Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f75ea17a-6540-3e6c-9794-b32ff13a284e.roa
File:                     f75ea17a-6540-3e6c-9794-b32ff13a284e.roa (raw, json)
Hash identifier:          iKMmUrtaQHXinpXIWZ2EROSOI3NElJvZABlchYQxoDA=
Subject key identifier:   51:B2:3C:6A:F0:99:D4:58:D1:41:E3:EA:EB:90:67:EC:49:61:90:E9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AECB024C2B86CDAB01AE55140
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f75ea17a-6540-3e6c-9794-b32ff13a284e.roa
Signing time:             Thu 21 Aug 2025 00:26:26 +0000
ROA not before:           Thu 21 Aug 2025 00:26:26 +0000
ROA not after:            Wed 19 Nov 2025 01:26:26 +0000
asID:                     31898
IP address blocks:        2603:c002:1a00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:b0:24:c2:b8:6c:da:b0:1a:e5:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 21 00:26:26 2025 GMT
            Not After : Nov 19 01:26:26 2025 GMT
        Subject: CN=f5a94c87-f81d-43a1-a87a-5fd698993dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:9f:f0:01:14:66:a3:78:af:a0:48:04:37:
                    d0:e9:54:cf:69:6a:f0:0c:9f:09:cd:ee:f7:44:55:
                    5e:1f:3e:3e:46:9b:da:48:00:c1:b4:d5:75:74:6a:
                    97:22:29:ea:30:8e:4c:ea:05:07:7f:3e:6c:e4:7d:
                    72:b6:e1:e9:a5:53:ef:46:e7:0f:a7:68:95:c5:bb:
                    26:d5:02:53:8a:f1:41:67:84:23:a1:4f:66:52:af:
                    8d:dc:52:a7:bd:81:b8:b4:87:58:a0:33:f4:ba:33:
                    20:b3:f5:16:2b:86:5b:e8:bd:cc:83:29:70:c0:45:
                    60:62:a0:45:bd:13:ae:15:e7:9a:3a:cc:8e:fe:88:
                    35:35:97:1b:f0:f1:4d:47:bf:93:95:7e:50:66:84:
                    5b:1a:31:fc:29:2d:b9:1a:8f:d5:34:40:fc:f9:f0:
                    66:0b:25:5d:86:73:46:15:b6:d7:b8:2a:5e:2b:bd:
                    ad:da:29:80:6e:c5:52:85:9d:30:f8:b0:97:66:6a:
                    ea:4f:0e:ef:e0:fa:97:d2:f4:5d:65:37:36:65:cd:
                    98:b5:9e:0b:e2:fc:35:2e:d0:29:12:20:95:63:32:
                    3e:35:7b:ac:7a:eb:07:51:54:9f:2f:de:ef:d8:29:
                    0e:cf:16:43:a3:dd:d3:e5:a2:fe:b7:bf:27:e5:3d:
                    4f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B2:3C:6A:F0:99:D4:58:D1:41:E3:EA:EB:90:67:EC:49:61:90:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f75ea17a-6540-3e6c-9794-b32ff13a284e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:1a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:ac:d0:3a:6b:56:04:41:a7:24:33:fd:40:50:68:26:80:81:
         60:eb:3b:9f:8f:9f:08:2d:1b:0d:82:4e:90:21:35:a3:84:70:
         bb:8a:e4:3f:6f:77:3f:47:57:6b:78:f8:89:04:70:39:6e:59:
         02:65:b6:15:cd:f4:1c:44:71:41:d7:5e:5e:25:ee:07:62:a9:
         c4:1c:6e:8f:3f:08:86:db:60:da:c1:4c:27:63:a9:c9:26:b2:
         d3:10:fc:9e:db:e5:bb:d8:61:73:ba:ba:fd:0b:27:40:21:72:
         a5:a7:9f:8b:71:ab:4a:45:a4:fa:22:53:26:28:12:92:80:8c:
         23:20:c0:d4:1b:68:55:72:80:f8:af:37:ea:11:1c:0b:3a:78:
         07:cb:97:b5:0e:52:d6:87:6b:ef:3e:66:cf:da:5b:5d:bd:50:
         99:2b:7e:e0:b3:cc:60:54:cd:77:f6:8a:68:e6:b1:11:cf:fc:
         b4:21:0f:87:c8:ab:3f:90:f3:68:53:5f:d4:e4:1e:44:97:6b:
         f4:b3:04:f7:e3:26:74:d7:a4:1a:06:26:cd:8b:da:1d:e2:7e:
         97:2e:6c:7c:03:50:e7:42:b1:d8:94:75:63:9b:5e:a7:e0:13:
         8d:29:e2:11:3b:09:4c:8b:86:ba:5d:ee:43:3c:ab:a4:f4:d2:
         da:12:6c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:16 2025 by rpki-client