Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d51e45c1-c3d6-3d94-920a-5cad3c8fc6c6.roa
File:                     d51e45c1-c3d6-3d94-920a-5cad3c8fc6c6.roa (raw, json)
Hash identifier:          wRjH5abe+3nPa9FfBbDc9VW8n044xOVZ2cSWBFnBMvI=
Subject key identifier:   D2:59:A3:AE:91:7A:C8:EB:8F:D9:62:23:25:55:E2:38:03:5D:34:48
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DCC606C65E1EDB3609CB6E400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d51e45c1-c3d6-3d94-920a-5cad3c8fc6c6.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c08c:2800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:6c:65:e1:ed:b3:60:9c:b6:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=b7a74703-ff0e-4fc7-9243-421f41d45fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:9f:49:ea:fa:7d:7a:9e:2b:a1:43:4f:40:
                    7c:46:dc:ac:7f:e1:24:77:df:e3:7c:80:62:2c:3b:
                    ac:44:04:f6:72:c7:cf:82:8d:4d:62:0c:89:41:f4:
                    5d:4c:f0:92:d2:19:a7:fc:36:a1:0d:aa:5a:94:91:
                    f8:d9:39:71:ea:57:c5:64:1f:88:40:4a:27:61:88:
                    f6:dc:26:37:f3:7b:9b:8d:7b:a4:03:c6:16:d2:48:
                    68:31:6e:50:7e:2b:76:8a:e6:59:ab:a4:9b:31:b0:
                    00:56:aa:d6:13:d3:eb:f0:a1:72:92:0a:99:16:ff:
                    41:2b:fa:8d:c2:64:dd:21:9e:96:77:11:dd:53:a3:
                    54:48:df:d6:8c:cc:fe:ad:2f:4d:a8:73:1d:9c:a4:
                    6d:de:63:30:13:a3:34:33:0b:37:25:46:c4:e7:8e:
                    0a:f5:ac:70:c7:1f:00:97:64:47:ec:7e:3a:c7:de:
                    6a:fc:8b:3f:62:ea:9a:a5:3b:db:d8:10:56:94:5c:
                    b7:5d:62:05:1f:f2:60:a6:03:6a:bb:d9:98:6d:fd:
                    ac:06:f0:8c:af:aa:9b:ff:ed:e7:5d:eb:d6:8e:03:
                    a7:8e:19:df:d2:72:b6:1e:33:b2:03:43:23:dc:b2:
                    19:b1:2a:5d:f0:4c:31:25:85:47:4c:6f:87:02:c6:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:59:A3:AE:91:7A:C8:EB:8F:D9:62:23:25:55:E2:38:03:5D:34:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d51e45c1-c3d6-3d94-920a-5cad3c8fc6c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c08c:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:5f:97:74:48:a3:7f:c1:a8:f9:c0:33:22:84:26:57:bd:ae:
         d3:27:33:76:01:70:0d:da:2f:7a:72:7f:07:aa:28:1b:f2:26:
         37:4a:2e:c8:a6:8d:c0:3d:c1:84:05:86:d7:06:7f:04:9d:4b:
         8b:a8:0f:22:c3:aa:82:3a:6e:3c:c4:9d:08:7a:b1:93:34:6c:
         9d:1a:fe:aa:f1:be:14:a3:21:c4:25:a4:f7:c5:90:dd:d8:47:
         e0:fa:8c:d6:71:ca:d7:41:18:4b:d1:74:d8:1c:34:39:e0:07:
         03:94:b4:16:8a:d7:49:52:9c:e1:b5:c4:78:cf:64:38:91:61:
         bb:63:48:a2:01:4b:77:6b:fa:8a:9a:06:6f:bd:c0:bf:de:3c:
         6b:21:6a:ad:b4:2e:a4:63:28:5f:5d:3c:6a:55:b2:45:b0:60:
         71:78:9f:08:5f:a0:8d:73:f0:67:f4:e3:0a:77:d4:92:e3:c6:
         56:84:77:78:8b:f7:c7:8e:06:7f:66:05:17:04:48:c9:56:14:
         db:7f:9f:fc:c2:17:6c:2a:c6:24:90:26:8d:2d:e8:e3:fb:80:
         df:ec:4d:63:33:e4:46:6c:9e:dd:28:82:9a:1f:2c:76:b9:78:
         84:bf:b4:68:20:d3:8c:ef:51:33:80:59:b7:f6:a5:b7:fa:15:
         41:14:6f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:17:26 2026 by rpki-client