Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/46dc2e63-0b75-3624-93d5-387ee9ceef2d.roa
File:                     46dc2e63-0b75-3624-93d5-387ee9ceef2d.roa (raw, json)
Hash identifier:          7bXMyXVDpqxbD636VlxzukrpD0Gd3K4Sh/qCSlPX6kY=
Subject key identifier:   69:DD:E8:A2:D7:7E:DD:E7:59:90:2B:2F:5A:8C:51:AC:B7:9F:A5:52
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE6B61E6D8E54514B2A489A00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/46dc2e63-0b75-3624-93d5-387ee9ceef2d.roa
Signing time:             Mon 18 Aug 2025 21:03:38 +0000
ROA not before:           Mon 18 Aug 2025 21:03:38 +0000
ROA not after:            Sun 16 Nov 2025 22:03:38 +0000
asID:                     31898
IP address blocks:        2603:c000:1f00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:b6:1e:6d:8e:54:51:4b:2a:48:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 21:03:38 2025 GMT
            Not After : Nov 16 22:03:38 2025 GMT
        Subject: CN=36ae2036-98f5-485b-98db-648234e7f41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e3:73:9b:e0:c6:67:7d:35:f2:51:04:a6:71:
                    03:a7:00:6d:6e:2e:a3:09:37:12:8e:a1:f5:4d:2e:
                    28:d3:00:37:24:ba:02:18:a5:df:a8:a6:5e:00:6e:
                    ec:2c:93:bf:6e:a0:56:d4:56:e6:f9:54:6f:77:a0:
                    fc:d5:93:c3:75:82:3c:d8:17:c6:1b:56:7c:de:22:
                    45:e3:5a:9a:10:93:4e:75:0f:f2:cd:03:84:d6:25:
                    28:53:6d:7b:1d:89:27:00:5e:a4:87:5f:39:40:54:
                    a8:5b:a5:f2:9e:ea:78:68:1a:d6:9c:19:e9:a0:9b:
                    b0:0d:7a:22:17:7b:16:70:e1:0c:b6:b5:c7:71:13:
                    3c:89:ba:d5:76:32:be:42:7b:e9:38:16:93:45:d9:
                    b7:45:90:ad:ad:30:66:29:ed:df:b3:87:fc:64:46:
                    76:c9:14:ab:19:42:59:f5:da:fe:24:ba:09:5a:6e:
                    62:b8:cb:75:37:a0:93:7d:6c:92:54:35:3c:09:02:
                    44:4c:ab:5e:1c:d4:5a:8f:86:c1:cf:9a:8f:ec:f7:
                    20:25:f9:06:21:b9:90:3c:c1:86:8f:2a:2c:77:8e:
                    37:f6:fa:ea:25:db:f4:00:04:ef:55:62:24:3f:64:
                    88:b5:c6:10:87:57:97:2f:06:20:0a:24:96:29:7b:
                    67:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DD:E8:A2:D7:7E:DD:E7:59:90:2B:2F:5A:8C:51:AC:B7:9F:A5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/46dc2e63-0b75-3624-93d5-387ee9ceef2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:1f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:59:d1:96:34:50:d0:bb:ff:27:82:1b:00:9b:9c:68:d2:30:
         84:00:3f:7c:c6:1a:23:26:61:a7:7d:25:1b:4b:1e:61:55:bc:
         08:3e:70:6d:96:df:9d:47:bd:31:2a:12:d5:01:e6:b6:e5:90:
         da:7f:56:a9:6d:ef:95:60:a5:e5:fe:ea:a5:71:5b:76:0a:d0:
         db:bb:e7:ea:e5:09:cd:91:e0:85:fe:4d:2c:7e:c6:a5:6c:57:
         1f:90:30:c3:5b:34:13:04:c0:9f:b3:0b:59:50:2b:e4:a7:20:
         f7:eb:69:88:3d:1f:40:6a:2d:3d:77:d2:64:2e:68:35:0b:6a:
         c0:7c:92:6b:17:bb:2a:e9:c3:9e:70:86:ad:f7:a1:b0:9d:51:
         09:10:f3:ed:fb:fc:b1:93:79:5c:24:16:d0:73:e9:d6:63:de:
         b0:79:95:15:71:6b:6a:6c:c0:b8:9e:c3:88:c5:b0:42:ea:47:
         2b:ad:a4:a1:98:7e:f9:a5:81:60:82:58:90:0c:07:4c:42:b9:
         16:a8:9f:42:d6:e6:9f:44:12:35:ac:ee:04:c0:15:f3:1d:ff:
         5e:b8:4f:20:b6:39:0d:02:a7:0a:89:ce:2f:8b:af:42:3a:15:
         06:32:f9:8f:95:69:b1:ad:68:ef:71:8d:b7:3e:20:7f:6c:05:
         75:9d:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:27:18 2025 by rpki-client