Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b8533ad-3b1c-31f9-ac0e-e66616688b37.roa
File:                     2b8533ad-3b1c-31f9-ac0e-e66616688b37.roa (raw, json)
Hash identifier:          XRQ9bm68jsDR9tXimEof8ADGkcfltXov+ltJ8utomJY=
Subject key identifier:   B7:A7:14:03:BD:B8:54:BB:6F:9E:A5:2D:FF:BE:64:28:28:A4:7C:43
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEBFAFB14B99EF4C1E386AC80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b8533ad-3b1c-31f9-ac0e-e66616688b37.roa
Signing time:             Wed 20 Aug 2025 18:21:25 +0000
ROA not before:           Wed 20 Aug 2025 18:21:25 +0000
ROA not after:            Tue 18 Nov 2025 19:21:25 +0000
asID:                     31898
IP address blocks:        2603:c000:1600::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:fa:fb:14:b9:9e:f4:c1:e3:86:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 20 18:21:25 2025 GMT
            Not After : Nov 18 19:21:25 2025 GMT
        Subject: CN=2e47bf9a-e8aa-47e3-aee7-7e26c474ae39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:15:2e:03:a5:b5:03:1f:da:56:5c:0f:c7:9a:
                    23:f5:27:8e:cc:83:b7:36:0e:63:79:f2:31:b6:66:
                    db:ca:b2:bf:45:19:75:2d:95:41:58:90:6c:b5:d4:
                    e4:9b:a5:bb:99:f7:24:39:ae:91:42:cb:fb:62:a4:
                    5f:32:9f:41:52:f7:75:d6:bc:c2:2c:25:66:0f:7f:
                    77:6f:2a:54:f4:3e:2c:fd:4a:b6:9a:7d:69:db:cd:
                    ed:a4:57:48:95:dc:98:d5:e7:0a:00:37:68:ea:5b:
                    60:7d:46:2a:be:04:ea:57:72:1e:a6:5e:d7:9a:2d:
                    6d:f0:82:42:8f:50:f2:c8:ad:8b:16:27:a2:98:01:
                    c9:4f:2f:85:24:3b:64:38:1c:e2:d9:f1:45:52:e4:
                    d8:9b:1e:41:72:08:52:f5:fb:70:67:02:58:97:51:
                    ab:ea:49:5d:ce:a0:9e:4f:9c:d1:d6:96:56:5b:38:
                    0e:47:eb:9c:2b:ae:f7:4a:1f:ff:55:87:b0:4c:13:
                    4f:25:4f:fa:27:bf:cb:71:8a:43:56:41:f8:18:af:
                    4b:86:dd:87:9d:0f:4c:79:7b:60:16:25:ed:db:d3:
                    a1:a8:db:04:2b:f6:76:59:c7:a1:58:29:aa:f5:7c:
                    cd:0e:c4:b2:b6:f4:f1:1a:f1:19:51:19:7c:c9:fe:
                    45:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A7:14:03:BD:B8:54:BB:6F:9E:A5:2D:FF:BE:64:28:28:A4:7C:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b8533ad-3b1c-31f9-ac0e-e66616688b37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:1600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:57:91:ec:e4:93:67:3e:60:cb:a1:93:03:77:5d:80:c8:62:
         7d:4e:3c:42:f7:a4:c3:67:a7:54:3a:85:51:6a:42:50:d4:34:
         bc:79:53:ed:04:97:4e:ce:f4:82:87:6b:c9:a7:99:20:ad:fe:
         11:7a:9e:15:d0:85:76:63:55:f1:3a:18:63:ae:4f:ff:83:14:
         b7:8f:3f:c8:47:58:63:da:1d:ee:8e:9d:0d:84:a3:7a:59:5b:
         9c:5f:ee:e7:01:f0:32:2e:78:cb:eb:2b:de:82:11:bd:8f:ee:
         f7:51:89:bb:3f:79:c2:70:4e:44:11:95:31:fb:0f:09:c6:0e:
         0f:29:fb:23:02:c5:8d:c9:2f:71:c9:88:12:2f:19:5b:35:ab:
         ea:89:97:a0:76:b3:4f:da:6f:66:79:aa:8a:1b:5b:d6:d1:d5:
         23:6f:4d:00:e1:d8:18:bf:93:ba:b0:2b:0b:1f:3b:b3:29:2a:
         f2:b8:e7:b9:1b:8f:f3:dd:18:3a:cf:ae:71:41:63:fb:b8:62:
         3c:11:04:30:34:4c:e1:88:60:27:34:52:52:1e:b0:d0:36:63:
         dd:50:2a:dc:77:ff:38:4d:69:72:15:8f:b1:82:f8:37:8c:f5:
         1d:96:73:8d:18:bd:6a:92:23:ef:61:d6:74:7b:c4:35:84:79:
         42:79:72:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:48 2025 by rpki-client