Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75e33847-0df6-3c19-8053-15f6322d39ee.roa
File:                     75e33847-0df6-3c19-8053-15f6322d39ee.roa (raw, json)
Hash identifier:          n10jELHcTfQ284nRislUVlqXjPgJV5nKsPunkfB5LSE=
Subject key identifier:   60:B9:46:33:48:3B:7F:0F:11:E8:E7:FB:9B:57:40:79:FD:C1:A2:74
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D9E4FFE3445603F6BD1A2A200
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75e33847-0df6-3c19-8053-15f6322d39ee.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        2603:c002:3010::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:4f:fe:34:45:60:3f:6b:d1:a2:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=f3614839-5c2c-4307-856a-c3448b175da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3d:f1:8a:0b:e4:02:4c:2a:98:8a:6c:02:bc:
                    39:05:46:d6:3f:16:14:52:5b:33:7c:2d:4a:db:7b:
                    b9:42:9f:bb:7d:43:3d:a5:2c:e4:21:ee:02:14:00:
                    8f:67:8c:61:76:ae:0e:52:05:0a:ed:67:98:7e:53:
                    e6:4c:68:08:08:de:62:bc:fc:da:a7:4e:23:ed:6b:
                    5b:69:02:a2:aa:6b:87:cf:db:f0:6f:a9:46:ac:92:
                    8d:3b:5b:a4:70:35:b5:64:84:e1:dd:a0:81:76:f6:
                    a9:66:7d:61:26:0e:ff:5d:de:6d:f0:d2:15:6c:69:
                    b6:d5:85:49:7c:6d:b8:75:34:11:28:73:be:46:b3:
                    10:90:4a:3b:ec:e6:74:4a:c8:a3:6a:16:18:71:a7:
                    ad:d9:1c:ed:ba:d5:85:10:f8:17:d9:5d:cc:83:72:
                    52:9c:56:f8:e6:91:69:ff:75:36:4c:f1:96:63:5b:
                    53:ef:29:5b:ec:13:8a:f2:5e:83:c0:d9:f3:6d:22:
                    c5:ff:a9:85:26:c6:eb:0f:30:87:09:23:15:78:35:
                    40:f2:18:09:8b:2c:9c:ef:9a:4e:24:5a:7f:3f:34:
                    1d:2a:e6:80:96:2c:e3:71:50:06:e5:42:46:e6:28:
                    39:96:9c:c8:2f:b2:ca:2f:6d:f2:56:d6:a9:aa:55:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B9:46:33:48:3B:7F:0F:11:E8:E7:FB:9B:57:40:79:FD:C1:A2:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75e33847-0df6-3c19-8053-15f6322d39ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:3010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:75:7d:af:ac:17:5c:7c:c0:62:37:19:16:29:f4:ec:ad:1a:
         9b:24:e0:a7:dc:b6:07:80:45:7b:2f:bf:6e:0a:6e:a5:71:1b:
         b0:e7:4d:df:dc:0f:da:91:2f:2c:0d:9d:90:ae:03:07:93:be:
         07:bf:42:e6:47:5c:2f:f4:76:c1:68:65:37:23:22:2a:d7:a5:
         5b:00:a5:cc:04:5b:76:c8:58:77:ab:74:1b:c6:0d:08:2c:7f:
         30:71:fc:f2:45:a5:44:01:1d:e9:2d:f6:f4:d5:a9:be:38:76:
         e1:f5:78:43:d3:af:d0:3e:d3:e5:7f:ed:58:e8:e6:d9:d6:9d:
         d8:1e:ea:9a:83:8d:32:c9:17:60:ff:56:ba:eb:9a:dc:1f:8c:
         1b:7e:82:40:b4:af:7e:01:99:6c:b5:b2:74:15:85:8c:12:7b:
         58:24:bc:eb:c1:1e:39:50:16:6c:1e:ac:38:75:4a:74:ad:88:
         58:a5:53:d9:d7:b7:df:0f:bd:88:19:0d:6c:7b:73:b7:dc:0b:
         ce:c5:6e:54:28:5f:ec:e0:9d:d2:12:5f:19:d3:75:5a:6f:2f:
         00:6b:83:d6:d2:e1:1c:9a:e4:1c:fa:b3:2a:e9:bd:59:29:01:
         3e:0c:8c:40:93:2b:ad:52:ba:b1:54:92:40:89:e4:16:14:71:
         87:1d:f4:26
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2eT/40RWA/a9GiogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk
ZjM2MTQ4MzktNWMyYy00MzA3LTg1NmEtYzM0NDhiMTc1ZGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD3xigvkAkwqmIpsArw5BUbWPxYUUlszfC1K
23u5Qp+7fUM9pSzkIe4CFACPZ4xhdq4OUgUK7WeYflPmTGgICN5ivPzap04j7Wtb
aQKiqmuHz9vwb6lGrJKNO1ukcDW1ZITh3aCBdvapZn1hJg7/Xd5t8NIVbGm21YVJ
fG24dTQRKHO+RrMQkEo77OZ0SsijahYYcaet2RztutWFEPgX2V3Mg3JSnFb45pFp
/3U2TPGWY1tT7ylb7BOK8l6DwNnzbSLF/6mFJsbrDzCHCSMVeDVA8hgJiyyc75pO
JFp/PzQdKuaAlizjcVAG5UJG5ig5lpzIL7LKL23yVtapqlXFhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGC5RjNIO38PEejn+5tXQHn9waJ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzVlMzM4NDctMGRmNi0z
YzE5LTgwNTMtMTVmNjMyMmQzOWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAAjAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACZ1fa+sF1x8wGI3GRYp9OytGpsk4KfctgeARXsvv24KbqVxG7Dn
Td/cD9qRLywNnZCuAweTvge/QuZHXC/0dsFoZTcjIirXpVsApcwEW3bIWHerdBvG
DQgsfzBx/PJFpUQBHekt9vTVqb44duH1eEPTr9A+0+V/7Vjo5tnWndge6pqDjTLJ
F2D/VrrrmtwfjBt+gkC0r34BmWy1snQVhYwSe1gkvOvBHjlQFmwerDh1SnStiFil
U9nXt98PvYgZDWx7c7fcC87FblQoX+zgndISXxnTdVpvLwBrg9bS4Rya5Bz6syrp
vVkpAT4MjECTK61SurFUkkCJ5BYUcYcd9CY=
-----END CERTIFICATE-----
Generated at Wed May 13 07:07:57 2026 by rpki-client