Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbf96b72-d062-3ac2-a3c0-751cd83bd60b.roa
File:                     bbf96b72-d062-3ac2-a3c0-751cd83bd60b.roa (raw, json)
Hash identifier:          qgKyxXEEPnoNsneelKBKg1nmAZkeC3RJVzz8oGLLK8w=
Subject key identifier:   A7:E2:CE:2F:9F:1D:B0:B0:B0:FB:99:94:AD:D6:5C:4E:4B:EE:B5:0F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584FAF5888B6FD104546E800C780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbf96b72-d062-3ac2-a3c0-751cd83bd60b.roa
Signing time:             Sat 31 Oct 2026 13:00:13 +0000
ROA not before:           Sat 31 Oct 2026 13:00:13 +0000
ROA not after:            Fri 29 Jan 2027 14:00:13 +0000
asID:                     31898
IP address blocks:        2603:c010:a000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:af:58:88:b6:fd:10:45:46:e8:00:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Oct 31 13:00:13 2026 GMT
            Not After : Jan 29 14:00:13 2027 GMT
        Subject: CN=5e5de942-5a4c-4341-9e7c-54be75779d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:aa:03:b5:f0:d2:26:f2:88:d6:b5:f1:05:
                    cc:3e:7a:97:f0:b5:95:da:de:be:93:80:b2:04:4f:
                    7e:72:1d:42:a9:54:c1:af:80:d8:90:70:e6:94:19:
                    9e:70:76:d6:e9:c2:36:30:5a:25:c0:ca:7d:99:0c:
                    ba:e9:17:5a:4b:d7:54:f0:63:04:9e:ca:75:4a:73:
                    5b:b1:b9:2b:10:b1:49:c6:34:4c:26:f0:74:ba:05:
                    5a:9f:9a:ac:94:dd:96:8b:96:d8:ec:79:29:69:b3:
                    43:7a:5a:da:4a:01:ca:52:b2:0f:00:b9:6a:25:61:
                    a6:28:7c:a8:c6:e7:23:4c:4e:f9:3e:13:70:fc:fc:
                    d5:e7:ac:5a:94:20:80:e7:58:d6:8d:e6:f3:22:a4:
                    6b:a7:5b:bb:9d:bc:23:d5:6b:88:ed:2c:c4:76:70:
                    9d:6d:7f:9a:dc:52:5c:52:e6:1e:3e:f1:2a:9c:13:
                    87:ce:36:e2:72:e0:43:45:05:08:fe:b5:5d:25:29:
                    e2:c2:57:ba:32:c1:0b:41:ee:24:eb:7e:98:c5:e8:
                    e3:77:dd:d2:9b:56:6b:41:13:ff:d8:e7:18:13:be:
                    fd:1f:38:c9:6b:2f:55:dd:aa:43:04:12:a0:22:e3:
                    30:79:ee:dd:4d:c6:06:43:e7:56:b2:e5:8a:cd:e2:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E2:CE:2F:9F:1D:B0:B0:B0:FB:99:94:AD:D6:5C:4E:4B:EE:B5:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbf96b72-d062-3ac2-a3c0-751cd83bd60b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c010:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:db:c0:01:a3:e8:71:83:63:19:59:53:85:7b:a7:b4:a2:18:
         cf:07:44:c5:28:2e:1f:5c:60:b8:3d:1c:ce:20:f9:dc:c8:00:
         df:22:bc:66:8d:e0:d5:b2:38:fa:4e:ba:66:09:3e:3d:0c:dd:
         d8:56:d3:eb:d6:f9:1d:02:23:4d:36:06:58:68:a9:27:6b:63:
         1e:b8:cc:fc:1e:4d:92:f7:b3:7f:d5:6f:d6:34:e3:a3:6f:38:
         02:bd:81:bc:61:f2:af:6a:c1:2c:aa:a2:3e:d5:a1:a5:fc:90:
         52:b6:49:6c:7c:6c:eb:16:c6:5b:54:68:27:6a:a3:0e:e2:6b:
         44:08:8e:c0:3b:d7:a1:8e:cf:03:e3:d3:63:7e:92:f5:13:f1:
         e8:35:29:70:02:33:94:f7:13:c4:0f:52:f5:6b:bf:6d:3d:02:
         63:3d:fe:5c:e9:89:58:7d:23:7a:c0:2d:91:f9:7d:4f:06:d5:
         b1:2e:dd:8d:9b:a7:a8:c5:61:98:fc:9d:88:79:f8:fd:9d:04:
         05:95:ae:26:69:50:ff:f2:36:47:39:89:96:92:f1:0f:d7:58:
         e6:a5:69:22:a9:ce:10:0a:79:7b:c8:66:82:04:65:ec:fa:ed:
         3b:69:82:e5:ac:21:44:6b:11:53:25:65:35:a9:6a:31:3d:f3:
         c8:b3:08:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:20:28 2026 by rpki-client