Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47547e02-a571-3f1c-be96-d2839a1b9b42.roa
File:                     47547e02-a571-3f1c-be96-d2839a1b9b42.roa (raw, json)
Hash identifier:          OlKQuxLBkWaLLo0FF3cq1uBUQ4khh0giTz4Gd5hc93s=
Subject key identifier:   3D:56:DD:3F:50:B6:5F:00:54:19:0E:0E:BB:FA:5D:D2:59:D4:74:B6
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6F3EC0B82E1B45C86891E600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47547e02-a571-3f1c-be96-d2839a1b9b42.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        2603:c010:6000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:c0:b8:2e:1b:45:c8:68:91:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=f0cbeb5c-a4f6-4914-9b8c-e692e34bec84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d0:a1:be:16:48:c1:f7:79:1c:b5:bc:bd:3e:
                    25:9b:68:2e:a7:80:50:89:cc:92:84:62:51:38:ec:
                    a0:52:37:b6:77:cd:70:2f:5e:2f:a2:a3:a7:73:fd:
                    e4:16:05:af:d3:90:c6:b3:39:89:7a:40:6e:12:0e:
                    14:8f:8a:ab:69:0e:a8:69:90:5a:b5:c5:16:60:0a:
                    50:d7:c6:a9:f1:d2:2a:38:8d:f4:bb:1f:dd:98:4f:
                    df:66:68:61:5b:8d:12:bb:48:b3:db:ac:36:3c:b6:
                    bd:34:25:02:b2:26:5d:1e:d3:5d:ee:50:3c:b8:44:
                    48:05:0b:7d:43:49:d4:b2:25:25:67:4e:b3:bb:86:
                    96:29:a8:06:2e:6e:6f:6a:27:77:72:4e:2d:e5:c7:
                    59:38:69:05:fc:c1:60:09:d9:c0:ec:50:75:fd:41:
                    b2:4a:08:7e:ac:9b:94:2a:21:ff:58:49:86:3f:af:
                    8e:e9:1c:5f:3b:b6:a4:e6:6e:0e:49:1e:25:ce:5f:
                    13:5a:df:29:0e:13:74:4a:df:70:73:96:f0:41:9e:
                    31:98:0a:ba:7c:bd:33:60:e5:d6:71:63:79:84:cd:
                    51:db:a9:08:93:c8:9e:47:34:2d:78:61:3d:b3:12:
                    c1:fd:78:2e:11:f1:e0:22:11:95:7c:71:86:77:93:
                    1a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:56:DD:3F:50:B6:5F:00:54:19:0E:0E:BB:FA:5D:D2:59:D4:74:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47547e02-a571-3f1c-be96-d2839a1b9b42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c010:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:a5:d6:9e:c5:1c:de:63:b4:c6:19:ef:83:b0:7f:f3:0d:e6:
         ea:b5:e3:0a:38:98:da:c5:dc:9c:e6:a8:eb:10:37:71:a2:ef:
         4d:ae:9b:de:c3:6d:a8:63:0a:4c:aa:67:3b:7b:c6:66:2d:65:
         6f:0c:c3:aa:74:ba:dd:2a:a6:a9:df:57:74:ec:58:1c:ea:69:
         8d:21:24:24:6b:f5:7c:73:b5:f3:d9:2a:0b:c4:18:64:a2:fc:
         87:bb:bf:68:e9:ea:bd:7b:e1:c3:f4:7d:ac:1a:de:d4:70:54:
         7e:a9:c3:ba:67:ee:5d:83:ac:bf:a7:7b:3e:44:ca:21:85:a6:
         ad:d0:51:64:89:1a:0a:ec:ca:2d:6c:12:44:e1:14:d0:54:e6:
         ab:ef:3d:8f:eb:3f:d1:9e:3f:06:d5:ff:55:43:cb:02:1a:ce:
         65:6f:fb:d0:ec:d4:1b:78:73:3a:87:5b:f5:cb:62:56:7a:00:
         e4:d2:b1:7b:11:59:95:5a:62:f4:9c:75:90:3f:ff:61:f4:e1:
         3e:63:34:0e:83:89:0c:26:b9:f5:eb:e3:fa:08:e3:93:eb:49:
         cd:a0:e7:10:00:b1:bc:c6:6c:0c:64:96:d7:dd:e1:1e:44:70:
         1b:fd:a0:08:bf:43:6a:31:0d:ba:8d:a9:21:ba:3d:46:af:aa:
         f2:4c:55:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:49:41 2026 by rpki-client