Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b20e4012-fff3-3e25-924a-a029bf37b709.roa
File:                     b20e4012-fff3-3e25-924a-a029bf37b709.roa (raw, json)
Hash identifier:          xR6UsVrMKgpmXI+nx57xYWobqS4E8HVoM0Cix9gqLdk=
Subject key identifier:   1F:74:57:D8:A8:9E:82:7D:1E:B7:46:AF:6D:61:2C:E7:35:BB:1D:89
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8D8FF3E1C8D7919E5C197680
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b20e4012-fff3-3e25-924a-a029bf37b709.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     31898
IP address blocks:        2603:c02b:4000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:f3:e1:c8:d7:91:9e:5c:19:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=2e552b98-ce89-485e-b04e-061fb1846c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:44:6e:5e:a1:56:b5:34:d9:00:25:90:16:
                    f5:b4:53:59:de:50:a0:fe:02:3d:a8:fa:73:84:b3:
                    11:f8:a4:50:a8:26:91:71:39:ac:8c:2e:8e:8f:ec:
                    c8:b6:ed:97:d7:2c:24:9a:de:09:ec:71:b3:33:2a:
                    20:6b:79:a0:17:73:1c:49:94:c4:84:15:4b:1e:d8:
                    5d:9a:6e:93:56:50:cd:34:2b:a8:5c:ea:31:09:50:
                    36:64:b6:43:e8:5e:8d:bb:c6:ae:0f:b6:32:ce:6e:
                    6a:f9:71:bf:fb:a9:d4:f3:4e:c2:4c:eb:77:5a:f9:
                    b1:fa:fe:57:0c:6a:fe:52:80:d0:6c:88:03:f5:2c:
                    2c:d0:62:78:52:16:cc:b6:5a:db:c2:37:19:e4:4f:
                    7a:85:7d:eb:06:ef:76:b7:40:85:42:1c:84:13:43:
                    dd:a5:41:bf:76:58:1b:41:97:88:93:36:60:5f:0d:
                    e8:e4:6d:05:12:c1:5a:07:fe:fc:4b:14:a3:50:ce:
                    f3:cd:d3:a5:46:cb:19:80:22:4f:ad:1c:9b:5a:d4:
                    f6:36:77:a7:92:38:67:17:db:95:f8:92:d4:1d:3d:
                    28:00:1f:5f:0b:47:01:22:30:30:59:c0:a2:34:77:
                    d4:6e:63:94:d8:35:23:06:fd:d2:89:41:51:61:69:
                    5a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:74:57:D8:A8:9E:82:7D:1E:B7:46:AF:6D:61:2C:E7:35:BB:1D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b20e4012-fff3-3e25-924a-a029bf37b709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c02b:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d3:10:41:50:c1:6c:1a:72:43:db:40:c7:14:75:b1:7b:c6:
         eb:d3:d3:3e:1a:e5:52:3b:b6:d9:71:c3:1c:2f:5d:3a:ed:c7:
         b6:68:52:09:2f:1c:14:0a:57:ae:6f:4e:18:a3:a3:a7:f5:b2:
         d8:19:52:d2:86:75:f9:82:f1:0e:4b:08:42:ff:cb:bd:60:46:
         f9:1d:d3:c5:37:d5:41:9f:ca:83:83:49:b1:f7:a6:a4:0a:32:
         b6:3c:ba:39:1a:ae:2d:84:5e:2f:cc:da:07:e9:c5:60:32:d1:
         89:65:5e:a0:d1:50:a4:21:5f:c0:98:cd:40:4b:62:f4:a6:c0:
         22:90:bc:fd:fc:9f:00:07:e9:fc:13:e6:60:a0:1b:8d:8d:bb:
         31:45:45:b8:f8:94:56:8c:7e:e3:bc:16:88:5d:28:f9:dd:91:
         85:ad:8f:0e:6e:d5:1c:7a:c0:b0:49:64:ac:74:fc:52:27:96:
         79:7a:b1:a4:46:f3:34:55:e6:7d:06:6a:2f:93:35:58:ff:d0:
         45:f7:d3:15:d9:e4:5e:4c:c8:02:ed:dc:70:ad:87:1d:90:ef:
         83:ce:a0:20:4c:00:7a:70:4c:8f:6e:28:7a:04:ef:1d:30:4d:
         62:a7:31:c9:df:89:0d:b9:99:95:4e:ef:e3:eb:f3:a7:2d:1e:
         23:fe:1e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:07:50 2026 by rpki-client