Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ef2a54a-a6f2-35e8-8184-f686e321f41f.roa
File:                     1ef2a54a-a6f2-35e8-8184-f686e321f41f.roa (raw, json)
Hash identifier:          JixOew0qQi6gx+FKiwmbIvKIqWr/OedDgUYpkmbPjD0=
Subject key identifier:   BA:05:46:72:1F:95:CB:BD:16:F2:48:AD:EE:03:61:A8:FD:6D:3E:CB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6F3A2D89972FD8A2BFC41040
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ef2a54a-a6f2-35e8-8184-f686e321f41f.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:8700::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:2d:89:97:2f:d8:a2:bf:c4:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=4d5ee885-0d1a-4383-b928-db80f3fe5a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:c2:34:6b:98:8d:cd:05:e7:68:e3:8c:ed:
                    9b:aa:51:11:6c:e9:ef:d8:25:cf:4a:a2:a0:20:af:
                    23:ce:de:19:23:48:66:60:5a:fd:c3:b3:6d:1e:f4:
                    5a:ed:c7:94:17:04:d7:4b:b0:53:d7:20:13:2c:77:
                    0f:3c:c5:84:a4:83:d2:94:fa:a1:b4:15:e9:fa:e1:
                    f4:bd:e5:96:70:c7:a4:0d:64:6b:e0:b2:16:8e:ff:
                    d3:62:7f:29:4c:7f:73:a9:8a:7e:bf:a0:f7:a1:f4:
                    9d:4f:34:19:5a:0e:35:d1:23:4f:05:bb:b6:41:a0:
                    ef:f4:1b:c1:02:8c:07:25:89:8f:66:65:ce:74:88:
                    cd:20:ff:74:4d:47:7f:96:ad:1b:09:03:48:aa:d1:
                    80:84:9b:44:01:90:00:0a:a2:b9:4c:2d:6e:b7:68:
                    67:a7:43:c4:41:7b:61:f0:80:24:5f:54:c6:87:1e:
                    57:b3:d2:77:ee:2e:6d:d8:d6:25:ea:e2:7c:a6:8d:
                    d8:7d:ac:eb:66:0c:81:bb:d8:17:30:dd:9a:9f:cf:
                    ef:17:dc:72:18:25:c3:0d:a5:71:a3:62:60:05:48:
                    1b:ab:9b:87:b0:fd:79:85:1b:1f:0c:8d:c3:ee:73:
                    b0:1e:9e:a9:eb:34:92:65:6e:87:c5:1f:d4:ab:1e:
                    6d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:05:46:72:1F:95:CB:BD:16:F2:48:AD:EE:03:61:A8:FD:6D:3E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ef2a54a-a6f2-35e8-8184-f686e321f41f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:8700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:6b:a8:db:62:2d:ba:8d:35:9a:91:9d:75:1b:84:29:c6:72:
         40:5a:4f:3e:73:5a:1f:e3:68:49:85:69:31:ba:91:11:62:67:
         ab:fd:e1:e4:f5:1e:f7:2a:d9:17:df:51:6d:fe:c5:b1:53:f6:
         bd:87:66:b2:81:e5:ee:6c:05:ff:b0:f5:8f:6a:4a:67:95:e5:
         3e:c0:8a:0f:82:4c:1c:b1:bf:4a:6f:35:f7:e3:3b:5a:61:6e:
         1b:6c:bb:40:85:dd:43:a6:04:b4:f9:67:87:41:7b:56:52:fe:
         95:be:fd:35:2d:22:3d:3c:9c:88:36:fc:34:ac:28:c3:98:ea:
         22:29:19:02:aa:4c:9f:90:94:48:15:b9:39:8d:09:f8:0c:0b:
         96:06:56:6b:f7:1b:6e:c1:0c:6f:3a:68:da:78:95:c1:f9:ac:
         e2:1d:30:d7:4c:fe:bd:6b:78:4f:87:48:e6:c1:6e:6f:2e:0b:
         34:12:0f:7c:f3:76:1e:a4:5f:ab:96:ca:eb:0a:56:cc:93:5c:
         e7:c7:39:93:eb:99:79:6b:3d:60:57:e1:e5:f2:37:d9:2a:64:
         04:f3:73:73:63:11:d7:96:38:8b:e6:92:96:db:5c:83:d5:2b:
         a0:d6:4a:77:e4:ce:61:e7:23:df:3d:77:d7:5b:d9:43:4d:9f:
         c2:a1:69:3e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5vOi2Jly/Yor/EEEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
NGQ1ZWU4ODUtMGQxYS00MzgzLWI5MjgtZGI4MGYzZmU1YTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr73CNGuYjc0F52jjjO2bqlERbOnv2CXPSqKg
IK8jzt4ZI0hmYFr9w7NtHvRa7ceUFwTXS7BT1yATLHcPPMWEpIPSlPqhtBXp+uH0
veWWcMekDWRr4LIWjv/TYn8pTH9zqYp+v6D3ofSdTzQZWg410SNPBbu2QaDv9BvB
AowHJYmPZmXOdIjNIP90TUd/lq0bCQNIqtGAhJtEAZAACqK5TC1ut2hnp0PEQXth
8IAkX1TGhx5Xs9J37i5t2NYl6uJ8po3YfazrZgyBu9gXMN2an8/vF9xyGCXDDaVx
o2JgBUgbq5uHsP15hRsfDI3D7nOwHp6p6zSSZW6HxR/Uqx5tNwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLoFRnIflcu9FvJIre4DYaj9bT7LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWVmMmE1NGEtYTZmMi0z
NWU4LTgxODQtZjY4NmUzMjFmNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAocw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASmuo22Ituo01mpGddRuEKcZyQFpPPnNaH+NoSYVpMbqREWJnq/3h
5PUe9yrZF99Rbf7FsVP2vYdmsoHl7mwF/7D1j2pKZ5XlPsCKD4JMHLG/Sm819+M7
WmFuG2y7QIXdQ6YEtPlnh0F7VlL+lb79NS0iPTyciDb8NKwow5jqIikZAqpMn5CU
SBW5OY0J+AwLlgZWa/cbbsEMbzpo2niVwfms4h0w10z+vWt4T4dI5sFuby4LNBIP
fPN2HqRfq5bK6wpWzJNc58c5k+uZeWs9YFfh5fI32SpkBPNzc2MR15Y4i+aSlttc
g9UroNZKd+TOYecj3z1311vZQ02fwqFpPg==
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:50:36 2026 by rpki-client