Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/977fed49-a2b5-32a4-92dd-1622fccf9efe.roa
File:                     977fed49-a2b5-32a4-92dd-1622fccf9efe.roa (raw, json)
Hash identifier:          BiJxwYQJM9iE1DSjtx2y7iBYzWYwVj8tCbNJJ9LukU8=
Subject key identifier:   E0:9E:E6:D5:E9:3E:42:0D:21:5B:5B:7B:34:5E:4C:65:4B:7F:5F:D2
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B34AB04A44629CCDB1EBD4780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/977fed49-a2b5-32a4-92dd-1622fccf9efe.roa
Signing time:             Mon 15 Sep 2025 19:14:19 +0000
ROA not before:           Mon 15 Sep 2025 19:14:19 +0000
ROA not after:            Sun 14 Dec 2025 20:14:19 +0000
asID:                     54253
IP address blocks:        2603:c0c4:2800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:34:ab:04:a4:46:29:cc:db:1e:bd:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 15 19:14:19 2025 GMT
            Not After : Dec 14 20:14:19 2025 GMT
        Subject: CN=4d966700-9835-4e23-bba8-6c7b231b72e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:77:bc:93:8d:85:de:35:26:2a:5f:fd:76:7d:
                    00:98:25:e8:1d:ad:71:d2:61:45:89:a2:c1:84:cb:
                    bf:d8:07:a5:ef:ea:64:61:8f:bb:0c:52:13:a1:ab:
                    67:15:14:96:57:73:89:10:cd:1d:2b:b0:99:3c:15:
                    b1:72:3f:59:ab:6d:bd:d8:a0:0e:61:45:31:3a:f5:
                    51:e6:a8:2a:4e:bc:f4:eb:18:ae:de:14:9b:e1:88:
                    01:3e:94:96:19:57:64:f9:39:5d:cd:91:5a:92:00:
                    a5:d7:83:ef:d1:7f:05:85:d5:69:ec:4c:98:50:de:
                    db:e6:f0:8f:e2:b8:58:d9:27:f2:15:56:10:2b:78:
                    7b:a9:e6:4a:78:e8:e1:4d:ff:3c:a4:03:58:93:ad:
                    87:17:d4:8b:84:dd:9a:e7:d2:f2:70:a6:7e:62:5c:
                    bb:61:38:67:e4:75:1b:3e:4d:1d:29:cd:8b:eb:2c:
                    ad:00:a6:59:19:1b:e8:34:fc:8c:fe:33:3b:5d:3d:
                    43:88:81:b5:75:2b:c6:28:a7:4c:15:66:03:4e:72:
                    8a:fe:5b:31:ba:ac:09:e7:8c:64:61:c6:d6:c0:ea:
                    8e:20:46:da:b7:06:85:f3:61:56:32:af:d9:3f:92:
                    c5:38:d4:52:8c:2f:18:d0:ed:3d:2f:f8:63:74:6e:
                    37:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9E:E6:D5:E9:3E:42:0D:21:5B:5B:7B:34:5E:4C:65:4B:7F:5F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/977fed49-a2b5-32a4-92dd-1622fccf9efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0c4:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c1:de:1e:15:34:aa:1e:e8:67:c9:1f:36:08:94:8b:23:09:
         01:8a:9a:cb:a6:aa:bc:b3:20:82:95:1e:52:38:a1:b1:98:84:
         da:98:25:83:cb:3c:5c:97:51:05:09:b3:08:af:33:a2:22:d8:
         ad:89:d7:b1:a8:c0:0a:1b:6f:de:84:60:23:1a:e3:b6:1c:05:
         eb:92:17:62:83:12:58:5a:ce:2d:8f:6d:39:66:83:ee:87:93:
         7f:f4:45:e8:e9:06:1b:f6:99:54:ba:bd:79:fb:d0:e7:72:04:
         a3:88:5a:a7:12:b3:3f:58:3e:6e:62:9d:12:bb:19:42:42:6c:
         b6:03:02:92:75:11:55:44:b9:60:4e:3d:ea:fb:1a:6e:3e:46:
         f2:fc:a4:f3:2d:53:33:cf:09:d4:53:4d:48:53:f7:0e:04:85:
         61:ef:74:ba:0f:da:81:6b:b2:7f:84:1c:3e:30:9f:03:0f:e8:
         4c:f6:dd:16:ac:84:06:c1:10:cb:cf:b0:e8:b8:21:1a:2a:14:
         b6:5b:ea:34:73:a0:d9:e5:ac:cb:20:54:28:43:42:d1:c7:da:
         8a:04:50:2a:81:49:ad:50:3c:35:fc:b2:14:08:de:d1:78:ca:
         a8:a9:56:10:c2:fd:02:d5:fb:82:3e:f2:b7:63:f2:c9:95:81:
         7e:ec:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:21:11 2025 by rpki-client