Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/063a821d-e19c-36ca-8d8f-9368a8e4c60c.roa
File:                     063a821d-e19c-36ca-8d8f-9368a8e4c60c.roa (raw, json)
Hash identifier:          AlXZMt2YjkF13YRgG7YI2/sxYjAVsPC6Jyn+PL+tcxw=
Subject key identifier:   61:D2:C2:DC:58:53:8C:16:29:85:2A:A7:27:BD:4E:46:FB:BE:51:34
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DC565CB3B506A22087BB24000
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/063a821d-e19c-36ca-8d8f-9368a8e4c60c.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     31898
IP address blocks:        2603:c000:2b00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:cb:3b:50:6a:22:08:7b:b2:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=89e53e70-0955-4d8c-b303-9cee283e5494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:06:02:d4:ad:8f:33:59:fa:46:69:57:31:
                    98:b5:6c:ed:1f:67:28:4c:1f:14:d3:fb:83:36:80:
                    3b:1d:f9:d0:03:3d:7d:fd:a0:37:0c:28:f5:5e:db:
                    43:13:ad:b5:28:b4:2d:df:59:63:bb:8d:b1:79:e2:
                    a4:75:e5:86:83:68:d9:44:33:d9:69:f3:a4:78:f9:
                    0a:5f:67:61:e5:e0:2c:bb:49:a8:49:06:ac:15:ac:
                    0a:cd:17:8d:56:b7:03:c7:8f:07:15:59:56:e1:ea:
                    98:26:37:d1:96:0d:ba:2c:81:e6:d8:b5:6e:23:00:
                    97:5d:b8:ad:51:4e:d6:f3:b7:be:b3:d7:a6:f5:d8:
                    fd:48:89:a2:3e:2c:c4:0b:e4:47:c7:18:b9:be:3e:
                    66:c8:83:67:db:39:9b:91:f6:95:8f:f1:b8:d9:c5:
                    1a:15:db:b8:49:c6:18:bb:36:a5:df:0e:3e:b8:3a:
                    c2:9b:10:ca:1a:45:ca:40:ec:97:41:e0:e4:6d:4c:
                    bf:e9:0c:61:7d:60:ed:34:85:ac:97:b0:50:c0:e9:
                    76:89:d1:b1:db:2b:48:07:3e:51:1b:54:43:ae:53:
                    fc:7b:19:45:69:8b:dd:f2:ba:41:1d:39:4e:46:ef:
                    54:9e:3a:f5:3a:ed:49:af:9a:40:57:26:ee:5f:c7:
                    27:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D2:C2:DC:58:53:8C:16:29:85:2A:A7:27:BD:4E:46:FB:BE:51:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/063a821d-e19c-36ca-8d8f-9368a8e4c60c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:2b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:02:6a:20:ff:7e:9c:a2:5f:07:d7:74:68:a5:13:3c:a0:3e:
         ab:ee:9c:22:62:3e:ee:13:7c:4b:c0:e4:7d:e8:a9:7e:79:79:
         3d:f7:3a:42:b9:38:8f:5f:f6:fb:b5:a5:78:92:8f:40:f3:da:
         aa:ab:f0:7d:aa:be:f7:6d:67:08:7d:73:09:29:8e:29:ee:7f:
         f5:f7:48:d3:87:06:99:60:69:b0:a7:75:8d:d3:67:2c:cf:2a:
         39:5f:63:6f:13:e4:6a:6d:c6:65:27:2f:b0:9d:84:ee:f0:03:
         fe:94:f4:be:e6:88:65:a4:45:eb:c5:dd:47:a5:7a:06:48:b9:
         c1:3b:f6:60:70:cd:eb:67:0c:d3:2d:14:93:4e:d5:33:7d:c3:
         55:78:b5:02:7f:fb:df:a3:0b:2c:3a:e8:be:e6:ee:a2:da:7d:
         09:e9:00:42:35:0c:2c:a7:41:64:80:5f:76:9b:2c:58:a9:9b:
         19:e0:ec:a3:8b:84:2f:60:8d:8f:de:be:3c:39:a1:85:ab:3f:
         09:97:87:fa:42:a4:bd:86:dd:4f:0f:b3:8e:84:83:8b:61:15:
         ab:27:4d:a9:25:f4:6b:02:a3:24:de:91:6c:18:b6:19:ba:ce:
         4f:eb:a0:34:d1:e2:6e:eb:ca:54:bf:7a:74:bc:a9:db:e5:4c:
         e7:5b:1b:7e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3FZcs7UGoiCHuyQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
ODllNTNlNzAtMDk1NS00ZDhjLWIzMDMtOWNlZTI4M2U1NDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNoGAtStjzNZ+kZpVzGYtWztH2coTB8U0/uD
NoA7HfnQAz19/aA3DCj1XttDE621KLQt31lju42xeeKkdeWGg2jZRDPZafOkePkK
X2dh5eAsu0moSQasFawKzReNVrcDx48HFVlW4eqYJjfRlg26LIHm2LVuIwCXXbit
UU7W87e+s9em9dj9SImiPizEC+RHxxi5vj5myINn2zmbkfaVj/G42cUaFdu4ScYY
uzal3w4+uDrCmxDKGkXKQOyXQeDkbUy/6QxhfWDtNIWsl7BQwOl2idGx2ytIBz5R
G1RDrlP8exlFaYvd8rpBHTlORu9Unjr1Ou1Jr5pAVybuX8cnpQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGHSwtxYU4wWKYUqpye9Tkb7vlE0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDYzYTgyMWQtZTE5Yy0z
NmNhLThkOGYtOTM2OGE4ZTRjNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAACsw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAjwJqIP9+nKJfB9d0aKUTPKA+q+6cImI+7hN8S8Dkfeipfnl5Pfc6
Qrk4j1/2+7WleJKPQPPaqqvwfaq+921nCH1zCSmOKe5/9fdI04cGmWBpsKd1jdNn
LM8qOV9jbxPkam3GZScvsJ2E7vAD/pT0vuaIZaRF68XdR6V6Bki5wTv2YHDN62cM
0y0Uk07VM33DVXi1An/736MLLDrovubuotp9CekAQjUMLKdBZIBfdpssWKmbGeDs
o4uEL2CNj96+PDmhhas/CZeH+kKkvYbdTw+zjoSDi2EVqydNqSX0awKjJN6RbBi2
GbrOT+ugNNHibuvKVL96dLyp2+VM51sbfg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:52:43 2026 by rpki-client