Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4cb4e0a4-1fc2-3350-8b62-3ba5b4168011.roa
File:                     4cb4e0a4-1fc2-3350-8b62-3ba5b4168011.roa (raw, json)
Hash identifier:          UJU+SyP+nUGH8y8g3JrIA333iJ2kT1WJ9txRucLw33w=
Subject key identifier:   B2:AF:3D:24:A7:D3:36:A7:3E:07:C6:8F:6F:8A:AB:BF:8D:56:C7:11
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE6FD2131E3F7FA555C1A8D00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4cb4e0a4-1fc2-3350-8b62-3ba5b4168011.roa
Signing time:             Mon 18 Aug 2025 23:26:42 +0000
ROA not before:           Mon 18 Aug 2025 23:26:42 +0000
ROA not after:            Mon 17 Nov 2025 00:26:42 +0000
asID:                     31898
IP address blocks:        2603:c001:3c00::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:fd:21:31:e3:f7:fa:55:5c:1a:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 23:26:42 2025 GMT
            Not After : Nov 17 00:26:42 2025 GMT
        Subject: CN=969c8067-bcd5-4797-84a4-b5055f03bac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:16:bb:16:8c:58:d7:6c:7c:63:cb:0c:9e:d3:
                    7c:11:3b:32:8b:59:6a:cf:06:a1:db:8a:6b:15:11:
                    29:f9:24:24:fa:94:67:cf:6e:6d:8b:f7:70:f1:f1:
                    9f:84:16:f7:48:62:12:88:a1:d9:9f:12:e3:d7:df:
                    fa:21:ae:58:79:94:e4:b6:ff:50:f3:4a:46:28:5e:
                    6a:4e:60:7d:b8:75:ff:91:07:1b:80:c8:99:a3:f3:
                    5f:2d:8f:27:e5:ac:69:03:ba:bc:f9:5d:d8:41:97:
                    aa:b3:72:68:c4:c5:e8:d7:77:c1:53:08:e7:9e:a8:
                    8d:68:0b:a9:3c:a6:14:37:5a:c8:3f:37:13:4a:19:
                    4e:fd:bb:42:9b:71:5a:55:e8:03:6f:6b:18:a8:21:
                    cd:84:c2:8b:f2:5a:60:f5:73:33:77:e4:fb:8a:37:
                    4c:e5:c4:74:6d:7a:1e:45:61:a3:04:21:55:1b:59:
                    d8:aa:0a:b9:81:ce:b1:fd:75:16:90:89:c2:cc:1d:
                    71:71:7d:1a:72:93:3c:6b:4a:f9:13:ae:6a:d5:85:
                    1e:b3:20:b9:2f:96:1b:b3:72:3e:2a:88:17:c1:9b:
                    12:93:45:a7:09:c4:05:f2:be:27:94:fc:f9:c4:4c:
                    06:99:17:4e:b3:29:66:0d:65:52:c2:d8:b4:2e:a2:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AF:3D:24:A7:D3:36:A7:3E:07:C6:8F:6F:8A:AB:BF:8D:56:C7:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4cb4e0a4-1fc2-3350-8b62-3ba5b4168011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:3c00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:99:28:03:40:7e:cf:2c:fc:db:54:2a:de:9e:01:a0:6b:96:
         68:85:3a:91:5f:e6:83:5d:3d:b4:b5:9d:86:b3:74:b2:bf:69:
         6a:bc:e8:ab:70:cd:23:cd:75:14:fb:77:ff:52:3e:4d:8b:01:
         1e:29:68:47:9a:ca:b7:d2:11:88:a7:55:69:2c:af:e2:21:af:
         32:4d:32:81:19:22:01:87:6a:f0:b0:24:24:df:0d:d1:b5:7c:
         00:a7:d8:d1:f6:19:75:61:e0:b9:5e:15:6a:5c:d5:00:a2:e5:
         a6:80:b2:79:9d:e8:25:2f:de:99:c2:10:d6:c2:4a:e8:19:b4:
         fa:d4:5d:59:a3:5c:92:43:ed:3b:ea:de:52:9f:df:ac:1f:5d:
         62:74:de:b7:7c:40:9b:6e:6c:82:2f:cc:bd:9c:70:bb:9d:a6:
         69:9f:06:5b:49:8e:cb:64:a5:76:48:81:74:16:19:ff:5f:39:
         54:9a:f8:1c:af:b4:03:a8:93:f5:a4:52:21:be:41:6e:06:83:
         81:00:d1:d8:46:87:6b:d9:b9:1e:53:55:33:f0:08:87:d4:8c:
         eb:1b:01:38:08:8f:96:90:8f:99:09:a6:17:a8:f3:1c:f3:73:
         08:87:31:87:bb:54:9f:64:d1:33:02:fe:8c:d5:26:9b:1a:78:
         37:03:2e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:34:02 2025 by rpki-client