Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/831ef385-6303-3803-89f8-148490b76ee2.roa
File:                     831ef385-6303-3803-89f8-148490b76ee2.roa (raw, json)
Hash identifier:          BpWE3O1qlwyOYf65g0NOC75pbf0o8zX/tW8hLPPVdsc=
Subject key identifier:   B6:97:69:07:44:FF:A3:AF:09:F2:B0:13:89:C3:2D:45:F5:89:CE:D8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DC995A80E8454E5B29E539FC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/831ef385-6303-3803-89f8-148490b76ee2.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c080:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:a8:0e:84:54:e5:b2:9e:53:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=51cb6bc9-b760-44e8-8b7d-c26f79424440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:53:ff:1e:94:e2:56:ff:e6:d9:4d:98:33:c5:
                    2f:21:ba:05:14:cb:db:6f:2e:95:a7:91:d0:dc:eb:
                    9d:ca:5e:19:ed:72:dc:fa:5e:63:3b:35:14:a0:c3:
                    90:da:2e:32:52:6e:04:fb:f1:ae:33:e9:90:67:03:
                    1d:66:ad:83:b3:98:24:65:4c:85:45:83:17:3d:24:
                    32:6e:b2:5a:30:30:a3:0c:a1:51:bd:ed:71:dc:69:
                    14:11:fa:8b:34:e0:dc:31:b8:f3:68:aa:f8:4f:f1:
                    f7:b8:09:84:28:fe:3e:3b:cb:dd:07:8e:3d:09:1a:
                    70:36:8d:51:c8:bc:e2:08:bf:05:a6:7e:fc:8a:d4:
                    cf:29:e7:0d:a5:63:0d:8b:fa:9f:c6:21:98:25:1c:
                    5f:db:6a:09:42:36:27:98:a6:5f:f3:61:4f:53:7c:
                    f6:7d:a1:98:02:9b:30:98:92:ac:0a:4f:ab:a7:ac:
                    38:da:e4:67:3a:c1:e2:bd:a9:07:55:bb:5f:2c:32:
                    80:8d:0a:c7:06:ad:ac:a9:fc:13:89:9b:0f:57:51:
                    3f:fe:4a:27:fb:eb:c8:d8:d1:a1:4a:8b:1c:d6:86:
                    f3:ef:e7:27:07:b7:b1:9d:b2:6e:87:d4:6a:b8:f4:
                    ff:3f:d5:2c:eb:2c:02:e5:00:59:16:0e:d8:0b:97:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:97:69:07:44:FF:A3:AF:09:F2:B0:13:89:C3:2D:45:F5:89:CE:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/831ef385-6303-3803-89f8-148490b76ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c080:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d9:58:68:dd:8a:ca:51:4a:5c:89:04:83:4c:9b:c9:68:87:
         9a:22:35:80:75:6b:fe:f2:0c:2e:69:85:49:38:a4:3d:9d:fe:
         12:f4:dd:6d:89:fa:9c:1c:a4:7c:81:4b:0c:65:38:da:a0:e0:
         be:45:85:3d:6f:c7:1c:88:11:e6:c8:dc:31:b0:b6:39:6a:50:
         99:46:f9:ef:5c:ed:ac:64:6c:fd:49:8a:59:b9:ef:bf:90:7e:
         b9:b1:bb:a0:56:87:af:56:65:f9:b0:7c:ab:34:94:16:a1:37:
         03:46:2b:75:a8:17:8c:30:27:ef:76:97:41:a0:6d:06:59:23:
         29:e0:17:18:0a:5f:b8:52:97:42:fd:dd:87:8e:57:7e:c8:5c:
         6a:2d:ab:fb:ac:68:bc:1b:90:7a:20:a3:04:dd:a1:a9:6c:c2:
         a4:f3:7a:59:d7:27:a6:11:33:84:bd:15:42:12:9d:e7:e8:ae:
         69:e1:08:df:2c:2c:f7:ae:06:1e:17:c9:d5:aa:ab:a3:4a:cd:
         dd:1c:be:d2:f2:b5:91:8b:ff:b4:bc:ef:68:15:9c:ef:3b:de:
         c8:7d:db:e8:d5:46:bb:82:68:5d:c0:5e:ae:d4:aa:1d:23:9f:
         ba:5f:d6:57:46:28:7d:98:9b:59:3a:bc:06:6f:9c:6c:21:8e:
         60:92:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:57 2026 by rpki-client