Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b50095c3-7063-3994-9d0d-722ef58ba666.roa
File:                     b50095c3-7063-3994-9d0d-722ef58ba666.roa (raw, json)
Hash identifier:          /9TNwzpR+pG/s9cfwhNdTspqYMi0QCJ+RSd6EmmR11o=
Subject key identifier:   90:33:8B:69:2B:92:B6:5B:4A:E9:A0:D5:C5:1E:01:11:92:9D:13:DD
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D98BAA0565EF48AC0F9EFBB80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b50095c3-7063-3994-9d0d-722ef58ba666.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        2603:c000:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:a0:56:5e:f4:8a:c0:f9:ef:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=a67c64b1-0ca4-4ab2-b303-84ec6cb484bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fc:c9:7f:a7:15:e5:23:83:56:0e:70:e7:4c:
                    53:9f:0b:e1:f8:51:c6:6d:7d:bb:b8:34:d4:c2:73:
                    93:24:7a:34:97:30:75:a3:d3:bc:97:a1:30:10:e0:
                    9a:e5:85:52:fd:ab:86:1b:26:70:80:a5:7a:89:ce:
                    81:31:8e:00:b3:f6:fd:1a:4b:ca:34:46:32:c7:82:
                    45:d9:b0:91:b4:8b:62:f5:3f:73:26:b2:fe:b5:a3:
                    95:88:e1:8d:b9:1d:4b:3c:c2:a3:dc:7b:bb:b1:e6:
                    ea:e9:26:48:dd:0b:35:3b:58:0d:32:ab:35:1e:b3:
                    55:e3:ac:02:11:9f:99:e9:41:eb:34:d1:95:c9:b7:
                    2a:98:46:ed:d3:b7:60:25:61:0c:6c:3d:f9:ee:ae:
                    f6:43:fd:61:0a:42:20:55:86:1d:2f:61:b2:9b:90:
                    66:d4:12:d9:df:0d:f4:a8:02:83:14:1f:fe:de:92:
                    a2:47:59:af:86:56:a1:95:af:f5:58:36:24:62:40:
                    58:70:08:b7:7d:4b:02:49:df:f5:0e:13:36:8e:c2:
                    ba:2e:b1:e0:be:65:4d:86:93:40:01:e4:f0:08:3b:
                    69:45:28:f6:9a:03:d8:4f:0d:81:62:d3:29:44:1a:
                    4b:4f:35:38:ca:a8:6e:b9:e0:6c:3b:2a:e1:60:4d:
                    a7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:33:8B:69:2B:92:B6:5B:4A:E9:A0:D5:C5:1E:01:11:92:9D:13:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b50095c3-7063-3994-9d0d-722ef58ba666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:47:b0:d6:2b:fa:ab:70:bf:9a:ab:6d:b9:9e:e1:02:c5:f5:
         29:35:53:ee:94:ac:e5:b6:06:de:d0:e4:5b:29:1d:2d:7d:55:
         9c:c8:0f:3e:38:7b:36:97:07:fe:d8:0c:74:cb:00:83:8d:76:
         3b:5e:51:c0:97:4b:20:aa:8c:ed:fd:a5:90:55:29:ca:fc:9c:
         60:85:49:4a:a2:f1:72:52:ad:3f:51:56:49:63:2d:6d:1f:8b:
         2f:18:ca:c9:9a:6e:ae:7e:3f:40:6c:3d:35:bb:17:eb:8c:8b:
         f1:a3:4a:e9:27:b1:fd:9a:d4:c8:fe:50:c6:20:de:bf:34:7e:
         fd:b6:2c:82:54:d1:a6:10:e9:5c:af:00:1b:11:12:0c:ed:b3:
         8f:a0:b6:9d:45:b7:d3:c0:86:dc:22:a3:8e:19:9a:fb:60:f2:
         8c:a8:39:cf:bf:88:58:a4:72:40:98:05:48:1a:56:93:1a:53:
         ef:7e:b4:c3:df:48:18:75:26:c7:10:4b:a1:a9:1a:80:78:1d:
         ed:02:a0:88:97:d4:b0:4f:31:9a:7b:6b:01:8f:43:26:10:b6:
         f8:9d:43:23:45:bb:37:c3:5a:4d:8f:c2:a3:a5:71:b0:55:6a:
         d6:ab:6c:de:4b:dd:dd:c1:51:16:5d:9a:e2:89:69:d3:0b:1d:
         73:29:a4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:08:46 2026 by rpki-client