c7:e4:a8:54:24:c6:
                    b8:28:09:e9:14:00:8b:44:4c:29:30:64:18:d8:25:
                    d5:60:16:47:ea:a9:87:39:93:c3:99:93:11:c8:e7:
                    3a:a0:32:08:4a:31:c2:49:95:b7:f6:bb:ee:96:eb:
                    15:e1:23:63:47:e1:b8:49:32:ed:77:ab:6f:0b:98:
                    1c:84:96:a2:91:30:97:80:6a:95:24:71:3c:d4:6e:
                    3c:d9:49:88:c9:24:c3:53:21:2f:0b:99:3c:58:34:
                    f5:5c:83:18:d9:31:1c:c6:92:9b:cc:56:76:d2:6a:
                    67:f7:27:3e:5b:82:54:6d:62:5d:7a:0c:4c:06:d2:
                    dc:a4:30:a2:bc:a7:85:99:d4:54:90:22:16:af:cd:
                    b1:a8:95:17:d9:74:02:bc:10:59:b4:c7:59:b1:b7:
                    8f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A6:CC:7D:B1:F9:C8:0A:56:CC:86:C1:B2:03:E3:B5:25:70:24:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0db277f-4bbd-393d-8956-fe38b25d5599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:8100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a9:c6:d3:e8:fa:1b:95:fe:bd:03:d3:30:6c:db:55:b4:27:
         6e:0a:3b:bc:ea:3a:6e:b9:c8:95:2f:35:fd:41:86:b1:08:d0:
         a1:7c:6b:9b:0b:5b:93:ce:1f:47:05:1d:64:15:69:b6:78:9d:
         ce:bf:16:95:68:32:49:20:e7:73:f6:af:22:59:11:82:2f:b8:
         c5:b7:62:26:a4:09:df:61:6a:fe:11:5a:36:9c:f2:ad:68:9a:
         12:cf:1c:43:fa:f9:47:a1:ab:10:24:cf:24:a1:3b:e0:0c:de:
         63:e7:df:7b:0e:04:16:97:bc:41:fd:69:e6:e4:e1:80:ac:dc:
         ec:01:26:e7:2f:8d:65:89:94:bf:e2:a4:2f:81:35:a8:37:32:
         ac:cd:42:73:89:22:25:02:38:85:2e:d9:16:87:2d:32:b0:c1:
         df:6b:da:b2:1e:a0:27:09:e5:ac:b6:2c:dd:74:fe:16:0f:86:
         02:d8:3b:9d:f6:93:5a:6c:73:12:fb:7c:4f:46:1b:57:07:10:
         bf:f3:dc:51:6b:63:9f:88:bb:e2:01:09:b8:05:a5:4a:fe:ce:
         15:df:1a:bb:3b:14:4f:18:18:e9:95:b1:4f:57:d5:e5:65:49:
         0d:d9:ad:ca:54:b1:49:d8:f5:7e:44:e7:cc:30:f9:f5:35:98:
         3f:c5:30:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:11:18 2026 by rpki-client