Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfc81a38-e383-3c07-826a-f8aa9dd3d698.roa
File:                     bfc81a38-e383-3c07-826a-f8aa9dd3d698.roa (raw, json)
Hash identifier:          MXp3iDM4njwrfbc7mW6XpY1Y+04BHagxXOsyEKmYFI0=
Subject key identifier:   F3:EC:B1:10:FA:07:BB:16:4D:76:51:22:1B:CA:9C:A5:D6:B5:AD:F5
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F1037920A0B38CDE1F11EBF00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfc81a38-e383-3c07-826a-f8aa9dd3d698.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:9600::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:92:0a:0b:38:cd:e1:f1:1e:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=90373f1e-5bdf-40fc-a0f9-c6653ebf88fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:fd:d7:58:e9:1c:96:70:7e:88:ca:7f:ed:
                    c8:c2:55:3b:f6:c6:62:63:08:f7:39:a0:ce:10:85:
                    95:6c:96:07:47:1e:fb:44:13:43:88:a1:9d:5c:cc:
                    24:9b:48:3c:76:60:a9:3c:c0:17:d3:81:68:9c:c7:
                    1e:95:53:1f:99:22:56:d5:f8:e1:23:88:33:0e:d3:
                    f7:e5:09:42:e8:53:7d:93:42:8e:66:b0:1c:db:57:
                    04:03:fe:f2:16:d3:eb:d0:e9:91:6d:2d:90:d9:0f:
                    db:1a:05:cc:fb:0b:f3:9d:8b:63:39:91:f4:59:3a:
                    50:ea:94:ee:dc:f6:69:e0:e2:20:7f:88:e3:20:b0:
                    9a:43:79:8d:c5:22:0a:33:93:4d:33:f6:7d:e4:5c:
                    e7:f2:21:a2:eb:65:15:46:06:29:36:6d:61:36:91:
                    d0:16:f8:64:48:8f:04:40:39:e1:b7:5e:50:c5:8d:
                    9f:80:de:12:08:ee:a1:c0:68:2a:fa:26:72:cd:ab:
                    89:aa:61:c6:10:91:09:fd:b1:75:66:70:91:12:ff:
                    13:ec:6b:bc:3a:fb:0c:e8:ed:7d:82:89:37:07:bc:
                    63:39:dc:b1:f3:ad:94:20:c4:d9:f4:f8:9b:ed:d7:
                    f4:80:d0:5b:a0:62:5b:f7:f3:cf:4f:33:66:ca:93:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EC:B1:10:FA:07:BB:16:4D:76:51:22:1B:CA:9C:A5:D6:B5:AD:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfc81a38-e383-3c07-826a-f8aa9dd3d698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:9600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:31:63:e5:04:cf:7c:ac:07:a7:d6:37:05:e4:ad:60:8c:d1:
         25:d4:fb:5b:b4:79:44:d6:f6:eb:78:c8:64:04:c2:f9:17:1b:
         49:8d:2e:0d:5f:7a:a2:d8:6a:be:a6:0e:54:31:b9:92:84:39:
         97:58:cd:f7:c4:0d:2f:80:11:4e:4d:92:87:e6:16:09:4c:bf:
         41:69:04:9a:9f:ba:6c:d1:86:3d:b2:b9:e1:c6:ef:d8:be:9a:
         4c:39:fc:b1:fe:55:6c:22:70:85:0d:94:9d:46:34:fb:3a:71:
         6a:23:87:d4:44:19:53:e3:7b:06:ff:c3:c4:19:2f:f1:b2:4b:
         2a:36:c1:e3:3a:05:37:4b:73:16:71:3a:5b:2d:df:2e:83:3c:
         12:59:14:81:80:89:05:e2:20:0c:23:a8:99:38:75:b1:ff:47:
         90:6b:a0:38:b8:44:e4:65:f8:93:71:8c:6c:30:45:e9:59:d4:
         e1:ac:23:1e:86:20:bf:cb:b4:86:7f:bb:ab:40:f7:2b:00:c4:
         fc:67:2c:c1:2b:c1:ab:00:13:51:7a:4c:e9:71:83:c7:fd:10:
         ea:73:ab:41:58:b8:17:50:14:8f:d0:fc:72:93:2d:49:2c:57:
         87:69:5a:54:54:5a:86:07:a9:30:06:00:5b:6f:2f:89:53:b0:
         f6:26:37:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:56:52 2026 by rpki-client