Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d221d0f6-47ca-37bc-b9a8-0df55662ee37.roa
File:                     d221d0f6-47ca-37bc-b9a8-0df55662ee37.roa (raw, json)
Hash identifier:          +rdTqmM/aMqSg1FvzJ7e+Z1+9ocrdsu3c+uPrpqkg3U=
Subject key identifier:   4F:5C:30:B6:0B:48:61:98:08:3F:8F:02:42:21:72:9D:8C:9E:6B:3F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA5AA741510236D4D889F9400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d221d0f6-47ca-37bc-b9a8-0df55662ee37.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     31898
IP address blocks:        2603:c002:3200::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:74:15:10:23:6d:4d:88:9f:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=c942aa6f-977f-44de-9537-6bb937f16162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e4:86:fc:66:23:7d:01:98:b2:6c:24:7e:ea:
                    63:4e:52:47:46:7f:63:67:60:f2:84:c1:ea:bc:f3:
                    37:81:0a:5c:2d:7a:a4:7f:a3:7d:61:91:59:ae:76:
                    c8:2b:c6:2a:77:7c:44:81:9f:e4:3d:1c:41:8f:0d:
                    51:b2:e5:2d:06:7b:ed:09:4b:5c:53:3d:da:50:17:
                    89:78:ae:ec:23:b3:de:93:82:8e:d1:3f:e6:4f:9f:
                    e1:3c:c9:05:b9:aa:e6:88:69:2f:b6:df:9a:a8:da:
                    3c:91:99:fb:39:fc:5d:31:92:11:ae:62:e5:6b:27:
                    30:bc:f0:bf:d1:ff:fe:ce:8f:6e:3e:dd:fd:16:64:
                    31:8a:a3:f1:c1:31:74:07:f8:60:c4:b8:02:ef:d8:
                    58:81:71:94:9e:c2:9f:2f:46:d2:b5:28:91:64:9b:
                    7f:84:a8:0e:f0:be:3e:bd:05:a9:56:91:41:7c:e6:
                    e0:d3:c5:cd:8f:61:92:53:cf:7c:9e:51:d1:24:40:
                    81:96:4b:8d:9a:6b:f5:b0:96:94:8c:79:c4:33:11:
                    04:57:ba:17:70:fb:e5:69:32:7a:8f:16:41:a1:57:
                    1b:4a:04:8b:f2:79:8b:3d:e4:bd:b5:86:33:8b:fc:
                    cd:bd:6a:69:37:a7:02:c4:0e:7d:f8:5f:ca:13:14:
                    9c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5C:30:B6:0B:48:61:98:08:3F:8F:02:42:21:72:9D:8C:9E:6B:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d221d0f6-47ca-37bc-b9a8-0df55662ee37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ca:df:78:65:31:ab:0c:1b:4f:0a:ee:de:83:3f:2d:2f:84:
         9b:2c:f9:99:b7:b8:41:da:5f:ed:4e:85:d6:19:9c:66:1b:8b:
         8b:e3:90:7b:ec:5f:bd:80:cb:dc:d6:aa:de:76:85:99:95:07:
         ff:e0:f9:d3:ec:79:5d:74:4a:fc:b2:16:0f:fb:8b:c3:2f:5f:
         9c:30:6b:17:b8:8b:a5:57:88:0f:57:a4:bf:a9:11:1a:57:d7:
         72:b3:60:70:c6:c9:5b:b2:cc:47:49:a3:13:3c:6f:c6:c2:e6:
         12:1d:3c:c6:78:e8:ef:8d:cb:92:59:39:68:c6:da:c4:d3:01:
         51:5a:31:9e:c5:6b:ca:27:19:6a:23:7d:59:4c:7f:85:9c:f1:
         4b:85:ae:1a:de:ee:5d:b5:3d:c8:9c:8b:c9:ff:be:c0:b7:96:
         fa:4a:c1:2c:9c:17:8f:22:78:47:79:7d:c6:a2:13:46:31:82:
         4c:95:a7:3e:95:b6:9d:aa:06:c0:16:a2:e7:a0:0a:90:e1:8c:
         ca:4b:ed:d7:e8:3b:cc:a7:be:c6:10:8f:bf:b0:7f:50:5b:f2:
         c9:96:2c:79:98:a4:af:de:60:04:0d:e3:2b:fb:09:9c:65:86:
         2c:24:88:cb:47:cb:d0:0d:b2:92:24:9d:ab:31:d2:6d:0a:73:
         61:a5:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:31 2026 by rpki-client