Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/513ccdf8-760b-39bc-a319-f0d261e9c5e0.roa
File:                     513ccdf8-760b-39bc-a319-f0d261e9c5e0.roa (raw, json)
Hash identifier:          OFerq9JjlyAiIjlxPeEtqQElL5it12fVCVy8K2J5qKw=
Subject key identifier:   71:B4:71:5E:17:BB:FB:DA:6B:4F:D0:DD:78:1A:93:30:70:E1:A6:B9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA5AA96BD1556651411887500
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/513ccdf8-760b-39bc-a319-f0d261e9c5e0.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     31898
IP address blocks:        2603:c002:3a00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:96:bd:15:56:65:14:11:88:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=a4ae4793-b8cc-4d55-9311-d6ed81c022d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:b4:e6:bf:ea:8f:2a:0e:dc:83:f3:55:b9:
                    af:78:a5:4e:41:45:e9:f9:d0:90:e4:f3:83:e1:24:
                    99:1e:b7:3f:49:5e:29:29:7c:ea:a7:4e:0f:81:61:
                    6f:90:6d:4f:98:52:96:a5:96:2a:a5:d5:45:0f:2a:
                    26:13:b5:1f:80:c5:e4:61:2d:6d:c5:d8:bf:94:3f:
                    4e:13:c8:68:a0:b7:51:ed:67:d0:d1:47:06:75:fc:
                    cb:45:7a:76:cd:1c:fe:a8:9e:88:6d:85:d5:5c:f9:
                    d2:a3:f9:12:7d:f4:68:88:f3:e0:6b:0f:4d:0c:78:
                    7f:cf:b6:3e:f6:b2:ec:71:45:e4:06:e9:33:83:6e:
                    3b:0e:62:19:8c:84:68:10:b9:ae:eb:db:95:09:ed:
                    c5:94:e8:9d:2c:08:1c:a2:8f:4e:e6:1a:32:a6:91:
                    40:27:22:fd:7a:63:e4:95:16:d7:27:79:ac:7d:9c:
                    de:d3:2f:80:cc:06:e7:c2:b8:84:63:e5:65:ce:78:
                    f0:f7:76:7e:3a:6a:c6:15:51:30:bb:43:67:cc:be:
                    4c:f1:35:3e:55:6c:23:b4:31:9c:72:6c:64:9a:a6:
                    e6:30:d5:da:09:53:a0:3e:d5:fe:cd:b2:11:bb:b2:
                    b2:80:a8:60:b2:ae:28:24:7d:1a:33:7c:1f:8b:4a:
                    aa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B4:71:5E:17:BB:FB:DA:6B:4F:D0:DD:78:1A:93:30:70:E1:A6:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/513ccdf8-760b-39bc-a319-f0d261e9c5e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:3a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a5:9e:1e:87:0c:24:ad:24:2a:7b:26:8e:6b:be:35:1e:12:
         39:ab:d4:d0:bf:92:7b:fc:b3:2d:a4:69:2c:ba:6e:a6:1d:6b:
         33:ca:80:f9:d4:24:23:5c:32:76:e3:10:f3:e0:71:76:94:64:
         77:3f:3c:eb:18:96:43:f0:5b:3e:53:31:9a:ad:49:4e:5f:11:
         19:3e:4a:8c:7b:9b:71:1e:40:c4:e4:48:6b:09:ba:07:6f:70:
         89:23:e6:5f:7f:26:29:b5:9a:b4:8f:11:09:32:1c:c2:aa:29:
         50:b6:49:79:5d:2c:88:5a:34:0f:64:75:b7:54:98:75:40:37:
         6b:b3:c7:22:6b:54:d7:e5:51:cc:9c:5e:f6:35:24:68:ae:10:
         14:95:2c:f5:76:c0:c4:e1:67:ba:db:86:2f:7b:72:1f:bd:5d:
         bf:f4:e6:6d:57:4a:35:f8:33:ca:3b:21:81:95:5a:07:57:f1:
         5f:63:5b:54:b9:22:bc:f6:fb:18:68:c3:71:c0:23:27:58:56:
         9e:15:06:60:26:6d:b1:df:ac:1a:b4:86:64:2a:77:c6:b8:76:
         16:1c:70:92:c1:20:0e:2d:ae:8e:f3:97:3b:76:6c:66:a4:d7:
         1b:cd:2b:c8:49:4e:11:d5:96:46:b1:58:05:ab:94:af:5a:dd:
         7c:79:31:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:12:49 2026 by rpki-client