Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8503d18-5d78-3cf4-b591-d7db6e1f1c45.roa
File:                     c8503d18-5d78-3cf4-b591-d7db6e1f1c45.roa (raw, json)
Hash identifier:          uZo9a20JUyW9WpkDh1IIPnGEA96oLTxsxIzgF8/sULU=
Subject key identifier:   02:B0:80:73:89:CD:4B:0F:E1:1D:14:C2:6C:A4:73:CA:CA:6B:2E:5A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8D8FE94A2983CB4488334940
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8503d18-5d78-3cf4-b591-d7db6e1f1c45.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     31898
IP address blocks:        2603:c025:8000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:e9:4a:29:83:cb:44:88:33:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=cc93af9e-2b1c-4577-8dd8-acd38186c73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:de:a2:84:5b:a6:fc:17:d4:7a:a9:35:3d:3e:
                    0f:21:ab:23:42:db:f8:6e:db:b2:49:c9:96:f4:68:
                    1d:42:4a:94:7b:e0:16:0a:89:d1:e5:70:c2:6c:3b:
                    00:cd:fe:16:4b:76:8c:50:c6:a5:1a:c6:32:8e:40:
                    91:aa:4d:b2:82:1e:c4:6a:86:f2:7f:1e:e3:d5:a7:
                    74:a3:1d:0a:c8:4f:73:f1:7c:d8:1e:e0:6f:bd:8b:
                    35:bb:96:9e:8b:40:7e:8a:1b:87:f4:73:a2:e5:13:
                    79:d9:d0:32:18:b7:f3:eb:21:71:f3:10:1c:af:c8:
                    e7:a0:3d:d7:90:83:aa:af:81:80:52:fd:b2:7e:d4:
                    65:0d:e8:2c:9a:1f:fa:d2:0d:83:7d:50:b3:82:12:
                    3b:9c:dc:dc:8d:91:7e:3f:80:c4:66:0e:5a:5b:a8:
                    1e:b0:78:a3:df:94:58:e1:84:fb:ff:8b:dd:e0:32:
                    e5:df:f6:29:b5:d7:5f:87:8c:1b:a3:db:74:3c:ac:
                    5b:30:83:a3:e7:fd:e1:77:16:1b:9f:c2:19:24:c4:
                    c6:cd:88:f9:60:81:ca:f4:12:16:99:5f:0c:0e:ff:
                    06:54:e9:87:ee:22:bb:2d:95:c5:79:f5:a5:16:85:
                    e2:64:0a:db:53:36:88:45:06:c2:7f:bb:d5:64:8d:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B0:80:73:89:CD:4B:0F:E1:1D:14:C2:6C:A4:73:CA:CA:6B:2E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8503d18-5d78-3cf4-b591-d7db6e1f1c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c025:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:93:eb:7e:85:42:e1:89:b7:86:ca:8f:cc:55:14:cc:14:1e:
         26:c8:f6:a6:f3:cd:7c:ca:2c:f7:f4:f1:e7:ce:f1:61:31:b6:
         81:da:5f:17:b4:1d:b2:7f:85:00:68:75:e7:ae:d3:5d:20:dd:
         f6:cb:a3:8e:7c:99:30:37:bb:57:ed:3b:6a:3a:7b:9d:c1:b8:
         59:50:6d:89:00:12:03:e8:86:57:40:73:51:df:f4:84:34:b2:
         08:70:cd:8d:dd:05:ad:9d:4b:79:25:a3:a4:93:89:b5:ab:54:
         b6:7f:d7:34:c5:5f:0a:96:d5:d1:a5:9c:5c:b5:ca:66:7b:99:
         a6:2b:92:c6:b0:1c:a1:5b:33:53:91:3e:54:69:64:d0:2e:45:
         3e:3c:be:a6:56:4f:95:23:cc:3f:16:fb:67:9a:fc:46:2d:55:
         1a:55:63:f0:d0:c5:56:94:0a:01:a9:57:d0:04:3c:73:5f:56:
         85:ac:2c:98:0e:ca:40:13:1c:20:df:c4:03:26:73:58:9e:b2:
         96:04:99:36:ed:b5:60:e2:1e:dd:9f:68:e2:b8:93:b5:4c:f4:
         e8:0b:4a:26:6f:3c:aa:e7:a8:3c:9c:2c:4c:f6:1b:7e:94:b9:
         14:8b:4f:4b:ca:29:cc:0f:ef:47:b0:d9:85:27:d0:30:34:26:
         c9:2e:fd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:34:25 2026 by rpki-client