Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0fc4054b-0d52-3379-9379-8238db06d191.roa
File:                     0fc4054b-0d52-3379-9379-8238db06d191.roa (raw, json)
Hash identifier:          FgaLOAUF5FpjwUszSve6syg5SvrPglz7EOkfO9J7PfA=
Subject key identifier:   A3:36:A8:22:A8:81:39:51:0B:FA:70:32:42:E2:CE:5E:B3:26:9D:CD
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B29EEC8662B916F503D76F780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0fc4054b-0d52-3379-9379-8238db06d191.roa
Signing time:             Thu 11 Sep 2025 22:56:58 +0000
ROA not before:           Thu 11 Sep 2025 22:56:58 +0000
ROA not after:            Wed 10 Dec 2025 23:56:58 +0000
asID:                     54253
IP address blocks:        2603:c080:200::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:ee:c8:66:2b:91:6f:50:3d:76:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 11 22:56:58 2025 GMT
            Not After : Dec 10 23:56:58 2025 GMT
        Subject: CN=6041c35c-898a-42e1-b38c-7b25752ad93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2e:50:e7:e1:5f:41:ef:b1:c9:c0:84:60:26:
                    7d:a4:fd:55:23:1b:5f:5b:03:60:24:ae:77:12:44:
                    85:af:73:92:01:81:24:83:35:22:30:13:26:2f:0e:
                    2b:de:86:d8:29:d2:48:fc:fc:5a:08:1b:e6:2b:10:
                    64:1e:31:10:c3:ce:8e:ca:a0:5b:90:b3:5a:43:ab:
                    40:4d:dc:e8:21:da:a3:14:2c:ce:13:30:9d:46:dc:
                    85:cf:ed:dd:0d:60:5a:47:23:b4:30:78:6c:7a:38:
                    4c:61:17:d7:34:25:c1:50:f8:4a:26:fc:ae:da:29:
                    a8:66:cb:e5:25:04:72:80:56:2b:8b:3d:98:5e:01:
                    fa:a8:a0:1c:ad:fc:4c:7a:c2:a2:98:73:f2:7e:32:
                    56:04:fa:8a:b1:7a:b5:37:55:62:5c:f3:fe:46:98:
                    c3:10:ea:b2:96:46:11:55:d0:0f:12:89:38:c2:17:
                    0d:c5:c6:09:5b:1f:5a:08:2d:68:45:d1:cf:62:f3:
                    5c:f5:2d:d4:23:dc:b2:7e:51:e3:5b:ea:17:02:9f:
                    33:ad:03:6f:2a:85:c6:3a:ac:cf:50:3c:cd:df:70:
                    c7:38:17:c2:90:5a:7b:19:b1:fc:91:ae:31:fb:13:
                    27:ed:bb:a7:68:33:f8:4d:6c:e0:9a:8c:18:21:b0:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:36:A8:22:A8:81:39:51:0B:FA:70:32:42:E2:CE:5E:B3:26:9D:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0fc4054b-0d52-3379-9379-8238db06d191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c080:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:84:d9:69:17:59:84:04:b8:4e:f5:8a:5b:07:ca:46:01:d4:
         f8:ec:57:5a:28:1d:bf:8e:3e:cd:71:27:79:be:1b:e1:52:f4:
         fd:cf:52:56:35:90:25:05:bf:c5:40:a2:a4:d1:bb:46:6f:d3:
         18:b9:fc:47:c7:b4:b1:5e:98:88:08:c4:c1:76:de:fd:d3:f6:
         bb:62:a8:ba:a8:49:8a:e1:e4:ce:3c:b8:dc:8a:49:e4:a8:27:
         ed:ff:e3:e2:02:40:e5:d3:6d:85:6d:e9:f0:4d:85:6b:3b:8e:
         2e:fb:2c:83:5e:46:65:a4:b1:72:8e:28:b2:eb:6f:64:75:cc:
         dc:11:f0:cc:dc:a5:d5:37:54:3b:a7:c2:e7:99:35:b5:a5:e0:
         b8:48:51:7f:df:f1:a1:e3:58:4d:18:91:83:ce:4b:8f:68:62:
         fc:f8:d0:9f:a5:0a:a8:dd:06:b7:20:1b:82:5c:03:32:72:e8:
         0d:e5:57:90:a0:f6:8d:45:e5:55:77:b2:b8:06:19:73:b3:bb:
         5d:62:b4:93:4f:92:e4:de:6e:0c:75:96:2d:24:98:25:0d:a0:
         6a:cd:f9:10:ff:dd:b6:3e:87:b0:f8:ca:67:ac:a7:c3:5e:71:
         8e:c8:a1:ee:ae:b2:f4:3e:de:e7:dc:06:17:82:5d:10:89:63:
         34:ac:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:13:59 2025 by rpki-client