Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0a102431-338a-3d80-995e-0684429d44e9.roa
File:                     0a102431-338a-3d80-995e-0684429d44e9.roa (raw, json)
Hash identifier:          rtiOe3OqPskv3b30wlR7nw6fz70lno0LZt2p4ct4JPo=
Subject key identifier:   78:27:D1:40:75:EB:DD:9B:B8:E3:E0:8D:C3:EC:BC:5B:6F:5D:0F:6C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA5AA98FEF1B3FBDD15E10140
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0a102431-338a-3d80-995e-0684429d44e9.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     31898
IP address blocks:        2603:c001:5600::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:98:fe:f1:b3:fb:dd:15:e1:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=4569a5ed-619d-4eec-906a-58afdfd82ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dd:c8:1d:c4:fc:17:b2:91:1c:f3:5f:63:6d:
                    49:f0:75:10:17:82:c4:be:a4:d4:77:97:ad:5e:1c:
                    78:bf:5d:76:5f:a8:b8:ed:d5:98:94:3b:98:30:ed:
                    9a:22:b0:f3:2c:13:12:41:1a:0b:02:fe:2d:8c:c7:
                    11:86:d4:ec:12:cd:73:fa:f8:fb:b0:5c:29:e4:f2:
                    89:9e:91:78:88:84:22:a0:11:c5:f5:52:0f:25:94:
                    eb:e8:50:8e:d5:c4:ff:fd:97:31:f2:24:a6:45:5b:
                    0b:39:49:bf:4e:10:a5:37:5a:6f:2b:3e:3e:d1:ea:
                    88:79:89:cb:7d:bc:7e:af:87:34:97:a0:91:1a:bc:
                    0a:92:c5:66:67:19:8c:0e:49:08:31:55:62:9e:a3:
                    e0:af:9c:5f:28:28:eb:b7:03:9a:d6:87:f4:87:54:
                    6c:34:d9:2f:0e:37:8e:45:d5:17:86:bd:b2:d6:b4:
                    dd:71:aa:48:28:09:56:19:89:9f:7d:5e:be:53:87:
                    e9:21:9d:79:95:04:dd:59:68:63:b3:29:bf:70:86:
                    a7:49:7a:d8:6f:8b:b0:bf:4e:ad:5f:fb:4a:16:40:
                    88:4e:0e:2a:e1:22:94:36:e2:6c:c1:82:b0:67:81:
                    db:01:4d:06:6f:f3:97:62:80:ab:ce:01:91:ef:08:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:27:D1:40:75:EB:DD:9B:B8:E3:E0:8D:C3:EC:BC:5B:6F:5D:0F:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0a102431-338a-3d80-995e-0684429d44e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:5600::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:06:3c:aa:0e:64:34:f9:82:24:9e:ee:8e:7b:73:09:f2:
         99:b4:18:31:b8:70:45:6d:98:2c:f2:f8:ba:9b:34:24:83:bf:
         db:83:a7:68:9e:e3:cd:34:a6:ae:ea:64:6d:a2:0b:11:8c:cd:
         25:4b:9a:f0:c2:a4:57:eb:3f:40:8c:33:11:22:98:a4:ad:5b:
         6c:f1:bf:f7:ce:5d:e4:1c:6e:f6:d1:84:80:eb:99:c1:d6:8b:
         51:dd:c5:5e:e4:cb:6f:d8:0d:52:eb:a7:b5:28:cf:b3:0f:06:
         d0:9d:be:31:ce:43:c6:c2:cc:d9:ab:0a:51:03:41:05:39:bb:
         85:e7:e6:80:5e:f7:c9:72:d3:10:c1:6e:0a:9d:a2:07:90:0e:
         a5:80:94:e7:0a:66:56:9c:fc:62:a7:e9:37:22:95:49:f8:b1:
         d0:e7:0f:31:1c:eb:79:46:bf:8b:19:cd:c1:08:9b:52:9f:29:
         46:4b:ad:b9:de:13:01:39:6f:18:d4:5b:7e:9f:56:3c:1a:e4:
         31:6a:b2:4d:4a:7d:ea:33:99:03:c2:10:10:c5:e4:2a:ae:c5:
         61:79:23:a7:93:0e:fd:e0:4c:d3:7f:e5:be:72:ff:20:af:7e:
         c6:ad:55:81:9e:eb:6a:95:a4:74:d7:69:96:c8:f7:65:d0:9f:
         9f:fa:2e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:19:06 2026 by rpki-client