Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d42c583-d55a-30a0-addb-3baf969049d8.roa
File:                     3d42c583-d55a-30a0-addb-3baf969049d8.roa (raw, json)
Hash identifier:          pOHNHaQjeja0HuN4QTovEc95IKZdPU0UrxiF71x5OZY=
Subject key identifier:   81:8D:94:72:DA:32:52:7F:68:0C:80:73:CA:B3:6C:A5:F4:F3:18:02
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEDFCF833F96FAEFC36E2B700
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d42c583-d55a-30a0-addb-3baf969049d8.roa
Signing time:             Thu 21 Aug 2025 11:37:03 +0000
ROA not before:           Thu 21 Aug 2025 11:37:03 +0000
ROA not after:            Wed 19 Nov 2025 12:37:03 +0000
asID:                     31898
IP address blocks:        2603:c018:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ed:fc:f8:33:f9:6f:ae:fc:36:e2:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 21 11:37:03 2025 GMT
            Not After : Nov 19 12:37:03 2025 GMT
        Subject: CN=ba6c2d18-ada6-4a76-b558-9d2bd716619d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:64:ef:b7:c3:41:c4:02:d7:72:e9:92:cd:b8:
                    c9:c8:13:99:be:f9:cf:4a:40:ad:02:bf:30:ca:e2:
                    da:bd:35:fc:3c:ba:6e:bf:88:f7:45:cc:3b:4c:c2:
                    1b:5e:46:29:b1:a6:8f:ee:87:7c:8a:9f:91:df:40:
                    e5:e1:a0:98:b5:7a:61:2d:14:e9:37:c7:60:3b:13:
                    e3:25:ae:e8:7e:0c:66:37:f5:b9:02:f3:86:c9:64:
                    e3:93:da:98:5b:a7:1a:21:01:25:d3:c1:ba:6b:ae:
                    8f:53:f5:98:55:c6:ef:59:fa:3f:cb:59:a4:ef:ad:
                    e2:d9:ab:10:a8:05:6e:e5:30:17:6a:21:56:87:1d:
                    4d:5f:cb:b3:9c:b4:47:78:9d:78:bc:f6:c4:bc:74:
                    fc:3a:6e:a9:0a:06:47:14:db:f5:c7:83:6a:43:4b:
                    20:94:4e:a8:13:89:bb:ec:a1:b7:47:53:dd:30:3e:
                    e9:46:7e:1e:23:a6:b8:b0:6c:e3:91:01:b0:78:f4:
                    3d:75:64:37:86:09:0d:ef:a7:d5:e1:34:c1:cd:25:
                    41:d6:d8:5e:86:7e:1c:76:07:94:c7:f8:b8:6f:cd:
                    e4:ad:81:7b:d8:5b:9b:71:78:36:c3:38:9e:de:99:
                    87:2a:4e:64:9c:02:1d:94:9c:76:0a:46:5d:52:d7:
                    ed:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8D:94:72:DA:32:52:7F:68:0C:80:73:CA:B3:6C:A5:F4:F3:18:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d42c583-d55a-30a0-addb-3baf969049d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c018:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:30:b5:65:1a:35:ff:71:ac:18:ea:71:84:6b:53:f4:80:7d:
         6b:3e:14:d7:99:17:bf:2e:1d:36:3d:98:de:53:c2:16:84:6c:
         6b:a7:19:25:ce:f4:54:77:41:aa:71:6f:4b:b3:9c:14:a3:4c:
         80:cf:c4:eb:e9:60:64:e8:2c:24:be:b4:fc:1d:d5:69:06:9c:
         b4:a3:41:90:44:97:3d:f3:ee:79:f5:72:cc:41:71:a1:ee:df:
         cc:73:2e:05:41:33:72:60:fd:10:4a:eb:9a:6e:62:97:01:2a:
         19:dc:5c:ed:62:f7:21:ac:b1:f4:6c:7c:f9:b1:1c:25:b0:e7:
         36:46:75:04:db:0d:7a:61:03:05:2c:fa:e7:45:8b:3e:68:23:
         6a:c7:0d:d4:a6:83:82:bf:ff:88:aa:81:27:48:12:7e:f6:9d:
         0f:ce:41:27:9e:c4:f3:ea:7e:09:e3:2d:e6:dd:ae:48:1b:d6:
         10:4b:5f:a5:85:1b:18:87:fd:d1:45:df:5a:8c:db:4d:c3:04:
         1c:17:96:c5:76:84:7f:fe:b0:76:71:70:69:db:6b:0a:30:a6:
         c1:a2:f5:b7:2f:f2:4e:cc:43:53:31:5e:11:95:ae:55:8e:32:
         f2:34:23:dc:ad:44:7b:cf:b6:5b:69:2b:b4:30:f6:e4:1b:35:
         18:d1:c8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:18 2025 by rpki-client