Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/03414c25-6008-3395-bfc0-9e3381606bab.roa
File:                     03414c25-6008-3395-bfc0-9e3381606bab.roa (raw, json)
Hash identifier:          ro2meKITnhrOa4Btcv/PLHgYN3NYWizzBnBRWhYtFak=
Subject key identifier:   B6:F9:D2:E3:0B:17:89:33:4C:01:55:FD:F5:F2:12:8F:41:EA:D6:D2
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6DD4C27E3E109B056E71FA40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/03414c25-6008-3395-bfc0-9e3381606bab.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c001:2c00::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c2:7e:3e:10:9b:05:6e:71:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=152b72b3-02a1-431d-a0d5-2149e97f2727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:06:59:08:6d:e2:ad:98:3e:ba:3a:87:27:35:
                    f8:01:bf:b2:a1:54:88:5a:ce:73:c2:36:55:7c:5d:
                    fe:28:97:5b:99:7a:5f:3e:83:c5:ae:cd:f5:8b:fb:
                    1a:71:09:0d:a6:ea:bc:ad:4e:81:73:67:c8:9c:c7:
                    19:5e:13:f4:88:85:52:8b:f9:07:43:3e:98:c5:ca:
                    f3:64:e1:af:ec:88:44:27:42:52:81:c5:bd:a4:82:
                    26:08:07:8f:44:07:9d:34:39:2c:96:68:f5:b6:a9:
                    99:c1:17:63:c5:45:57:28:f5:58:58:bc:38:bd:0b:
                    c8:b1:69:4c:b8:a8:74:07:1f:80:e6:db:c4:9e:c3:
                    6e:0c:18:fa:98:f3:4f:20:32:f2:18:44:31:16:3c:
                    e6:6c:f5:ca:19:40:61:a1:35:d2:8e:d8:c9:f9:3b:
                    d7:92:26:22:cd:fc:0e:f4:10:c8:90:d3:fc:ff:12:
                    72:07:ef:22:11:d4:b4:88:67:58:12:0c:b9:a6:33:
                    b2:68:a8:c0:a6:44:f6:33:d0:f3:7d:a5:04:80:f6:
                    87:9f:84:80:a9:88:4b:97:f6:d6:f3:07:76:40:30:
                    eb:75:79:84:f5:1c:6d:79:b3:80:18:aa:7a:02:da:
                    03:19:63:37:2a:7b:54:a1:26:f6:10:38:a4:85:19:
                    74:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F9:D2:E3:0B:17:89:33:4C:01:55:FD:F5:F2:12:8F:41:EA:D6:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/03414c25-6008-3395-bfc0-9e3381606bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:2c00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:5e:43:34:c2:d7:75:17:3c:b1:b2:31:11:4e:91:32:25:b5:
         49:fe:0b:ec:99:6a:b2:a2:4a:c0:21:94:4c:aa:53:f5:ab:cc:
         55:90:fc:bd:78:ac:94:84:44:68:08:f9:f3:a9:35:49:d0:b9:
         2c:5f:7b:da:45:e4:31:36:61:aa:28:6d:21:d3:24:b1:4a:5d:
         f0:c3:61:09:73:34:bb:7c:0e:05:d2:06:a5:23:d7:a8:67:cb:
         bf:42:12:8d:4c:06:67:20:70:26:c0:b9:9b:89:e4:31:54:b4:
         8d:57:64:f4:ff:f2:4f:9a:f7:57:1a:2e:73:1b:bc:95:c3:31:
         fb:1d:f1:4a:7f:f6:cf:6c:74:ff:7c:4b:22:1d:af:aa:8a:31:
         71:37:01:fd:f1:ae:90:c5:73:ed:d7:b1:a3:63:4d:e3:f4:a4:
         71:cf:e0:ed:e4:b3:17:7a:9e:ad:9d:eb:fe:23:0d:a9:03:b5:
         9b:d7:5d:2b:bf:dc:b7:ae:2b:0c:1b:53:55:94:60:70:eb:b3:
         c3:23:8e:e2:33:d9:81:2f:8b:30:a9:bb:f5:7c:20:e3:bd:90:
         be:51:e5:8c:8e:dc:ce:98:51:f5:62:33:bc:51:a4:ac:25:d4:
         07:0f:3a:3f:50:36:f7:3e:e7:28:37:98:83:76:04:ac:59:3f:
         c3:00:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:49:39 2026 by rpki-client