Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30cf795f-73c3-36cc-989c-7a29b704d8a0.roa
File:                     30cf795f-73c3-36cc-989c-7a29b704d8a0.roa (raw, json)
Hash identifier:          jhOspWLMxzETbMcXilvmdZm53f180exJoq6yng9jEzg=
Subject key identifier:   DF:41:17:E5:A8:1C:5D:4D:E0:B5:7F:05:35:EF:27:F1:0F:B5:20:A5
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D9A20308E4C276311D6D1C980
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30cf795f-73c3-36cc-989c-7a29b704d8a0.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     31898
IP address blocks:        2603:c002:b800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:30:8e:4c:27:63:11:d6:d1:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=e540a2d4-de23-4164-b1dd-ca0b1d72f89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:3c:79:1e:ae:f6:fd:6e:68:de:f2:37:87:
                    b2:a3:12:db:89:c0:ae:d7:2c:d7:e8:5e:0f:d4:7b:
                    6a:79:dd:fb:31:15:57:d4:5d:84:48:05:a7:52:38:
                    f2:b9:15:83:9d:55:35:74:22:9e:b8:26:94:2c:a6:
                    bd:82:4e:84:1b:56:9f:84:35:1c:52:0f:8d:6e:a5:
                    3a:09:25:02:93:2e:f6:00:86:78:06:ae:7e:9f:2b:
                    07:71:a4:fe:4e:55:c8:1f:77:fd:bb:fc:2a:0c:6b:
                    58:ab:d2:c0:29:59:16:fb:d2:e5:c2:85:d0:24:5b:
                    eb:d8:5a:5e:b4:3e:d2:0d:a3:df:5b:85:b7:0a:5f:
                    a7:cf:23:ed:c7:52:8b:7a:ff:bb:3a:90:6c:60:d5:
                    e8:c2:ec:93:e5:18:0b:27:7d:61:e0:3c:62:8a:3f:
                    23:d0:7c:33:40:f5:f7:7c:7b:76:8c:49:b8:61:a9:
                    0e:b2:8c:e2:26:c4:b0:54:df:d1:fc:f7:ec:02:a2:
                    b2:a2:a7:fb:9a:33:dd:ab:ba:00:22:26:43:b0:66:
                    2c:b4:cc:89:43:1b:6f:4d:06:3f:f9:13:90:8a:ec:
                    50:fa:cd:a1:fb:e1:6d:79:01:43:28:c4:76:37:86:
                    79:3d:cc:76:a3:46:e5:28:fd:e4:45:69:60:b1:0a:
                    e9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:41:17:E5:A8:1C:5D:4D:E0:B5:7F:05:35:EF:27:F1:0F:B5:20:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30cf795f-73c3-36cc-989c-7a29b704d8a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:b800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:8a:32:56:91:ee:88:0c:ed:76:a1:fe:d2:90:9a:d1:c2:4e:
         d9:0c:4d:29:3d:d5:cf:75:b8:19:eb:17:76:d2:05:87:b0:15:
         78:e0:73:58:6c:e7:1b:2a:14:37:52:bb:3f:63:c1:bb:b6:03:
         b0:9f:de:ca:17:93:5a:d9:97:4a:00:ad:3e:cc:13:a7:3c:19:
         64:3a:11:57:91:e5:36:4d:76:1a:6e:ee:b3:a5:e3:33:90:2a:
         1b:57:57:58:a8:09:69:45:4e:df:6e:29:b7:09:e0:a9:c9:01:
         c9:ba:b7:28:f8:01:e6:e6:39:b6:37:64:a2:07:63:6f:71:69:
         00:97:a3:02:cb:02:02:c2:46:86:44:e3:a5:a8:8d:e4:a0:23:
         38:3e:c9:29:91:a3:38:4f:82:b8:c3:8e:15:f7:5d:6d:54:07:
         91:da:1c:91:85:06:34:be:07:31:3b:0e:b1:49:72:a2:e3:54:
         2e:6f:22:f7:ed:67:53:2b:18:40:64:22:95:47:f6:28:55:77:
         4e:7a:91:e4:1f:90:6e:9f:16:cf:77:15:8c:ed:f5:1b:ed:52:
         84:33:45:b2:ff:24:45:12:cb:91:f2:68:e1:d5:54:1e:11:37:
         97:3c:b6:09:b0:36:ca:82:8f:f0:73:12:d4:af:0e:fe:c5:3b:
         d4:a8:e0:24
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2aIDCOTCdjEdbRyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
ZTU0MGEyZDQtZGUyMy00MTY0LWIxZGQtY2EwYjFkNzJmODljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM08eR6u9v1uaN7yN4eyoxLbicCu1yzX6F4P
1Htqed37MRVX1F2ESAWnUjjyuRWDnVU1dCKeuCaULKa9gk6EG1afhDUcUg+NbqU6
CSUCky72AIZ4Bq5+nysHcaT+TlXIH3f9u/wqDGtYq9LAKVkW+9LlwoXQJFvr2Fpe
tD7SDaPfW4W3Cl+nzyPtx1KLev+7OpBsYNXowuyT5RgLJ31h4Dxiij8j0HwzQPX3
fHt2jEm4YakOsoziJsSwVN/R/PfsAqKyoqf7mjPdq7oAIiZDsGYstMyJQxtvTQY/
+ROQiuxQ+s2h++FteQFDKMR2N4Z5Pcx2o0blKP3kRWlgsQrppQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFN9BF+WoHF1N4LV/BTXvJ/EPtSClMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzBjZjc5NWYtNzNjMy0z
NmNjLTk4OWMtN2EyOWI3MDRkOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAArgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAd4oyVpHuiAztdqH+0pCa0cJO2QxNKT3Vz3W4GesXdtIFh7AVeOBz
WGznGyoUN1K7P2PBu7YDsJ/eyheTWtmXSgCtPswTpzwZZDoRV5HlNk12Gm7us6Xj
M5AqG1dXWKgJaUVO324ptwngqckBybq3KPgB5uY5tjdkogdjb3FpAJejAssCAsJG
hkTjpaiN5KAjOD7JKZGjOE+CuMOOFfddbVQHkdockYUGNL4HMTsOsUlyouNULm8i
9+1nUysYQGQilUf2KFV3TnqR5B+Qbp8Wz3cVjO31G+1ShDNFsv8kRRLLkfJo4dVU
HhE3lzy2CbA2yoKP8HMS1K8O/sU71KjgJA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:35:43 2026 by rpki-client