Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abf7f51a-67bb-33f7-a182-222222aa103c.roa
File:                     abf7f51a-67bb-33f7-a182-222222aa103c.roa (raw, json)
Hash identifier:          oju6MJ2l0uxIFKBDZn7R3H/GjHxfcaOpNITqb879H00=
Subject key identifier:   98:A1:55:76:60:BF:64:C8:52:FE:53:B6:4F:36:4E:8D:30:99:D7:2E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEC4141A323CFCA45D1576560
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abf7f51a-67bb-33f7-a182-222222aa103c.roa
Signing time:             Wed 20 Aug 2025 20:43:01 +0000
ROA not before:           Wed 20 Aug 2025 20:43:01 +0000
ROA not after:            Tue 18 Nov 2025 21:43:01 +0000
asID:                     31898
IP address blocks:        2603:c001:5000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:41:41:a3:23:cf:ca:45:d1:57:65:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 20 20:43:01 2025 GMT
            Not After : Nov 18 21:43:01 2025 GMT
        Subject: CN=0157e921-14f7-4fdf-98b0-1429157dcb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:a8:e7:61:c9:7a:9e:25:f2:53:01:ea:f6:
                    ad:ff:12:73:bf:35:88:39:e5:28:18:6c:19:9c:8e:
                    11:17:09:76:e0:4b:4c:e7:7b:e0:7a:56:c5:fc:0d:
                    c4:5e:7a:19:94:18:ed:a3:08:98:b1:28:9d:65:2e:
                    a7:88:d5:a1:08:e5:fd:4d:0f:03:c4:f4:8b:4f:ac:
                    7f:1e:55:b5:4e:a2:de:2f:34:12:e9:67:4a:75:0e:
                    71:fd:78:9e:02:24:f9:85:d2:0b:6c:46:37:5c:58:
                    cc:7f:d1:a0:08:13:16:f0:40:0b:2b:c0:53:4c:97:
                    6b:ee:99:ef:b5:5c:2b:d9:72:93:4b:1e:93:28:91:
                    f3:1f:e7:d7:bf:ed:47:23:e3:98:c8:6f:32:16:b2:
                    32:a7:cc:67:a5:99:03:fc:05:1e:7e:cd:52:1a:e0:
                    ae:46:a4:e8:33:f1:fd:a0:66:b3:87:68:49:6f:22:
                    af:62:73:1b:76:38:bb:f4:7c:d2:8f:0a:ab:9b:a4:
                    67:53:44:53:96:97:5f:6d:ef:04:93:42:f8:1e:5b:
                    e2:60:ee:4a:9e:09:cc:a1:c1:cf:a6:5d:40:5f:d3:
                    c0:eb:94:57:59:48:dd:e0:42:aa:7d:f3:04:e5:c7:
                    da:bd:de:91:73:94:8f:25:49:17:be:1e:f3:b0:c8:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A1:55:76:60:BF:64:C8:52:FE:53:B6:4F:36:4E:8D:30:99:D7:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abf7f51a-67bb-33f7-a182-222222aa103c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:5000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:3e:94:15:e6:60:0d:35:ff:8f:ca:36:13:35:35:95:88:e2:
         48:ce:04:52:a5:1b:78:9a:eb:6c:2d:e3:76:0c:f1:bb:63:fb:
         ab:cc:9f:ca:79:39:d2:3e:4d:44:fb:97:96:54:76:1e:13:fa:
         9b:b9:cd:bb:82:0c:63:a0:bf:ed:3e:23:7f:cc:a6:ce:82:59:
         c0:d2:94:d6:a0:02:a8:32:4b:bf:2e:d8:9b:d9:7b:67:be:6d:
         8b:27:dd:24:8b:62:1d:8c:40:0d:ce:85:49:47:22:c0:98:d2:
         e4:9d:31:b2:13:7e:f9:c1:56:51:25:1e:bb:0a:e3:3f:81:5d:
         80:ce:6b:87:58:45:06:9e:60:54:e0:c8:ab:56:a5:01:64:83:
         31:8f:51:e9:e2:62:13:05:9a:5e:c7:8e:c9:7d:95:03:1b:1d:
         94:63:43:62:26:9b:45:21:2c:03:7b:c0:7e:7f:b1:ce:a6:01:
         20:1c:ba:66:58:36:ab:71:4b:5a:71:2e:9a:13:00:cb:bc:3c:
         0d:20:df:e9:72:be:f9:70:06:e7:43:93:ab:4f:ce:55:a8:7a:
         f2:93:9d:5c:1c:94:a9:54:4a:a9:dd:a0:ce:59:83:35:32:e8:
         cc:c5:ad:61:08:50:06:ba:af:7c:c0:15:cf:56:7a:52:0e:5e:
         c5:f6:e9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:38 2025 by rpki-client