Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/043fa4ff-65af-3f66-a83d-006583027a65.roa
File:                     043fa4ff-65af-3f66-a83d-006583027a65.roa (raw, json)
Hash identifier:          vlAxYRBYNCPrBB+euyLXyo+Dx5dJaWDCRFXsr1/ih+4=
Subject key identifier:   D2:F3:A3:6D:BE:12:27:28:F3:7F:C9:B5:3D:3F:00:40:C7:15:54:C4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B2C3C528D780207F1A54072C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/043fa4ff-65af-3f66-a83d-006583027a65.roa
Signing time:             Fri 12 Sep 2025 18:44:49 +0000
ROA not before:           Fri 12 Sep 2025 18:44:49 +0000
ROA not after:            Thu 11 Dec 2025 19:44:49 +0000
asID:                     54253
IP address blocks:        2603:c09c:2800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:3c:52:8d:78:02:07:f1:a5:40:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 12 18:44:49 2025 GMT
            Not After : Dec 11 19:44:49 2025 GMT
        Subject: CN=16182ebc-0da5-4155-ac15-8af57974aa54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:54:81:48:b6:da:d9:52:f6:b7:54:3f:37:
                    50:27:76:02:e3:0c:7a:61:5c:fa:fa:65:44:11:a6:
                    a1:98:57:7c:f4:02:cb:1e:69:61:59:92:03:fe:0c:
                    8b:06:7e:5e:32:d6:c1:37:7e:fe:0f:92:b1:ad:71:
                    20:af:24:86:e9:aa:5b:a7:b8:97:e1:07:24:e5:60:
                    a2:88:68:7f:fc:0e:27:03:72:b1:ce:40:06:c7:c7:
                    99:d1:a3:92:8b:8c:75:09:ad:01:3e:c7:ca:c0:6a:
                    db:e4:88:9c:95:9d:25:1d:cc:55:f4:f7:bc:03:8f:
                    cf:c4:59:12:e9:c5:2e:ff:f3:d6:af:5e:cf:9c:a3:
                    79:63:38:60:fd:56:9d:0d:c6:20:8d:c0:13:70:02:
                    76:30:85:df:c0:b5:24:34:d0:29:44:52:71:2e:df:
                    da:8e:a6:3c:5a:2f:08:a8:69:bd:ce:38:a3:b2:5c:
                    3f:c3:0d:43:fa:a0:10:db:c9:92:ec:b9:5a:7e:4e:
                    8f:47:68:c9:6c:9c:91:0a:22:c9:b7:72:85:6b:1e:
                    90:4b:5f:b2:3f:11:9b:60:ab:bb:84:d3:2c:29:d3:
                    d2:15:40:74:0c:02:a3:e4:42:f4:c7:41:28:a5:c9:
                    7e:68:a7:f4:93:26:48:b7:0b:b0:c7:a1:87:74:ce:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F3:A3:6D:BE:12:27:28:F3:7F:C9:B5:3D:3F:00:40:C7:15:54:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/043fa4ff-65af-3f66-a83d-006583027a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c09c:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:39:ab:c3:fe:a6:f5:8e:60:2e:bf:41:20:17:7c:c1:9f:65:
         0e:07:16:d3:cc:53:8f:d6:ab:4d:c2:79:80:a9:95:c3:5a:78:
         37:d8:fe:65:0d:f3:cc:ac:09:79:c7:85:6a:aa:4f:43:94:e0:
         d3:cd:2d:78:24:4d:68:8d:d6:a8:a9:d3:48:95:09:6b:89:dc:
         47:14:69:5b:7a:49:e6:df:81:ad:6a:0c:4b:ec:e2:5d:22:0c:
         16:f2:06:93:81:b9:4f:11:ce:3b:7b:a4:57:97:18:7f:42:35:
         d7:04:1e:de:93:6b:d7:e5:4e:62:27:61:67:92:3c:67:a5:68:
         94:15:a4:11:05:b5:33:4c:98:b9:63:18:1a:bf:7a:c3:94:e7:
         ba:d5:12:70:bc:f4:a4:93:24:78:ac:fc:5b:b5:57:81:01:ea:
         8f:f4:1d:de:a6:e8:99:1b:aa:fe:7c:41:b9:3d:e4:2f:e9:4c:
         0a:d6:86:75:2c:8f:d1:bc:3f:1d:9b:98:89:0a:f3:ce:dd:aa:
         b2:df:fd:2a:0f:a0:8a:39:75:95:3c:2d:8a:e3:50:66:b5:cd:
         0c:e1:e0:59:6e:02:be:0b:53:7d:ec:4b:47:9c:3e:a7:c8:14:
         c2:8c:be:a8:09:9a:19:8d:6b:09:a8:19:59:aa:5b:56:80:9f:
         23:84:68:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:14:03 2025 by rpki-client