Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01804a89-f2c4-3366-a566-5bd8a2470436.roa
File:                     01804a89-f2c4-3366-a566-5bd8a2470436.roa (raw, json)
Hash identifier:          oQ7uzYcvgyklctrK6KZYNOKgjrTeZP7EYVkiNLxoDG0=
Subject key identifier:   B9:43:B0:93:7D:A6:2A:94:48:57:35:FB:BD:CD:3A:00:8B:5E:E2:AB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD4C060E29E02B8C953760A80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01804a89-f2c4-3366-a566-5bd8a2470436.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        2603:c0dc::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:60:e2:9e:02:b8:c9:53:76:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=8fdc083a-b984-4b47-90b8-20c2c62ad8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:19:64:1d:88:ba:80:a7:17:57:19:4b:2b:
                    04:d9:a0:dc:9d:ca:f6:78:47:4f:41:7d:84:11:71:
                    21:a0:0e:8d:1f:f8:3b:c2:ca:a6:c8:f5:fb:5e:5d:
                    13:8f:fb:b1:aa:29:b7:17:db:de:3c:99:60:3f:d3:
                    1d:5f:1f:04:f1:68:48:7f:98:b4:b0:50:e4:d2:39:
                    2b:16:43:60:45:47:09:cb:16:6d:1a:5d:55:60:a9:
                    e6:40:d7:e1:f9:18:71:b5:d9:8c:c9:0a:e2:9a:ea:
                    25:5f:24:d0:04:ae:af:2f:bb:70:5d:ed:be:a2:8e:
                    04:f8:92:eb:a4:1e:3a:73:6e:63:54:79:99:16:85:
                    0d:cc:92:c0:ab:b0:f8:3b:fb:51:48:f7:ea:fd:c1:
                    1a:a5:c4:48:c6:8f:3a:50:5d:77:e6:43:82:4c:06:
                    77:57:5a:8b:30:ed:a9:c8:4b:9a:e2:ef:40:a9:bf:
                    6e:a1:3d:95:81:99:b6:45:56:ee:0d:8f:3e:c4:5d:
                    26:9d:9b:38:1a:7e:c4:9e:42:90:1f:96:50:0e:62:
                    11:b4:9f:2e:9c:ac:16:21:7a:ee:f4:de:40:26:6f:
                    bc:6b:38:18:d9:48:fb:1a:36:d6:db:05:0f:66:81:
                    7e:03:80:1d:6c:55:ea:d7:45:77:ff:b3:69:63:ac:
                    e1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:43:B0:93:7D:A6:2A:94:48:57:35:FB:BD:CD:3A:00:8B:5E:E2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01804a89-f2c4-3366-a566-5bd8a2470436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0dc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:00:e8:54:4f:63:f8:8e:c4:93:a7:69:9f:e0:9a:35:44:7a:
         72:58:f2:5c:a8:60:d4:4e:82:b0:b0:05:3b:38:b8:2a:56:4d:
         c8:56:e7:c1:ef:71:c8:4b:90:84:65:82:73:ee:d2:9f:07:03:
         9a:3a:06:ba:06:4e:18:cd:52:ef:e1:ab:d6:7f:25:87:8d:35:
         b3:57:1d:75:42:1b:2a:3d:a6:02:c3:52:09:18:b0:55:c1:ae:
         c2:db:6f:a4:75:e6:c9:98:4f:e4:00:7f:1c:42:9f:7c:70:1c:
         8f:9a:06:7c:a2:37:4f:7d:5a:04:75:de:95:b6:19:c9:4b:53:
         36:c8:6d:da:60:69:69:18:04:28:7a:89:5e:9c:de:9e:a6:cc:
         1b:37:82:44:31:b5:02:fe:ba:c6:21:c4:e0:9d:ca:08:a4:1a:
         95:46:66:bf:b5:fd:5b:a5:3e:d1:0c:69:5a:fd:4b:63:fd:b7:
         a5:a3:69:d3:a2:96:5c:ec:14:76:4e:59:20:e8:22:72:87:38:
         e4:50:49:84:19:4d:a8:2b:27:98:44:c4:08:98:2f:9f:4a:95:
         18:03:2f:d0:25:c2:48:2a:00:c1:26:e4:e7:81:c3:43:a6:60:
         13:80:b5:85:50:23:bc:b7:81:3f:27:1f:f1:66:a7:00:8c:4f:
         b1:91:3b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:06:08 2026 by rpki-client