Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/971bb54e-bcb7-3d64-bf37-75cf32f805ec.roa
File:                     971bb54e-bcb7-3d64-bf37-75cf32f805ec.roa (raw, json)
Hash identifier:          wPul+ApxOfzbz8zUFzypX1w1nsGxcfZsSg3YsLQQK/A=
Subject key identifier:   76:FF:F4:B8:B7:51:B9:D1:8B:2A:81:31:B5:D6:DA:21:47:42:94:F3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8C2AADFADADA93295EC4E36C
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/971bb54e-bcb7-3d64-bf37-75cf32f805ec.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     31898
IP address blocks:        2603:c002:b500::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:ad:fa:da:da:93:29:5e:c4:e3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=6d464a05-2dea-4816-b7c9-494a422d1df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f7:24:cb:2d:47:d3:8d:c7:90:64:d1:56:1d:
                    fe:fe:6e:62:95:45:dc:f7:7f:43:c5:80:8a:22:44:
                    15:4d:7b:b8:72:83:39:69:64:12:70:d1:a0:3a:c1:
                    a3:1f:a5:43:b9:41:28:ef:e7:04:14:87:33:e0:2e:
                    b6:d3:4c:e8:9e:b9:72:c5:fd:82:0d:1e:b0:e7:45:
                    3c:0d:a9:33:46:a2:5f:2d:4a:d3:8f:29:61:24:4b:
                    a2:e1:2f:62:55:d1:86:10:b9:bd:a7:2f:de:9f:87:
                    99:4f:ae:10:fc:4b:28:17:8e:b4:b4:83:fe:0c:44:
                    e0:46:14:59:65:77:5c:d7:a5:52:35:f8:e0:f1:78:
                    f5:5e:f8:7f:c1:2a:ad:93:bd:13:b1:e2:42:05:ff:
                    87:b2:41:87:42:68:be:f1:de:b7:bb:ff:5f:f4:6f:
                    71:22:49:0b:79:5c:bc:87:c8:fe:71:48:3c:d3:d8:
                    80:47:65:bd:30:22:3a:ff:29:6d:7f:f4:22:53:cd:
                    bf:2a:a9:6c:f9:cd:4c:1c:76:f3:12:73:44:42:ef:
                    53:66:5a:e4:67:b5:51:d5:b6:d9:79:2b:d4:cf:de:
                    bb:3e:51:c0:12:f7:68:48:46:dd:c6:a8:d2:a7:73:
                    0c:dd:cb:ca:69:e8:71:6b:cd:c6:60:da:d2:0d:49:
                    c0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FF:F4:B8:B7:51:B9:D1:8B:2A:81:31:B5:D6:DA:21:47:42:94:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/971bb54e-bcb7-3d64-bf37-75cf32f805ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:b500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:3f:51:a6:db:0d:23:a8:8c:2a:9e:c8:15:8a:a6:85:a0:1e:
         83:dc:ad:2d:0f:a6:1a:98:d5:0d:34:2b:ef:80:01:3f:6a:72:
         e4:23:e6:a1:6b:e0:22:ad:d3:7e:8e:a5:6a:38:2b:2b:d7:5b:
         7b:a8:b5:82:46:82:44:59:53:e5:78:d2:37:46:93:37:f5:21:
         4e:f6:65:12:1a:ef:e6:6b:15:2e:1e:eb:f0:ac:5d:45:02:5b:
         17:97:03:d8:67:03:b0:83:f6:99:55:37:87:9f:d4:39:0f:be:
         2f:43:6f:88:10:72:82:dc:32:6c:89:3b:37:0a:8e:6e:37:de:
         c4:a0:27:b5:26:da:e0:59:94:02:73:06:33:21:86:b3:ce:bd:
         e4:13:91:ed:be:19:33:57:61:49:29:f1:56:76:a6:5e:d2:64:
         32:e3:46:4e:19:98:47:f5:4f:f0:10:37:7e:87:57:eb:6b:68:
         39:a3:63:b7:a4:a9:79:14:9c:65:71:be:9c:47:07:a9:0e:95:
         2c:5a:8c:fa:22:f5:69:65:01:0e:e7:42:fa:13:e0:bf:27:ef:
         58:69:76:4e:ef:6a:a2:54:2d:6a:44:89:e9:f3:95:5b:06:8b:
         f0:5d:b0:f0:dc:1e:fe:93:2b:4a:95:81:88:8c:aa:5f:5f:88:
         3a:9f:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:28 2026 by rpki-client