Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37eaac24-a4f5-3cfe-8dfc-90ae6ba70857.roa
File:                     37eaac24-a4f5-3cfe-8dfc-90ae6ba70857.roa (raw, json)
Hash identifier:          /eER7NX59oc0D/0USG9cryCAKiuZReefpKFTa0Gn2i8=
Subject key identifier:   C2:F4:40:23:1B:82:8C:51:35:C3:55:1F:9C:C4:B0:42:9C:99:9E:4C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6DD4C2EC4A4A8E1463A1AA40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37eaac24-a4f5-3cfe-8dfc-90ae6ba70857.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c000:1000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c2:ec:4a:4a:8e:14:63:a1:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=e6ad9fcf-40ea-408f-bd03-f8873fd38d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ef:71:61:55:30:d7:5f:ad:b5:cd:d5:8c:68:
                    ab:56:c9:e5:99:d0:0a:89:6b:d9:70:28:0a:c9:9c:
                    67:5a:72:89:11:79:fe:ee:60:03:e9:9f:7b:33:00:
                    7f:cd:3b:13:c4:1a:4c:74:b6:2c:ec:9e:68:4f:e6:
                    0a:59:cc:ec:ed:64:99:9a:2b:7e:f2:0b:66:3b:fb:
                    83:65:94:1e:d7:9a:4d:36:e1:a0:bc:a1:e0:03:69:
                    66:22:dd:37:3b:07:90:da:62:d7:fb:5d:a5:a6:4b:
                    85:73:43:f4:5f:3a:77:ce:21:c0:f2:26:93:5a:6f:
                    ee:2a:cd:95:ca:86:51:88:26:57:c0:54:36:59:d7:
                    f2:d1:92:ac:30:be:0d:ac:2d:3a:40:99:67:be:fb:
                    ac:ab:96:40:ea:0a:2d:ab:d1:8d:23:b2:eb:fe:0c:
                    49:c1:9f:45:d9:5d:13:c5:62:f9:59:fa:56:91:52:
                    b1:17:ea:a4:c5:41:66:66:68:5c:44:38:cd:be:b9:
                    a5:df:1c:7b:5d:a5:17:7d:63:1e:8e:60:3d:cd:b6:
                    19:46:a8:4a:c7:b2:95:ef:84:29:8c:bf:6f:0e:0c:
                    27:80:80:16:14:6b:b8:72:5e:ea:2c:fa:ed:bb:66:
                    58:f8:ad:17:2f:b0:fd:73:61:93:13:8e:51:f4:18:
                    f8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F4:40:23:1B:82:8C:51:35:C3:55:1F:9C:C4:B0:42:9C:99:9E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37eaac24-a4f5-3cfe-8dfc-90ae6ba70857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1e:8c:6f:df:97:cb:54:2b:91:0d:12:41:65:5a:41:74:0f:
         ff:3a:9f:48:e6:8d:00:91:d1:05:09:39:ec:bc:6a:e5:52:9d:
         c6:64:d6:7b:4f:ec:e8:d1:2e:68:89:3a:2d:2d:28:63:64:59:
         3c:89:29:27:62:fc:ba:da:72:c9:94:7d:3d:0e:22:49:92:01:
         57:14:35:f5:54:ef:3f:7b:f5:48:6f:b5:21:d6:f5:61:a5:27:
         48:90:af:63:35:57:0c:0c:cf:44:12:85:63:75:f0:37:35:b0:
         ab:e1:de:61:5a:49:ec:47:82:ec:47:d0:a9:0f:48:9f:f5:fc:
         5d:de:b8:7d:86:f2:6e:89:65:de:ee:5b:f6:00:c6:f8:a0:9d:
         9b:cb:0a:c3:0f:fc:c5:a9:0c:38:d3:05:78:ff:c6:07:95:b8:
         52:72:ce:78:46:0d:c7:d6:ba:2d:5c:00:c5:2b:e9:29:e7:df:
         ee:b7:06:97:1c:4e:3e:bb:83:16:25:90:b3:e8:81:31:6f:bf:
         8f:b2:15:ee:e0:7f:06:b3:c2:c0:c7:83:31:3b:40:21:40:98:
         2c:df:ab:00:88:fe:a0:36:24:a6:8a:d5:61:0f:41:37:5e:da:
         fe:16:10:65:9f:c8:f1:0f:c9:3b:37:f0:de:39:78:94:82:97:
         56:18:f6:4e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5t1MLsSkqOFGOhqkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk
ZTZhZDlmY2YtNDBlYS00MDhmLWJkMDMtZjg4NzNmZDM4ZDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO9xYVUw11+ttc3VjGirVsnlmdAKiWvZcCgK
yZxnWnKJEXn+7mAD6Z97MwB/zTsTxBpMdLYs7J5oT+YKWczs7WSZmit+8gtmO/uD
ZZQe15pNNuGgvKHgA2lmIt03OweQ2mLX+12lpkuFc0P0Xzp3ziHA8iaTWm/uKs2V
yoZRiCZXwFQ2Wdfy0ZKsML4NrC06QJlnvvusq5ZA6gotq9GNI7Lr/gxJwZ9F2V0T
xWL5WfpWkVKxF+qkxUFmZmhcRDjNvrml3xx7XaUXfWMejmA9zbYZRqhKx7KV74Qp
jL9vDgwngIAWFGu4cl7qLPrtu2ZY+K0XL7D9c2GTE45R9Bj4JwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFML0QCMbgoxRNcNVH5zEsEKcmZ5MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzdlYWFjMjQtYTRmNS0z
Y2ZlLThkZmMtOTBhZTZiYTcwODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAABAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPR6Mb9+Xy1QrkQ0SQWVaQXQP/zqfSOaNAJHRBQk57Lxq5VKdxmTW
e0/s6NEuaIk6LS0oY2RZPIkpJ2L8utpyyZR9PQ4iSZIBVxQ19VTvP3v1SG+1Idb1
YaUnSJCvYzVXDAzPRBKFY3XwNzWwq+HeYVpJ7EeC7EfQqQ9In/X8Xd64fYbyboll
3u5b9gDG+KCdm8sKww/8xakMONMFeP/GB5W4UnLOeEYNx9a6LVwAxSvpKeff7rcG
lxxOPruDFiWQs+iBMW+/j7IV7uB/BrPCwMeDMTtAIUCYLN+rAIj+oDYkporVYQ9B
N17a/hYQZZ/I8Q/JOzfw3jl4lIKXVhj2Tg==
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:51:32 2026 by rpki-client