Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d18af67f-af5d-3ce4-9b58-2590acc31e2e.roa
File:                     d18af67f-af5d-3ce4-9b58-2590acc31e2e.roa (raw, json)
Hash identifier:          lmVxV2UBocjQWKFJ7F31SLwt/8iBXM+O4ENKaw+TWHw=
Subject key identifier:   49:A9:0C:08:F0:E3:30:5E:1A:83:9D:41:FD:65:C5:8E:E7:AC:9B:66
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DCC605BCE7E2DBFC6E9630C80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d18af67f-af5d-3ce4-9b58-2590acc31e2e.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c0bc:1200::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:5b:ce:7e:2d:bf:c6:e9:63:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=bb73d40b-d8f9-4f1b-bf28-035cd4c85b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1b:8f:b5:a8:a2:50:e7:c5:89:98:9c:84:12:
                    53:60:e8:b2:7a:ca:87:db:b6:53:1d:67:fa:7b:11:
                    7b:04:e2:09:06:c5:be:5a:d1:8d:b4:08:83:7e:cd:
                    ec:de:19:16:d4:79:e9:33:72:f6:58:14:4a:ac:4d:
                    0e:b7:0e:30:38:9a:7f:cb:28:f5:1f:fe:73:a6:21:
                    da:27:ea:3c:b3:9f:6f:28:d6:f9:a6:fd:1f:36:92:
                    0f:bb:1a:18:47:3f:a0:e3:f1:43:ce:ef:48:bc:1f:
                    15:f0:5f:b7:14:2b:d4:a0:09:55:81:66:96:a0:43:
                    06:5d:77:3e:b3:7a:0d:95:7f:e5:27:86:f8:c9:25:
                    72:f5:04:34:55:dd:c2:9f:dd:57:5a:18:46:ed:6d:
                    60:95:37:dd:94:0b:1d:51:1a:b1:55:ad:88:40:26:
                    b7:ef:6f:10:cf:f4:c9:7e:2b:2b:be:3e:23:d6:08:
                    88:88:60:d6:15:a6:7d:e7:5c:07:50:3b:86:e3:9c:
                    12:56:39:4b:6f:15:68:e3:6d:a0:87:47:d7:97:ca:
                    8b:48:e9:63:eb:02:b6:a0:09:cd:03:dd:2e:0e:f2:
                    78:36:8d:33:84:88:74:01:fa:ab:d9:f1:2d:64:e3:
                    0b:40:22:82:f1:8d:0b:63:c5:2a:63:6a:ed:00:49:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A9:0C:08:F0:E3:30:5E:1A:83:9D:41:FD:65:C5:8E:E7:AC:9B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d18af67f-af5d-3ce4-9b58-2590acc31e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0bc:1200::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:2f:fa:63:1f:66:80:2d:fc:da:53:49:12:f9:ea:b6:54:dd:
         6f:f9:9f:a0:1a:e9:9d:61:0a:47:ef:52:d1:bc:6f:e4:dd:2e:
         63:fb:ad:0f:bb:43:bd:40:bd:9a:2a:72:df:bf:87:ef:bd:be:
         14:d9:53:37:ea:81:b1:a3:cd:51:4d:3a:39:03:45:14:09:49:
         65:46:d9:c6:66:a8:6f:a5:43:2a:92:ed:a6:6d:e4:ac:00:a8:
         2c:f9:e0:cf:5e:f8:80:81:52:df:04:77:3f:8f:5b:c7:80:3b:
         91:66:52:a9:56:cf:61:b0:94:a2:9a:04:ae:63:4a:50:88:e7:
         2d:a3:a1:6c:f8:4b:04:c2:ef:56:73:42:ad:fb:a6:e1:fb:ce:
         05:e5:3c:9a:49:eb:cc:44:3e:31:c7:34:d3:6b:25:ed:aa:70:
         fb:2d:0a:6c:94:fe:e2:5c:81:c1:ce:eb:c8:6c:66:83:79:d3:
         c8:ba:09:e7:81:b3:8f:7c:25:da:3a:f8:66:86:3d:b8:0e:b2:
         01:ae:9e:e0:95:b2:e4:2f:e0:03:ad:fd:21:c3:3c:3c:02:50:
         36:2a:b4:6a:33:9b:99:f9:66:ec:96:c5:ed:18:6b:db:bc:62:
         e8:7e:75:02:8e:07:d5:cc:1f:ff:a8:42:06:b1:59:ad:c0:8f:
         8a:50:33:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:20 2026 by rpki-client