Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fb5bd49e-a72d-3331-a6fc-4a1ebc5dc044.roa
File:                     fb5bd49e-a72d-3331-a6fc-4a1ebc5dc044.roa (raw, json)
Hash identifier:          CJZo5K6vaFcTZfOVj5en1dDuLOwEv7jRyxkT9FVMaOQ=
Subject key identifier:   04:AA:E1:D7:69:69:32:D1:C3:36:D6:CA:0F:29:15:95:03:D5:4F:AA
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F498AD88C38DDEBABC15BB400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fb5bd49e-a72d-3331-a6fc-4a1ebc5dc044.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c082:4000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:d8:8c:38:dd:eb:ab:c1:5b:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fd7b1e25-a1ee-4171-8fa4-564a06889348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:e1:09:45:77:6a:f0:98:f4:af:15:dd:89:
                    f2:45:b2:d1:32:ef:53:60:8c:8c:29:f8:b7:d2:d6:
                    49:fc:8c:03:31:d3:d7:3d:6a:9f:2d:3c:29:16:8e:
                    fc:47:9d:c0:82:d8:21:e1:27:0d:b6:10:59:04:77:
                    8d:93:26:c3:a0:38:8e:e2:51:9c:b7:d0:0f:21:48:
                    55:0c:2a:81:39:27:fc:c3:30:a2:b7:96:c2:b2:0c:
                    93:80:f1:ff:57:1a:93:dc:62:08:2b:e1:ad:79:4b:
                    7d:32:96:ff:bb:7e:02:f6:fb:5b:a3:7a:46:8f:0c:
                    de:d1:52:18:71:46:04:de:56:91:b1:9c:7a:ff:f1:
                    3c:a5:1e:70:c7:5d:ea:62:27:cd:fa:0d:69:a0:e0:
                    95:c0:e2:1d:23:e5:d8:11:c4:00:6d:c5:f4:0e:04:
                    02:4f:5f:29:36:c9:44:2c:f5:62:de:c4:c3:c4:1d:
                    c8:1c:46:97:dd:67:d3:c7:2c:dc:e8:3d:18:8d:27:
                    66:84:cd:bc:8e:2b:dd:a5:64:05:22:9f:86:6e:f9:
                    f5:7a:ea:7a:94:8d:03:46:2c:35:52:3c:88:c1:d6:
                    5c:7e:10:3d:9b:11:81:e9:ed:6f:a9:36:d2:7d:16:
                    ea:24:62:35:4e:b0:3f:ec:1e:ad:94:f7:b1:c3:c3:
                    56:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AA:E1:D7:69:69:32:D1:C3:36:D6:CA:0F:29:15:95:03:D5:4F:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fb5bd49e-a72d-3331-a6fc-4a1ebc5dc044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c082:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:65:39:69:87:8b:32:1a:d7:48:e7:6e:69:e5:5b:f9:0e:11:
         61:6c:04:95:91:44:ac:6c:52:f7:43:fb:7e:77:79:48:7c:76:
         51:8c:54:74:4e:c6:52:72:ac:5f:47:8b:23:07:2f:90:e2:2a:
         23:59:b1:e9:6e:eb:f2:25:e8:d7:49:49:87:be:6b:28:ae:9e:
         de:51:02:93:4b:6a:48:cb:97:02:b3:0c:4c:a1:b1:65:ed:3d:
         84:23:54:42:d7:67:80:e8:f3:e3:68:a1:1f:96:fb:db:54:48:
         89:9a:ee:09:29:39:8e:e0:07:76:3b:af:f6:6c:49:fc:db:1a:
         e1:da:88:5b:a2:08:47:79:5a:dd:a6:a1:32:5c:94:a6:58:8f:
         57:74:b3:47:81:61:44:07:11:01:3b:df:44:92:1b:95:cd:5f:
         ec:94:ac:ca:60:35:7c:26:a6:65:3d:f5:cb:7f:b4:20:9d:77:
         21:92:d8:66:fc:5c:74:f4:ba:91:6a:ed:c5:f4:42:9e:77:2a:
         50:94:9d:f7:02:6c:f1:7c:69:54:6a:69:94:d4:0f:4a:ac:9e:
         c1:13:16:30:1c:b5:e1:4b:38:14:ae:92:dd:c9:78:c8:89:d9:
         90:3d:9e:33:99:59:2f:b8:21:c3:ec:20:21:07:78:2d:bc:fe:
         46:fd:ec:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:03:07 2026 by rpki-client