Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5eafa3a-267c-384c-930f-7ff0e945b61e.roa
File:                     d5eafa3a-267c-384c-930f-7ff0e945b61e.roa (raw, json)
Hash identifier:          e0eb4r1a/EOKG4o6SmP/oMAiAk8bAinOQyUZ6ajb6Iw=
Subject key identifier:   8E:35:FE:6C:49:80:0D:BB:C1:76:07:8F:3E:6A:68:BC:E1:B4:03:80
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F20F7D568C2BBB1D15957FE80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5eafa3a-267c-384c-930f-7ff0e945b61e.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c000:3600::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:d5:68:c2:bb:b1:d1:59:57:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=557d2924-1d10-471a-85fe-61742e67e6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e8:9f:95:9d:e1:16:f4:88:3d:d4:c1:7c:6a:
                    31:7b:5c:ca:04:be:dd:fb:33:00:af:53:8b:4c:1c:
                    8a:e5:7e:e2:01:e3:f3:f5:dc:7c:8a:31:77:aa:f5:
                    91:6c:68:e4:b9:1c:6e:26:5b:9d:fb:58:9f:51:f2:
                    40:d0:e9:fc:eb:3e:8f:69:13:c2:4e:02:81:5d:39:
                    fa:73:22:29:cd:e8:bc:5a:49:5e:5a:ee:3f:83:87:
                    fb:f4:93:58:a5:dc:c7:cf:66:de:04:60:cf:63:8d:
                    f3:3a:38:88:7e:21:35:ee:fe:05:95:40:e5:c4:e4:
                    1b:d9:57:7a:da:da:b7:cd:f7:d6:2b:b9:42:13:9d:
                    80:76:7c:76:1d:08:91:f3:ff:c0:67:d5:84:c0:59:
                    25:49:04:fe:be:00:ca:d9:8e:e5:81:c4:91:b1:d5:
                    37:7a:6f:c6:98:c9:15:b6:05:dc:db:7b:55:47:64:
                    dc:f7:d9:10:13:00:3b:6b:ba:7c:70:dd:0f:80:89:
                    05:4a:2e:25:ea:be:2e:25:b7:17:91:81:9d:bd:15:
                    71:17:cb:15:7a:d0:e2:b1:70:81:b1:69:d9:ac:65:
                    09:09:12:05:0c:60:07:ec:2c:31:f6:d2:e8:87:14:
                    8b:25:fa:dd:5b:52:89:39:00:22:7a:65:59:0a:1a:
                    ef:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:35:FE:6C:49:80:0D:BB:C1:76:07:8F:3E:6A:68:BC:E1:B4:03:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5eafa3a-267c-384c-930f-7ff0e945b61e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:3600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:39:c6:8a:da:2b:44:59:31:87:96:d2:2b:cf:6f:9e:77:b5:
         4a:25:fe:87:ce:1c:69:ec:ba:1d:9f:c2:22:23:34:2f:4c:c2:
         66:55:68:4d:74:42:63:67:b0:00:a6:3a:2a:e6:09:de:03:f9:
         8f:30:d2:21:ef:70:c3:b4:f1:a9:91:f7:87:56:5e:90:db:ea:
         bf:57:c2:b1:cb:fe:48:01:bf:0d:b5:06:8b:65:18:14:65:37:
         2a:1b:43:21:cc:bf:f8:a6:93:66:81:f9:3f:53:6a:62:f5:25:
         27:b9:d1:4e:c5:d8:19:67:bf:d6:3b:3c:be:7b:05:1a:cf:b1:
         f8:35:0a:3c:ab:7e:d7:60:f5:3c:ce:65:43:6a:38:e6:5a:b9:
         69:e3:de:0b:17:ae:e9:d7:cb:a3:7c:8e:4e:31:b2:3a:b4:5c:
         70:ba:e6:ba:8d:aa:77:36:17:dd:cf:d4:2a:df:60:d7:c6:12:
         98:72:c6:e7:9e:34:72:6b:18:01:1c:9f:97:a2:2d:4d:ef:9b:
         53:d5:b7:d7:a6:53:53:23:b3:96:8f:2d:05:d8:37:41:d3:bd:
         27:4e:15:53:10:22:17:8b:9a:ad:3b:bf:7a:8e:02:1d:78:6c:
         ad:a4:87:2b:5e:4b:db:51:5a:a5:8d:27:5a:94:0f:2c:b0:70:
         dc:fe:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:58:02 2026 by rpki-client