Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3db740a-ac61-324a-9054-4c3400dd613d.roa
File:                     f3db740a-ac61-324a-9054-4c3400dd613d.roa (raw, json)
Hash identifier:          xWPLKiArxTK/XKgh+uNsOT+sylZgcuPZCl1QRDK2u3w=
Subject key identifier:   FF:A0:59:B3:F0:EF:18:B8:4C:B4:A1:C0:84:DA:04:CB:CF:78:F9:ED
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B34C7BC03DE260619C10DCF00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3db740a-ac61-324a-9054-4c3400dd613d.roa
Signing time:             Mon 15 Sep 2025 20:12:10 +0000
ROA not before:           Mon 15 Sep 2025 20:12:10 +0000
ROA not after:            Sun 14 Dec 2025 21:12:10 +0000
asID:                     54253
IP address blocks:        2603:c0dc:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:34:c7:bc:03:de:26:06:19:c1:0d:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 15 20:12:10 2025 GMT
            Not After : Dec 14 21:12:10 2025 GMT
        Subject: CN=de0d5960-1dcc-4547-b770-4422b4b869b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:f3:5c:83:e0:8a:29:27:b8:d1:cb:56:fb:
                    a7:94:cc:50:bd:ce:1b:14:81:29:78:c3:15:93:e4:
                    73:c6:6c:03:c5:76:a1:8e:b9:46:65:94:e8:45:7d:
                    bb:db:b6:3a:2c:3c:e1:92:35:1e:d4:0f:b6:8e:3a:
                    f0:54:bc:43:57:49:68:e2:3c:ee:7f:6b:e6:a6:bd:
                    ac:4d:4d:6a:f1:ac:79:5c:6e:8a:ac:de:e7:87:8c:
                    00:c8:61:f4:5d:2c:f1:1c:e2:fd:cc:86:1b:e0:63:
                    42:c1:8a:11:07:1a:1a:ac:4d:47:32:e3:12:d7:b7:
                    bc:03:4d:58:3c:21:e2:62:28:71:c6:6c:8d:90:0c:
                    80:c2:87:a6:34:7d:c9:18:bc:d7:49:75:84:00:cf:
                    74:73:db:b1:a0:6b:8d:2d:78:2c:6c:7f:a4:a4:da:
                    24:2d:4e:c5:e3:35:0a:cd:05:84:c7:73:ab:13:19:
                    51:e8:71:13:30:41:d6:e9:dc:50:ee:67:73:41:08:
                    dd:8e:1e:25:34:5c:a3:28:a4:ab:de:75:63:f3:41:
                    83:1b:c8:12:d2:fa:c7:7b:50:19:e6:e7:a6:24:e6:
                    20:ca:7c:fe:e7:4a:40:7d:1f:6b:93:c4:1f:25:c2:
                    70:17:be:34:03:a9:3a:7f:f3:1f:c8:8c:18:99:18:
                    29:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A0:59:B3:F0:EF:18:B8:4C:B4:A1:C0:84:DA:04:CB:CF:78:F9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3db740a-ac61-324a-9054-4c3400dd613d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0dc:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:27:41:53:71:bd:b0:97:ae:1c:83:bf:02:33:a3:05:db:d8:
         71:6d:84:07:65:38:a1:36:b7:14:91:ce:11:e2:d8:fe:d9:44:
         ec:25:bb:9b:44:a5:1e:75:91:ed:b7:ff:58:f3:2f:bf:f0:45:
         99:79:3f:87:e0:0b:19:34:14:db:aa:4b:f0:a8:87:56:f1:0f:
         c8:d0:ce:12:b0:bc:9b:da:b9:bc:24:c3:00:72:8e:6e:35:64:
         47:57:77:15:76:b2:cd:c6:f9:31:ae:07:14:f4:c2:29:44:6d:
         23:b6:04:95:a5:1b:21:5b:69:89:ba:12:d1:45:c4:94:2c:e0:
         70:bc:5d:ba:9c:58:bd:aa:26:e7:55:1c:88:5d:80:67:e7:18:
         18:1a:e6:4b:57:cc:ff:93:f1:bf:9a:6b:1c:43:c5:d7:58:bf:
         b3:c1:25:4d:9c:0a:99:3b:71:50:86:d1:4f:c7:6f:29:c0:10:
         70:19:a3:de:e9:6c:27:69:5b:8e:6a:43:ff:0a:64:0c:be:53:
         9d:12:ea:dc:c1:90:00:00:7a:a2:4d:39:73:e1:d8:30:e4:07:
         ad:db:c5:be:01:fa:9f:7b:be:dc:58:c6:62:b3:94:a2:8e:a0:
         18:f7:cb:79:35:bb:42:15:ef:8b:2c:98:e2:0d:1c:85:f5:20:
         b9:ad:1c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:14:00 2025 by rpki-client