Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f35039aa-bdaf-30bf-889c-ab9b5462746b.roa
File:                     f35039aa-bdaf-30bf-889c-ab9b5462746b.roa (raw, json)
Hash identifier:          eKcDMvvsuvrlvS0Y+bwQijjUiIe9GiWEur78sin05Xw=
Subject key identifier:   11:EC:0B:B8:D2:6F:4E:4C:11:11:D3:81:33:A0:8C:59:A6:E9:22:0C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EF9E2080A74613FEFB8DC2580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f35039aa-bdaf-30bf-889c-ab9b5462746b.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     54253
IP address blocks:        2603:c064:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:08:0a:74:61:3f:ef:b8:dc:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=ddd7699e-95cf-4d30-a813-68f8bc89d4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:71:1e:a6:32:2f:9c:fd:0a:4a:0f:b0:07:
                    e8:81:c5:aa:3d:80:78:a9:fa:f4:bf:f2:42:35:ac:
                    37:29:0d:22:f5:71:12:ce:65:34:e6:42:4b:4b:32:
                    95:18:d7:d6:fd:5c:14:83:2a:81:aa:9f:74:b4:26:
                    84:c2:52:dc:62:7b:e8:49:2b:1f:db:1c:66:f7:f0:
                    73:e3:9e:d3:af:0b:38:19:d2:aa:39:d5:1b:8e:7b:
                    aa:58:f0:6d:72:a9:db:c8:84:7b:8d:9d:3f:e1:8d:
                    80:f1:d3:05:a1:a4:76:69:29:a3:1f:9f:56:b2:3e:
                    e7:3b:0b:8e:5a:72:5b:2e:d3:e7:a2:c3:78:7f:f8:
                    5c:ad:d7:96:5e:c9:a0:a2:84:be:fb:c7:ad:06:34:
                    cc:6b:2f:14:41:38:90:15:b1:ab:70:2a:e2:58:cf:
                    c2:ac:c9:07:3d:79:cc:30:f6:57:da:32:18:1f:4a:
                    6a:ae:f9:46:6b:45:cd:4d:48:0e:72:20:ea:0a:45:
                    85:20:ea:ed:ec:b5:75:69:d9:01:b9:61:a8:26:f3:
                    5e:47:c1:0d:e2:76:ce:c3:fe:b4:5f:ea:a1:99:ab:
                    65:17:11:7a:c5:7b:d1:e3:25:9a:ab:43:8a:f9:cf:
                    d0:8a:6c:6d:ce:e9:aa:aa:e9:7f:6d:d1:bc:2c:2b:
                    6d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EC:0B:B8:D2:6F:4E:4C:11:11:D3:81:33:A0:8C:59:A6:E9:22:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f35039aa-bdaf-30bf-889c-ab9b5462746b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c064:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ed:68:96:c4:ef:bf:f4:71:c3:f6:50:91:3c:a4:be:7f:15:
         5d:71:84:12:c4:c0:4d:65:60:77:d1:a7:3f:e2:18:15:8d:5f:
         52:cc:e7:61:3d:c2:a8:5d:87:24:75:61:09:16:14:a3:1f:86:
         78:5c:b7:ab:7b:75:61:73:a6:41:02:7b:91:96:1c:a6:52:af:
         b3:6a:ec:de:09:08:25:dc:c0:96:6e:9b:14:f2:5d:dd:82:53:
         2d:41:66:33:11:56:da:88:ff:59:6b:bf:e9:61:1e:d9:70:3a:
         40:78:71:c9:19:ea:d4:16:5c:48:d3:4b:2c:7d:59:8e:0f:ad:
         d6:d7:98:11:c7:fa:7f:74:b7:db:02:d5:d7:4e:3b:ba:c4:c8:
         f5:4c:9a:83:fa:8e:7a:0f:81:76:dc:63:4d:00:d9:6b:66:e7:
         91:c4:da:ef:81:30:52:0e:3c:c7:1c:2e:28:e9:3c:13:cd:c1:
         dd:b7:33:94:c5:69:f3:e5:fc:4f:9e:68:04:04:d9:70:3a:b2:
         c9:a7:30:df:cd:3e:a0:b5:0a:2a:eb:e2:c1:9c:ca:9b:ce:ae:
         aa:7d:4b:02:d1:c5:04:19:69:7e:ed:f9:d0:ad:1b:61:64:c7:
         e6:1e:74:33:b3:d3:8a:23:e0:9d:4c:c5:7a:94:da:04:d8:e7:
         d2:5d:0d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:10:42 2026 by rpki-client