Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aaf904d6-b7da-3c5c-a4c1-cdda78083e5e.roa
File:                     aaf904d6-b7da-3c5c-a4c1-cdda78083e5e.roa (raw, json)
Hash identifier:          cSrwD88iEtsTLWnh81BTj+Fc5CBf7fZPrfT39sw5CiA=
Subject key identifier:   A1:A2:89:3D:F1:74:6F:B9:9A:02:43:87:BE:DE:30:42:BF:ED:2F:05
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DC995A0AF7D7F8326AD446A00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aaf904d6-b7da-3c5c-a4c1-cdda78083e5e.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c080:1200::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:a0:af:7d:7f:83:26:ad:44:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=80b3eb67-bce8-4169-ba1d-a608897c3ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:dc:2d:9b:02:2d:47:a7:05:29:17:f0:92:27:
                    a8:31:92:a9:41:d6:9a:70:e6:7e:e3:eb:1c:02:50:
                    27:29:ad:f1:52:3b:a7:04:13:18:73:01:36:1d:e0:
                    9e:d6:6f:1f:f5:09:af:76:fd:61:c8:97:6b:e5:ee:
                    ea:07:89:5a:64:3c:3f:9f:e7:e6:8f:df:c1:01:10:
                    1c:0a:31:49:79:01:a2:68:4e:82:de:91:b6:c3:4f:
                    d6:80:68:a7:f7:61:94:13:5f:b7:a6:19:42:08:63:
                    5d:08:13:1a:a3:ad:ce:4e:34:ec:67:60:f8:8f:d4:
                    59:6a:33:a8:1c:1a:cf:77:ee:2a:73:b6:ef:ee:2c:
                    87:24:9b:57:25:ce:7e:08:e3:28:60:30:bc:a6:85:
                    78:71:e9:30:d2:5a:90:b9:ea:cf:0e:1a:41:12:eb:
                    a2:81:40:ec:20:ec:72:0c:78:41:9d:59:21:ca:83:
                    33:5e:19:5d:76:3b:13:69:ca:b8:e3:98:b1:84:6f:
                    c6:5c:39:ed:6c:9e:ba:d3:25:c2:02:2d:d1:20:ac:
                    d2:ee:2a:0e:80:7b:58:76:1a:75:2e:24:3f:30:23:
                    ec:44:d0:bb:a7:f1:65:53:fa:e0:da:cf:94:f0:8a:
                    e0:d1:cf:d6:5e:4a:34:43:c7:e1:24:81:29:97:1a:
                    17:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A2:89:3D:F1:74:6F:B9:9A:02:43:87:BE:DE:30:42:BF:ED:2F:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aaf904d6-b7da-3c5c-a4c1-cdda78083e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c080:1200::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:0a:bd:85:67:64:91:e2:b9:81:f2:0b:02:3f:5e:e2:53:7a:
         3d:f3:fe:bf:5e:8f:ed:1b:35:80:ad:dd:be:70:34:da:9a:01:
         aa:64:35:da:95:73:a1:b7:60:bb:11:87:a2:49:8f:1e:c5:71:
         76:ad:af:30:29:83:1f:29:e2:d3:b1:fc:94:b2:55:3a:06:57:
         70:53:a7:99:e5:6d:35:e4:a7:26:2f:07:fd:c2:39:eb:5b:53:
         8d:4f:6b:bf:f6:9e:23:fc:06:6d:7d:51:ba:80:6e:de:95:c9:
         ba:ce:ba:c5:ca:7e:96:5f:73:e9:66:a9:d0:00:5d:9e:d4:69:
         9a:be:48:0c:96:4c:3d:1f:60:9b:20:91:f7:f1:37:15:a6:17:
         12:45:50:9c:6a:d1:f2:f0:05:a7:4e:7e:5e:5c:3c:b0:6a:79:
         84:f0:cf:ce:91:6a:de:06:bb:5c:3b:99:8e:c7:5b:4d:64:05:
         5e:66:a4:58:58:16:f6:1e:01:c8:97:9b:e5:90:47:4c:7b:61:
         63:2a:91:36:be:87:91:4e:f7:37:d6:95:2d:77:cf:a3:8d:00:
         84:ca:bf:3d:fe:5f:07:e8:f2:0a:cd:00:03:de:d3:d1:ff:a8:
         fb:f3:f2:ee:c0:f4:80:ce:c4:5b:67:9a:17:00:f1:7d:b2:35:
         81:50:59:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:35 2026 by rpki-client