Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7a34435-db97-3098-952b-db6b24cbf362.roa
File:                     e7a34435-db97-3098-952b-db6b24cbf362.roa (raw, json)
Hash identifier:          TRbHUl+/Vqw79f8xhVRm/DHPlywbghkKsn+jyPp5mic=
Subject key identifier:   20:B3:F8:E9:81:12:C6:59:5C:7C:0F:2F:5A:B9:06:85:CC:D7:A6:41
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E077B6CCA58E0E0DB55B6AD80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7a34435-db97-3098-952b-db6b24cbf362.roa
Signing time:             Mon 01 Jun 2026 17:07:51 +0000
ROA not before:           Mon 01 Jun 2026 17:07:51 +0000
ROA not after:            Sun 30 Aug 2026 17:07:51 +0000
asID:                     31898
IP address blocks:        2603:c001:7a00::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:7b:6c:ca:58:e0:e0:db:55:b6:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jun  1 17:07:51 2026 GMT
            Not After : Aug 30 17:07:51 2026 GMT
        Subject: CN=af0acbac-5d19-416e-8c99-911c713c3cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:e7:82:fe:1f:27:a0:95:3a:bb:4f:5c:e1:
                    39:77:c7:7b:d3:84:69:7b:fb:5d:82:f3:ca:71:e4:
                    4a:20:6b:f9:f1:d1:25:55:d2:b8:a4:07:4f:7a:a9:
                    4e:b8:a7:a5:6f:1d:83:c0:70:aa:95:98:00:ce:e0:
                    0b:65:ee:a0:11:50:05:df:23:92:4a:16:14:1f:54:
                    d2:9f:d6:85:a4:3f:a2:17:fd:35:a9:56:3c:b2:68:
                    29:d4:c1:56:13:41:f3:bf:b2:84:a5:f5:ff:06:19:
                    23:e2:1f:1e:2b:61:cc:8b:08:00:a8:8b:a6:40:51:
                    5d:6f:31:74:45:09:38:a6:bb:de:63:a0:59:86:d3:
                    6d:35:ba:50:b8:f2:5b:ef:18:11:bb:b4:2c:1e:2a:
                    a4:be:80:af:d6:41:18:f9:45:c4:d8:f8:d2:8e:c2:
                    80:30:03:79:a0:3d:ac:48:e8:a8:da:d0:87:be:94:
                    85:0f:4f:4e:e5:5e:0c:3b:8a:ba:2f:08:b0:65:97:
                    59:4a:13:10:bf:3f:14:8b:20:86:f2:53:80:46:57:
                    95:b9:e0:98:53:bd:58:8e:0b:10:ff:9e:5d:6b:18:
                    e4:40:d8:82:d1:c5:e1:44:b3:0a:78:a3:f2:d9:e4:
                    86:0d:9a:78:5c:f1:e8:92:c3:7c:0e:da:5e:50:b8:
                    bd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B3:F8:E9:81:12:C6:59:5C:7C:0F:2F:5A:B9:06:85:CC:D7:A6:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7a34435-db97-3098-952b-db6b24cbf362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:7a00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:71:0d:53:bb:70:6c:5b:10:da:27:86:71:4b:84:13:ce:92:
         46:96:0b:23:ae:50:6a:a0:54:e3:1d:c9:12:c8:b6:1e:69:a9:
         95:44:31:c3:ea:46:c8:d4:8b:ca:da:6e:52:e6:b5:94:b5:2d:
         4d:1d:16:c6:76:48:89:3b:b0:07:d0:32:e2:80:14:b4:90:05:
         84:0a:ca:2f:91:60:a5:64:2f:10:30:e2:a6:6f:dd:ef:dd:51:
         53:1d:8b:79:17:af:8e:3c:2e:d7:89:1e:3c:d2:7a:77:dd:f8:
         e2:52:56:e0:c9:6d:64:f0:73:cb:95:76:78:5b:df:28:3c:e0:
         e8:a9:de:7d:2f:aa:91:e3:4e:38:74:65:d6:97:bf:ee:dc:c6:
         23:cf:98:c2:6f:c7:04:4a:38:09:eb:ef:e0:cb:30:b8:b2:96:
         b6:1f:cd:ae:26:2b:04:4c:5d:00:3e:4d:2b:a5:bf:bb:4e:df:
         2b:87:7d:e2:b7:82:61:5f:bc:7b:9e:26:40:75:69:63:58:7f:
         3b:02:e6:0a:b0:b7:a4:1e:c8:63:c5:87:02:78:5a:cd:58:89:
         0b:f4:fb:b0:31:be:5d:9c:cd:59:5e:ad:fe:b9:f3:fa:e0:cd:
         3b:9f:10:5b:c2:cc:79:d3:d3:5e:52:35:9a:fd:7c:a8:36:b2:
         bb:63:ec:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:55:31 2026 by rpki-client