Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/991582d5-64eb-3917-82ee-6e9a7c0014c7.roa
File:                     991582d5-64eb-3917-82ee-6e9a7c0014c7.roa (raw, json)
Hash identifier:          Q31eoCwEwZUoDlThsXs1b+9BDGFZx8FGMgOs8natp2M=
Subject key identifier:   4A:CA:15:A6:F8:9B:36:B3:75:23:4D:85:89:48:44:32:F4:42:3C:FE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D25BA3C9C99DA89A3E2ECAC40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/991582d5-64eb-3917-82ee-6e9a7c0014c7.roa
Signing time:             Thu 12 Mar 2026 20:21:44 +0000
ROA not before:           Thu 12 Mar 2026 20:21:44 +0000
ROA not after:            Wed 10 Jun 2026 20:21:44 +0000
asID:                     54253
IP address blocks:        2603:c062::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:ba:3c:9c:99:da:89:a3:e2:ec:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Mar 12 20:21:44 2026 GMT
            Not After : Jun 10 20:21:44 2026 GMT
        Subject: CN=b7cc0754-c68c-4142-ae05-9cb206307ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:53:a9:94:d8:e5:8f:09:57:08:75:b3:fc:
                    dc:04:48:8e:b8:37:f5:43:f2:c1:b9:f1:3d:0b:e7:
                    38:cb:31:49:b5:f0:c5:82:35:c4:ce:26:7c:d3:63:
                    ae:a0:e9:63:3e:74:ce:dd:1c:c8:41:bd:0b:40:52:
                    a8:85:b9:8d:79:0c:b7:e9:bd:e0:54:a0:c8:8c:fc:
                    95:ec:ab:53:82:4f:43:b3:b9:85:54:6a:94:7f:7f:
                    fd:a9:f1:08:da:2b:8e:ef:91:61:18:89:e4:05:ec:
                    00:c3:39:b2:d3:15:6a:73:da:49:69:0a:6e:51:9a:
                    54:ac:28:4e:2d:ae:59:44:3f:6d:82:2c:46:fa:79:
                    e9:81:ae:93:0f:1f:48:e9:14:54:b3:ac:30:31:bd:
                    96:07:8b:d7:e1:3d:de:5f:44:90:31:6f:4a:a3:ee:
                    46:78:f9:5b:ca:af:70:07:9f:44:a9:ea:3a:78:55:
                    27:1b:ed:12:e1:08:fa:dc:f6:f7:ec:b6:cd:36:0f:
                    8d:69:04:f2:33:cd:fb:b2:bb:13:cf:fb:0e:0a:71:
                    c4:0c:f2:95:3a:c8:7c:77:61:6f:3d:c8:51:0f:32:
                    d2:20:63:33:3a:5c:07:d4:9c:f5:6c:ad:76:2c:69:
                    cf:b0:05:70:68:ca:bf:d0:84:f1:1e:3d:01:95:a1:
                    cc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CA:15:A6:F8:9B:36:B3:75:23:4D:85:89:48:44:32:F4:42:3C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/991582d5-64eb-3917-82ee-6e9a7c0014c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c062::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:be:69:dd:5f:c7:73:44:c9:27:50:cd:77:30:e6:33:4c:e4:
         e6:c0:9c:96:20:a9:43:f7:fa:ff:96:5a:2b:09:7c:6f:df:23:
         6b:a3:6e:b0:94:89:b0:b0:d0:e5:b5:58:a2:86:b0:2e:e6:45:
         e1:6d:55:77:65:77:d6:36:f7:17:aa:b0:5e:5f:a3:30:dd:1d:
         b8:18:52:37:82:d4:13:d5:ce:23:35:3c:59:ca:be:43:57:2e:
         3d:ea:47:e9:f9:16:62:f3:7e:53:6a:05:f7:59:87:20:2b:96:
         ec:6c:7e:bc:cb:ee:d3:07:9a:83:da:4f:5a:80:bf:43:ad:f0:
         ef:60:05:f5:21:e7:ab:69:61:70:b0:e6:1f:7a:4c:f0:3b:d4:
         50:62:02:a1:37:5a:bf:45:18:fd:31:23:2f:c8:80:49:cc:ea:
         5c:81:dc:8d:db:88:4c:66:be:fd:55:a2:f6:80:8a:2d:0d:9e:
         1e:7d:ff:93:4a:e5:ac:df:08:21:5e:88:d4:db:de:8b:6f:86:
         6f:51:76:47:3e:1c:7f:24:3a:ae:31:7c:19:89:6d:1a:d9:ce:
         8f:be:1c:8f:16:59:6c:1a:b6:2b:b6:6f:a0:40:70:26:68:3a:
         7d:85:4c:39:ad:b1:76:13:df:c1:81:84:a5:83:6e:45:88:a7:
         25:5c:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:14:17 2026 by rpki-client