Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/79f67e75-3f16-3f56-92dd-79372963fb67.roa
File:                     79f67e75-3f16-3f56-92dd-79372963fb67.roa (raw, json)
Hash identifier:          0T++eCyyJ5QgQgHNkID52/bt/mxTbHa1D3UDf9dXcm4=
Subject key identifier:   48:7D:01:9B:11:29:CD:AF:DB:C1:86:C1:A1:3E:0E:CD:3F:AF:D0:FC
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D9A20315C43C262B8C06B3D40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/79f67e75-3f16-3f56-92dd-79372963fb67.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     31898
IP address blocks:        2603:c000:3800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:31:5c:43:c2:62:b8:c0:6b:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=1ea9f270-cbdb-4d9e-b762-4d911dc8d8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b1:2d:5b:8b:43:6d:28:c5:30:f1:cc:0e:09:
                    ac:28:ef:b0:3a:08:27:53:e9:57:e1:eb:a0:05:1f:
                    a8:9d:d8:fc:fe:67:76:a5:73:93:45:66:68:9d:3c:
                    23:c4:82:1f:31:99:ab:ea:4c:03:6d:13:41:21:ba:
                    7f:99:43:33:da:48:9e:fc:22:ca:29:dc:12:55:f3:
                    78:59:b5:64:eb:5e:94:ad:68:73:1c:e8:f2:49:f0:
                    e1:f5:fc:06:b5:98:bc:42:d1:fd:3d:0e:42:3c:7d:
                    a8:66:db:4a:77:d4:0c:1c:08:51:18:1c:a5:79:91:
                    59:71:0a:f3:73:4f:f8:23:49:20:10:71:d1:d1:4e:
                    75:77:b9:16:3e:5e:fc:7e:2e:1d:a4:c0:30:d6:e6:
                    6f:9c:15:f5:7f:af:db:37:eb:8a:24:29:38:78:f1:
                    99:3d:79:f6:03:cf:f8:75:1b:f5:1d:b1:53:01:9d:
                    31:32:4c:ca:27:bd:3c:68:47:46:5f:e7:76:b8:dd:
                    98:73:a2:48:38:fd:3a:c6:94:85:b3:ee:96:e4:88:
                    c5:c0:62:e0:70:e6:07:1c:42:f0:ad:b7:ac:7d:f1:
                    1f:f6:10:00:54:b0:10:34:06:04:7f:6b:5d:2b:35:
                    e9:e2:68:4f:48:2b:9a:4f:69:65:d5:30:09:89:27:
                    4b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7D:01:9B:11:29:CD:AF:DB:C1:86:C1:A1:3E:0E:CD:3F:AF:D0:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/79f67e75-3f16-3f56-92dd-79372963fb67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:3800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c3:82:a0:4a:96:6e:5d:53:4c:c0:04:0e:46:90:bc:29:df:
         20:fc:69:3f:9d:c5:12:aa:85:6b:17:05:eb:be:fd:d2:a8:d1:
         85:2c:0c:a0:70:ba:87:87:a5:97:45:b1:97:54:dc:4d:fd:2e:
         01:5c:81:15:f6:36:28:03:34:a7:0d:39:c2:1e:c2:7c:9a:ef:
         f3:8b:94:1a:ab:ec:95:f0:48:99:e2:a3:7e:96:43:b5:8d:43:
         f8:28:80:1a:0a:3b:51:79:20:ec:bc:f3:c5:d2:7e:e5:f1:0b:
         6f:f7:47:c6:ee:f1:01:64:ac:bc:35:59:58:62:34:bb:d4:5a:
         35:b3:11:f1:5b:89:93:26:a6:1d:a8:74:3e:e9:e2:e0:31:6c:
         7e:f1:bc:d6:e6:71:c9:f6:48:77:e8:7b:e3:4c:86:96:1b:a8:
         d1:ce:4b:8d:92:44:0a:90:6a:20:ea:65:6a:d8:12:50:93:36:
         48:76:d0:cb:db:23:8d:5d:88:28:01:dc:63:4e:5e:3f:68:cc:
         6e:e7:e8:de:ba:66:40:35:46:58:9b:15:63:60:37:93:6a:35:
         3b:a1:7c:5c:bc:4e:9f:f1:2d:d0:94:11:3d:9e:32:3f:99:66:
         17:a6:3c:0c:b2:ab:9f:7e:1d:56:83:a3:aa:de:1c:11:7d:a8:
         21:6c:79:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:54:30 2026 by rpki-client