Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/831ef385-6303-3803-89f8-148490b76ee2.roa
File:                     831ef385-6303-3803-89f8-148490b76ee2.roa (raw, json)
Hash identifier:          DlMDX1uXPruJTPcDHg5qFYlHjLpeXc3gZWgYiJ8/6Xw=
Subject key identifier:   DF:1C:4E:FC:11:C9:EE:24:42:F7:0D:15:6F:01:98:7E:B6:6D:41:A9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F4973516A4137E4E803881780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/831ef385-6303-3803-89f8-148490b76ee2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c080:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:51:6a:41:37:e4:e8:03:88:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a2eec343-f3db-4805-8397-720dc70a3760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:98:bc:e7:46:13:43:d1:cc:4a:06:da:35:
                    c0:b6:5a:b9:63:a3:3f:9f:c3:0c:df:6c:2b:64:e4:
                    14:25:c2:8d:ed:bc:9e:76:1e:5c:f3:e6:61:e6:ca:
                    dd:28:45:b5:85:bc:39:dd:72:37:2c:1d:9a:2d:6c:
                    57:83:71:63:fa:fb:56:80:cf:ff:09:81:6d:e4:2b:
                    89:52:e0:b5:fa:09:25:d1:f4:af:44:52:6c:4a:5f:
                    56:86:49:5c:78:98:89:34:bc:b3:30:31:1b:62:1f:
                    78:ab:71:a7:a8:dc:2c:c1:9e:20:00:ba:3c:83:67:
                    20:df:04:86:25:31:8e:a6:f9:5f:97:aa:b0:02:8d:
                    38:dc:c3:b4:d9:0a:42:c0:ab:0b:81:8c:0e:a4:36:
                    17:8c:24:23:1c:4d:be:19:5a:e6:d2:4c:42:c1:09:
                    c9:b9:e9:b9:b4:6e:06:27:5b:74:9f:80:19:32:10:
                    99:be:3e:2a:8b:96:53:a4:d8:75:88:00:8b:1d:32:
                    97:a0:26:b0:96:4b:a4:59:e3:db:31:60:68:b7:74:
                    fb:d6:7f:ca:c8:33:e3:bc:a5:d7:56:37:8b:ea:50:
                    58:b3:e2:71:36:93:6b:96:f5:77:36:ea:83:9c:a0:
                    6d:cc:87:7c:13:bc:40:8b:8c:46:9e:51:dc:0e:fa:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1C:4E:FC:11:C9:EE:24:42:F7:0D:15:6F:01:98:7E:B6:6D:41:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/831ef385-6303-3803-89f8-148490b76ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c080:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:fe:c3:33:4d:79:09:72:ca:6d:ca:f4:2d:d9:0d:b2:bf:1b:
         91:b1:7c:87:14:60:a8:37:53:49:8e:57:bd:0d:a7:a7:b5:b8:
         3a:fa:2c:5d:f5:f5:5a:7d:5b:44:c9:e6:d7:e0:50:68:ac:15:
         5c:98:31:fb:c6:8a:0e:2d:a2:a3:d6:ad:af:44:92:47:df:6e:
         30:ab:2d:5c:4c:f1:81:11:6b:ea:01:e6:28:e5:a9:7e:c7:b7:
         e4:65:9e:71:f7:3e:19:a3:69:b8:b6:d0:d7:f6:90:15:73:42:
         26:1d:e3:cd:1a:bb:f8:02:67:8c:54:54:b3:15:fe:da:8d:59:
         80:59:64:f3:c9:d8:af:68:47:24:b3:9f:dc:08:68:a5:79:0b:
         d5:fd:0b:4e:70:d3:1f:fd:49:f3:9d:77:07:f5:03:b7:2c:af:
         fe:1d:e7:0e:eb:05:e4:54:ed:f4:68:04:b6:bc:a6:04:b4:dc:
         ca:08:70:b1:f8:f5:5a:e9:31:e5:1e:eb:14:04:5d:60:e2:c9:
         f9:0a:23:22:06:28:8e:c4:90:74:88:64:24:48:c6:d1:7a:01:
         69:db:d6:8e:55:50:a8:42:7e:36:d6:e3:b9:3a:27:49:e0:60:
         8d:d1:00:f8:2e:5e:52:d3:3f:d4:b7:bc:48:17:26:b6:40:d5:
         8c:88:9d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:27:05 2026 by rpki-client