Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/10df7d11-cb64-328d-9cdd-f924de0334a3.roa
File:                     10df7d11-cb64-328d-9cdd-f924de0334a3.roa (raw, json)
Hash identifier:          CV7VFoqalxG4bdJMuS3WXXaqDFf39kxvugGniMha7sk=
Subject key identifier:   7B:3A:35:CA:65:89:72:90:13:D8:12:EA:4B:ED:62:11:5C:04:F5:43
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8D8FDD523C44BFAF67D12880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/10df7d11-cb64-328d-9cdd-f924de0334a3.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     31898
IP address blocks:        2603:c000:3900::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:dd:52:3c:44:bf:af:67:d1:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=723ec80f-25d1-4a9c-a4d3-68e41b00f053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:fd:da:f1:67:7b:a4:6b:4c:2a:c0:17:f4:
                    f1:52:77:a2:2a:fa:9a:ce:ee:44:81:f3:3f:4f:26:
                    74:2e:40:80:2a:be:13:fb:ca:11:1f:6a:34:c1:5f:
                    04:71:e2:ef:45:42:29:39:5e:5c:d3:ce:a6:db:aa:
                    90:56:0e:ec:de:e6:78:7d:9e:cb:b7:7e:9c:98:3c:
                    86:2d:ce:6d:74:89:a6:fe:77:21:37:c2:fd:3b:e6:
                    2d:6a:94:09:30:fa:17:94:8d:cc:c4:38:e9:bd:29:
                    82:22:d8:2a:b0:79:00:4d:bc:39:9f:da:89:d1:80:
                    28:25:2b:0e:2f:34:38:51:e8:d6:bb:f7:13:51:46:
                    60:b0:d3:6b:48:77:27:88:d9:ff:f9:d7:b7:2f:62:
                    27:c9:98:14:72:94:82:28:df:32:03:ec:fa:f4:ae:
                    7c:20:4c:7f:95:ac:64:72:49:0a:20:44:be:a2:d2:
                    80:fe:69:cd:1f:7d:64:e1:b3:07:a9:8a:a8:23:68:
                    b8:dd:df:cd:d9:d9:7d:bb:44:fa:2b:54:d9:a9:96:
                    e0:8f:f7:0d:66:79:97:fe:1c:3c:2d:66:72:e4:80:
                    e9:2c:81:0a:32:58:c2:1d:ea:b6:7d:fc:24:9e:45:
                    c0:07:3b:12:e8:c8:2c:89:d6:38:d2:2f:75:25:05:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3A:35:CA:65:89:72:90:13:D8:12:EA:4B:ED:62:11:5C:04:F5:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/10df7d11-cb64-328d-9cdd-f924de0334a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:3900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:88:ad:53:c2:76:f3:f2:80:14:c2:43:74:5d:5b:d6:3e:3a:
         08:51:b0:3e:0e:68:32:6a:6b:83:cb:b4:3b:40:38:07:ab:6b:
         07:b1:fa:23:57:fd:ed:7a:2f:bc:07:fd:7e:52:df:73:d3:62:
         17:56:ed:de:21:84:2e:da:31:43:18:b5:eb:75:a6:35:e5:36:
         ec:fe:d8:1d:84:09:95:3d:37:89:c7:c5:6a:07:6a:2c:35:95:
         19:05:44:d8:3e:27:92:64:dd:ef:94:2e:45:c5:07:fd:e1:c1:
         37:2d:f1:9a:1e:6e:d1:c4:27:c2:b0:f5:39:d6:91:ab:2b:a6:
         71:74:a7:0d:a7:5b:a8:5b:53:41:7f:08:ba:6d:fc:53:f9:b8:
         1f:cd:6d:cc:2d:1f:99:67:d2:74:22:e8:22:95:8a:79:8e:a7:
         82:fa:73:15:3a:44:56:09:6b:38:45:41:da:42:f2:cc:c7:1a:
         ba:51:aa:a7:e1:85:fd:f8:cf:4a:96:be:80:fc:fe:b9:4f:2e:
         f2:8f:2b:cb:f8:5e:69:d9:e8:27:00:8c:d4:90:fd:29:9f:2d:
         1a:f1:0c:06:f8:aa:d2:3c:01:4f:0d:80:5a:29:f0:7b:7f:03:
         a3:c6:48:15:22:b9:99:ff:94:fa:8d:bf:3e:91:fb:cc:f8:ad:
         89:bc:34:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:28:03 2026 by rpki-client