Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e51b4973-4223-362d-bdb9-567b9a6a1d0e.roa
File:                     e51b4973-4223-362d-bdb9-567b9a6a1d0e.roa (raw, json)
Hash identifier:          KNyHNceVGtU+l95/Z/+l/1bz7PFSUIMpCAzdjs9F3gI=
Subject key identifier:   34:97:BB:2C:37:8F:A9:12:9B:9F:1B:86:A1:A1:2B:96:88:F7:CE:29
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8695806FB4BB5B8BF4BF79C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e51b4973-4223-362d-bdb9-567b9a6a1d0e.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        2603:c021:8000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:80:6f:b4:bb:5b:8b:f4:bf:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=f694161b-66cf-4497-91ac-4447eb893f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1a:24:04:91:46:ca:ac:70:d8:ae:72:f4:6c:
                    c9:50:b9:e4:16:de:03:a0:82:44:9b:0b:12:ef:f6:
                    ff:64:a5:7f:04:d2:e0:72:c2:80:40:1d:2c:3b:21:
                    ce:b0:cb:ee:5f:ea:c2:76:6d:60:0c:06:64:85:f6:
                    e7:3c:36:23:e4:30:51:fa:8a:f0:70:70:22:75:e9:
                    45:c5:c4:74:6c:c8:27:12:42:9d:6d:b0:67:84:3c:
                    8e:42:4b:6e:ca:38:2c:04:fb:eb:f9:27:c2:8f:87:
                    64:d8:f0:a4:f3:a4:c3:2c:7a:5c:88:68:01:58:0c:
                    8f:7d:8c:a6:c2:26:5b:e5:a3:7d:02:33:ae:0b:c8:
                    5f:96:a4:a9:68:38:cd:26:7c:f2:e0:25:74:ed:ab:
                    26:e0:b4:ba:aa:aa:2e:59:f4:d0:c1:dd:cb:f4:66:
                    85:54:a9:d4:5b:56:7e:51:1e:16:1d:44:54:a1:58:
                    f6:08:69:71:ca:29:25:00:95:f2:a8:f1:36:61:25:
                    df:26:94:9a:7f:e4:24:55:2e:b8:00:d7:56:6a:2c:
                    9f:6d:6d:8e:be:1c:57:a2:be:ae:8c:43:af:e8:b2:
                    50:5f:d4:b4:18:65:fc:4c:49:13:87:97:a9:26:57:
                    c9:81:3a:0f:bf:18:a8:bd:16:c0:1c:f5:de:75:03:
                    98:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:97:BB:2C:37:8F:A9:12:9B:9F:1B:86:A1:A1:2B:96:88:F7:CE:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e51b4973-4223-362d-bdb9-567b9a6a1d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c021:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:61:44:76:ae:37:98:ad:46:b0:f1:d6:15:85:3a:07:b7:33:
         41:a7:96:8f:69:30:84:77:b9:ce:79:af:2e:cc:45:fb:2e:d8:
         5f:e6:31:48:ab:57:8c:4e:9d:8a:40:5d:f8:fe:8a:b4:87:53:
         b8:95:8b:d7:eb:fc:54:d2:f4:f4:5c:8b:f4:36:6a:18:75:c3:
         00:68:48:a5:1c:73:2b:be:0f:fa:0b:e5:7d:ce:dc:ba:ed:0f:
         6c:1d:1f:08:95:35:c9:ba:db:27:b0:df:12:19:67:80:b8:38:
         cc:3b:58:0e:d1:09:73:9c:06:7a:bc:f6:f7:57:56:ea:0f:8d:
         cc:ce:18:43:88:bb:31:8b:29:e9:ce:56:27:55:fc:e1:ea:47:
         1c:1d:49:c0:f9:33:a7:3e:ac:56:8d:f7:20:6e:ff:3e:ac:f0:
         98:7e:65:5e:19:fd:23:78:b7:4a:57:9d:d0:77:25:24:16:f7:
         a8:e5:7e:c5:dc:d3:d0:b1:27:8b:57:8e:b2:c0:8a:89:22:f9:
         9a:df:ef:18:14:0b:27:14:5d:3e:27:53:f8:6f:68:54:a3:9a:
         8d:51:62:83:30:8f:2d:e9:eb:45:3f:5e:ea:cd:7c:de:b6:6b:
         59:9e:4f:ad:be:42:be:7a:b0:00:96:77:48:27:cb:1d:95:ec:
         e8:ff:27:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:44:01 2026 by rpki-client