Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22d50f80-3719-396e-aa10-afa63b16422e.roa
File:                     22d50f80-3719-396e-aa10-afa63b16422e.roa (raw, json)
Hash identifier:          oMWLuXfVxLa/zeLn9Yin13UCasYpGDxFUHGkMVGcymo=
Subject key identifier:   65:97:AD:D5:11:D7:41:3C:5C:11:11:5D:C4:FF:9D:9E:50:D1:C9:29
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F497343084B5524C2082B7F60
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22d50f80-3719-396e-aa10-afa63b16422e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c055:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:43:08:4b:55:24:c2:08:2b:7f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=504abc89-5958-411b-af38-645b1489baea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:78:11:ff:97:ec:cf:ae:10:f1:19:a9:50:36:
                    77:5b:33:b2:b2:5e:d1:01:e9:7c:9a:56:3e:9d:2e:
                    a5:c6:d1:ed:31:f7:7a:af:40:1a:c5:27:6f:45:e1:
                    62:b1:4b:38:8a:4b:88:f6:e2:e2:3b:c6:86:2d:d5:
                    dd:2d:81:92:07:f7:43:7b:22:d5:c9:c5:51:83:53:
                    fd:2a:28:3b:5d:79:25:51:a4:fc:ec:1a:e7:8b:aa:
                    f1:b0:5c:86:9a:72:2a:04:78:50:1b:0e:c0:78:30:
                    9d:a0:01:02:1a:bf:75:a2:0e:9a:e4:3f:06:cc:91:
                    42:fc:9e:69:3e:e4:25:07:88:4b:1b:49:a0:68:f8:
                    53:bc:12:00:60:6a:1e:1f:48:b9:62:00:61:a5:e6:
                    fc:62:a2:d7:45:0f:db:e3:37:53:f0:a9:f6:87:c2:
                    07:57:54:3c:e2:22:e5:29:d3:d0:10:b6:98:42:e8:
                    8b:f5:a3:b8:4c:92:ff:d0:9d:73:69:d4:11:34:af:
                    ac:46:ba:fb:60:8d:f8:bc:c9:6d:06:45:24:c0:c7:
                    7a:85:28:a9:8d:a8:7f:93:a2:24:54:3e:d6:68:a5:
                    b2:95:b0:f7:86:a8:2b:05:4e:23:56:de:6d:d2:6d:
                    ba:c0:cf:8c:78:d6:48:c8:a1:c4:7d:99:9c:92:6c:
                    40:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:97:AD:D5:11:D7:41:3C:5C:11:11:5D:C4:FF:9D:9E:50:D1:C9:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22d50f80-3719-396e-aa10-afa63b16422e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c055:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:71:1f:26:d7:bc:15:ce:62:88:51:ab:5f:95:0a:26:e8:d7:
         31:bb:8f:b4:7e:bf:b6:5c:fe:19:f8:e9:f0:d0:39:3f:92:50:
         ea:60:f0:6c:3b:fa:a9:8d:eb:65:c1:3f:e3:11:6e:78:7d:96:
         a0:d9:58:e0:87:93:db:c0:9b:08:95:76:fa:1f:75:e8:56:cf:
         d5:0a:ac:9e:0c:f2:73:79:41:ed:57:b0:45:60:aa:7c:75:16:
         ad:86:6b:f5:7d:60:98:a7:84:8d:7d:a2:fa:ad:9b:51:07:78:
         77:f0:dd:1e:c4:3e:2c:b0:23:cd:d1:bf:40:40:41:bc:d3:49:
         8f:0f:df:99:03:df:d1:37:a6:ee:36:ba:bf:8d:1c:4a:99:ba:
         4f:56:55:a3:b9:4c:5e:ab:6a:cb:70:23:71:da:02:22:aa:62:
         f8:9c:ce:49:33:59:c9:d7:5f:95:5c:78:50:32:9d:b3:9c:9b:
         f2:d4:6d:b3:fe:4e:3d:84:0d:96:f3:41:f7:3f:cc:58:60:8d:
         c8:c2:e8:e0:ab:e9:e0:b7:db:89:24:c5:be:09:14:c0:8e:7c:
         0a:9e:1f:6c:cc:18:92:67:61:0c:12:78:27:3c:4b:e3:c4:8a:
         74:9f:9d:f9:b4:d5:8c:58:05:87:dc:9d:89:8b:89:87:10:1e:
         3e:e5:7d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:35:09 2026 by rpki-client