Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a558d44-067a-30ea-be58-ab9bcb245d34.roa
File:                     2a558d44-067a-30ea-be58-ab9bcb245d34.roa (raw, json)
Hash identifier:          F2lij9jJCtaJ6VIyOMovQutRfSVsUvDrTFRb3boCWkA=
Subject key identifier:   C7:1F:79:BF:91:55:69:0C:A4:15:49:83:1C:90:23:11:9C:6B:F6:BF
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD78B15BE18BCEA284402CF80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a558d44-067a-30ea-be58-ab9bcb245d34.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     54253
IP address blocks:        2603:c0f4:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:15:be:18:bc:ea:28:44:02:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=659013a2-6e5a-4562-b118-aea1d3b0888e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1b:63:88:37:77:cf:98:5d:89:be:36:12:36:
                    b9:d8:cb:a4:b0:b2:2d:5b:c9:8d:55:2b:db:d5:11:
                    aa:e5:5e:61:3b:5a:52:f1:31:63:c1:25:31:df:5b:
                    43:bf:67:57:3b:83:3e:2d:06:9d:10:c6:69:bd:2b:
                    b9:2f:f0:b5:04:bf:59:10:8c:bf:a8:a0:24:91:45:
                    8f:56:0b:af:e9:02:42:da:2a:65:35:21:40:b7:3f:
                    ce:d6:0a:56:09:1a:f9:d4:bf:14:c8:63:2b:77:4e:
                    6e:10:6b:75:dd:15:c1:c4:7b:06:1b:b0:32:7b:cd:
                    c7:ff:63:5b:69:c8:5f:36:1d:1a:4f:d0:c3:61:e4:
                    63:47:2b:c6:ef:5a:38:31:fa:f7:e9:eb:bf:2f:2e:
                    c2:39:c5:84:43:3b:62:97:ab:49:a2:5a:72:ba:d0:
                    32:c9:21:0c:59:a9:0b:0e:d6:76:98:62:1e:b8:35:
                    71:dc:c6:5a:a2:58:fb:7d:0e:ec:24:d0:e4:d1:fd:
                    c3:34:01:42:bc:82:47:f3:7f:67:73:a6:69:f2:92:
                    2b:b0:6b:f2:a6:25:0c:f2:aa:00:69:0e:95:0c:5e:
                    db:6c:b4:d2:86:28:a1:02:fe:fa:ab:69:5b:c0:b6:
                    74:43:08:d4:9c:06:e3:3f:e6:ce:b0:e7:b6:69:bd:
                    55:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1F:79:BF:91:55:69:0C:A4:15:49:83:1C:90:23:11:9C:6B:F6:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a558d44-067a-30ea-be58-ab9bcb245d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f4:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ea:ad:95:1f:29:4d:9a:a7:2d:d6:85:6e:04:9d:95:61:21:
         1f:0a:92:df:8b:b3:81:db:9c:08:15:48:12:6a:f3:d7:8c:c2:
         0f:02:5b:9d:db:57:39:7f:58:2a:b8:28:c6:59:69:25:fa:16:
         f4:14:7f:27:7a:f6:8b:20:8d:e5:74:1b:3d:19:ba:a3:ef:6e:
         e4:95:a4:28:d8:64:56:b2:a3:13:a6:a0:bc:96:c6:77:5f:e2:
         c7:b1:20:7d:0a:7c:b8:95:b9:30:e1:79:0c:e9:49:29:c8:1d:
         9b:55:11:4f:55:73:f0:69:d6:14:f5:cd:3a:ba:c8:2c:4f:33:
         c1:11:d5:9a:a9:fa:8b:b2:27:25:e4:7c:e9:53:26:00:21:13:
         ee:1f:5d:b8:bf:64:4e:1b:62:02:fa:bb:c3:4b:ce:65:1d:df:
         4e:cc:a1:e4:61:73:40:f8:45:71:91:32:0b:b5:50:3f:8d:7c:
         cd:d3:35:57:16:69:23:c2:ac:86:fc:55:a3:0d:7a:30:7f:a1:
         18:9c:ea:dc:91:a8:b3:e5:8a:96:38:ae:08:87:0c:12:25:78:
         c7:c8:75:37:c4:60:6b:ce:6f:4e:bf:35:2f:67:9c:71:1d:9e:
         93:fb:25:f0:fe:98:4c:8c:4b:34:18:38:2d:a8:ab:43:78:b9:
         fa:c8:87:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:03:51 2026 by rpki-client