Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/de77bbf4-c3f4-3e57-af32-cf310eb07c45.roa
File:                     de77bbf4-c3f4-3e57-af32-cf310eb07c45.roa (raw, json)
Hash identifier:          r887pdgAh6bfO8rVvnQjQzYCtFH847TUmk43kfWt6t4=
Subject key identifier:   99:03:82:BC:7E:82:3C:EF:84:21:D8:1B:90:A4:B0:1F:FD:BC:CD:9B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B34AAF410AB68C9E2AA0B3E00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/de77bbf4-c3f4-3e57-af32-cf310eb07c45.roa
Signing time:             Mon 15 Sep 2025 19:14:11 +0000
ROA not before:           Mon 15 Sep 2025 19:14:11 +0000
ROA not after:            Sun 14 Dec 2025 20:14:11 +0000
asID:                     54253
IP address blocks:        2603:c0c2::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:34:aa:f4:10:ab:68:c9:e2:aa:0b:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 15 19:14:11 2025 GMT
            Not After : Dec 14 20:14:11 2025 GMT
        Subject: CN=12bab414-6c45-4267-a9cb-5313032497ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:67:25:66:33:fa:2a:7c:6a:af:8b:fa:a8:42:
                    77:79:f8:cb:86:df:16:88:b6:79:c7:4f:9c:c1:ee:
                    ce:26:60:48:65:7c:91:b9:fa:89:cb:95:45:6c:b6:
                    8e:f6:43:dc:7a:4a:27:dc:97:75:3e:cd:93:46:d8:
                    be:24:5e:a3:c5:40:1e:0c:e2:98:f7:ed:fa:b4:e6:
                    1a:57:f7:8a:e9:85:e6:90:0c:1c:88:26:05:bf:55:
                    37:e0:d0:e5:2a:ca:fb:ce:01:c0:f1:f7:72:85:93:
                    8f:35:5a:a7:f9:3e:82:85:7e:90:69:3d:3d:93:6c:
                    06:47:18:c5:54:7e:42:39:46:c5:56:4c:98:44:e2:
                    c6:61:07:19:89:d7:61:c7:4d:78:12:c5:67:8b:69:
                    09:3f:8b:c1:c1:df:52:db:ea:75:d8:b1:d7:1e:e4:
                    2b:ed:1c:a7:82:5b:1e:0c:e2:f1:8b:52:e0:63:ec:
                    e5:84:79:ed:a1:c9:20:17:2b:4d:83:9a:1d:0f:31:
                    1d:40:a4:cb:89:21:ff:77:be:49:0b:16:45:d6:0c:
                    9d:91:ca:e5:9f:0d:a1:17:05:ff:3b:f5:6f:28:0e:
                    c0:ec:83:ff:fa:e7:a8:c4:b3:79:96:f9:65:dd:76:
                    99:44:9f:4e:6a:35:38:ef:8e:90:68:69:be:19:0b:
                    9d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:03:82:BC:7E:82:3C:EF:84:21:D8:1B:90:A4:B0:1F:FD:BC:CD:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/de77bbf4-c3f4-3e57-af32-cf310eb07c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0c2::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:21:dd:87:6d:2f:7e:05:03:7b:a5:81:14:10:b0:25:b6:4b:
         9d:76:b1:d9:13:ab:9d:26:aa:54:83:ea:1f:fd:93:a0:e8:55:
         3b:03:7d:53:d3:7d:ee:f2:59:24:60:75:e3:60:99:49:5c:52:
         0c:57:e8:58:99:5f:63:ed:32:d8:20:91:0c:6d:dd:0d:0c:b1:
         7c:ae:2a:ae:ed:3c:5a:2d:1e:19:05:bc:1b:91:c1:13:de:83:
         c0:5d:bf:bb:4d:ee:cf:69:25:80:ba:72:e9:b1:6f:97:26:1c:
         15:a2:29:bd:8a:71:99:eb:bd:ef:03:d5:f7:48:43:65:a6:3e:
         03:be:d8:7d:04:1e:ec:d1:55:26:39:ba:1c:65:61:ff:a3:a8:
         47:96:61:20:8e:d0:bd:04:f4:b4:87:c4:07:38:6c:74:ba:3e:
         48:0d:e2:45:a9:db:87:19:da:ee:f0:62:c3:29:01:cc:1a:9c:
         ae:8b:9f:6f:5a:ef:05:13:fc:29:16:3f:b8:3e:27:15:c1:27:
         44:af:aa:4e:a7:02:28:2e:94:2b:68:d9:63:4f:77:82:3c:3b:
         8a:15:e7:d6:ca:4a:54:48:25:68:37:cb:d2:74:67:4b:0c:c0:
         74:c9:04:a4:dd:7f:f5:1f:f1:28:71:13:f6:5c:7f:50:e6:08:
         81:70:25:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:21:14 2025 by rpki-client