Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db10a3bc-a155-3d48-b49e-9528b771b50c.roa
File:                     db10a3bc-a155-3d48-b49e-9528b771b50c.roa (raw, json)
Hash identifier:          pdnQ94B17wzGSMNI1kqtnJj0XlIvYzveoLeYNI5mgsk=
Subject key identifier:   4B:89:B0:E3:33:E7:11:6B:28:6A:F4:1A:56:C0:94:90:1C:0A:D5:D1
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEDDB8340E79F492878899540
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db10a3bc-a155-3d48-b49e-9528b771b50c.roa
Signing time:             Thu 21 Aug 2025 10:29:38 +0000
ROA not before:           Thu 21 Aug 2025 10:29:38 +0000
ROA not after:            Wed 19 Nov 2025 11:29:38 +0000
asID:                     31898
IP address blocks:        2603:c001:e00::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ed:db:83:40:e7:9f:49:28:78:89:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 21 10:29:38 2025 GMT
            Not After : Nov 19 11:29:38 2025 GMT
        Subject: CN=065a22cd-4d6b-418d-b021-c1d2f0598097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:a0:7f:37:7d:89:50:c3:da:f4:07:d8:a9:
                    32:51:49:9d:03:52:91:a6:a0:13:1b:84:f4:70:a4:
                    77:42:64:d5:1e:2c:ee:ce:cb:e8:24:b3:cd:b9:e5:
                    44:b6:68:34:b8:19:07:57:27:60:82:48:00:59:ac:
                    51:72:d0:a3:f9:84:72:a2:a9:74:e9:00:51:f2:1f:
                    5f:b6:e3:04:00:ff:10:c3:05:d5:ed:16:94:05:6f:
                    54:00:eb:95:d1:ed:2a:be:1a:be:6a:d0:20:fa:6e:
                    cc:62:8c:1e:c4:49:d1:0c:8f:48:cb:2f:ad:aa:41:
                    b8:ca:7c:f4:b2:5b:12:fe:82:ad:e4:e0:c4:6e:4c:
                    b4:c4:66:7b:1d:f4:01:dc:11:7a:d1:a9:51:45:b4:
                    59:75:2c:31:7c:02:67:0c:05:a5:aa:ec:f9:05:4d:
                    57:4f:4b:6a:62:92:f7:19:19:93:af:8b:13:16:c4:
                    58:5a:5b:52:f1:c8:02:d9:68:1c:31:d7:aa:69:1d:
                    13:8a:0d:02:71:20:4f:22:29:5c:2d:74:20:c5:28:
                    22:31:f1:09:3c:f5:2b:41:22:70:d1:b6:46:48:68:
                    6a:e4:e1:f2:ea:d7:d1:13:d6:a7:66:43:e8:d8:47:
                    b8:a4:63:c9:54:20:f0:65:07:be:c4:da:7f:31:4f:
                    00:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:89:B0:E3:33:E7:11:6B:28:6A:F4:1A:56:C0:94:90:1C:0A:D5:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db10a3bc-a155-3d48-b49e-9528b771b50c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:e00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e7:4e:f1:4f:25:5c:3b:d8:de:4f:db:6f:78:c4:03:5a:bc:
         04:1b:e1:f3:d9:86:78:7a:35:59:ff:a7:82:24:44:be:bc:a4:
         a3:6b:79:f6:d0:c7:e7:6a:ed:83:6d:6f:2f:2d:b5:f8:72:55:
         89:76:75:e2:2f:0e:25:76:4e:49:d5:66:22:61:91:73:ee:14:
         69:c9:da:6d:6b:09:7f:ee:23:67:a5:dc:aa:40:86:c9:cb:e9:
         2c:d3:9e:8e:a7:a3:00:9f:05:65:3d:6c:ab:7c:33:c4:8a:bd:
         7e:bf:f2:3c:0d:29:77:a4:d7:f6:f4:e1:f3:16:9a:90:08:57:
         a2:9f:b5:61:51:e7:06:7e:94:db:b5:47:92:ad:d7:ec:e0:a7:
         29:c3:24:ad:d4:ff:59:46:9b:78:4c:1f:5a:65:36:ef:49:07:
         36:6e:43:5d:49:7e:6e:d6:fa:4d:ab:fb:f8:90:37:d7:87:f9:
         70:54:96:a8:d9:b5:51:83:94:7d:0f:03:3e:27:8e:a3:7b:cb:
         2a:6f:a6:6c:29:56:da:df:a9:d8:ac:72:aa:06:0c:68:30:d0:
         77:ab:e5:6a:c0:e3:1a:85:63:da:74:81:61:f5:7a:ba:ec:55:
         c8:ba:7f:86:55:43:7e:fb:0f:bd:a9:3a:94:2c:ce:09:69:01:
         e4:7e:30:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:12 2025 by rpki-client