Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e170d1c-6b37-3ccf-ac1c-0e482dd1479a.roa
File:                     5e170d1c-6b37-3ccf-ac1c-0e482dd1479a.roa (raw, json)
Hash identifier:          x0Loc8WuJHrTKNwfltbshqsVDuKziytrS6FHN2OfVFU=
Subject key identifier:   82:5F:3C:1A:F8:CA:4F:FC:FC:34:AB:CC:27:B3:B7:A2:25:1B:55:7A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E66DA3C6A3F79063BFA7D7980
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e170d1c-6b37-3ccf-ac1c-0e482dd1479a.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     31898
IP address blocks:        2603:c000:600::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:3c:6a:3f:79:06:3b:fa:7d:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=ad076849-def3-4061-b8b6-7b5929a0f5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f5:43:97:7c:58:6c:c3:b6:2b:b4:e1:7c:6c:
                    e4:c0:0f:d4:5a:73:53:da:b0:da:93:a4:bb:4d:90:
                    44:f1:23:40:8a:c3:46:d1:79:9e:8f:bf:09:25:3c:
                    bb:b4:30:39:0f:4b:9e:ac:a1:65:86:e4:ac:f1:ac:
                    c6:db:fa:86:49:73:08:84:57:60:a1:69:74:c5:a6:
                    70:e4:5e:66:6a:90:b0:97:26:a6:65:02:b4:88:82:
                    14:8d:d7:75:77:28:36:8d:be:1b:ab:f8:d6:bc:61:
                    06:4c:1b:c2:bd:94:cf:54:22:74:60:e4:39:86:75:
                    ff:5e:46:8e:42:be:40:b3:5c:04:d8:52:d5:c7:54:
                    b0:78:7e:ec:70:46:ae:7c:67:89:1e:a6:8c:4e:1c:
                    fc:02:3e:7a:6f:57:e0:a1:53:93:59:7f:e4:3e:c6:
                    67:88:08:e1:c6:49:29:a8:30:cc:b6:3c:32:f3:46:
                    1f:54:05:00:8a:9c:ea:84:cd:f0:5c:9e:24:fa:2c:
                    da:5f:a0:76:b5:fb:6c:f5:8b:f7:22:6f:b6:00:2e:
                    a0:24:51:33:4f:c0:69:88:1f:2c:4a:58:80:5e:5d:
                    ce:4c:6f:ad:88:35:5e:1e:5a:2d:19:b6:63:77:cb:
                    7b:16:52:fb:86:d9:fa:a2:fd:06:4e:fa:05:74:90:
                    80:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5F:3C:1A:F8:CA:4F:FC:FC:34:AB:CC:27:B3:B7:A2:25:1B:55:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e170d1c-6b37-3ccf-ac1c-0e482dd1479a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ec:bf:43:9d:d7:a2:eb:14:48:31:f2:f6:d1:0c:e9:83:c6:
         04:d2:c1:aa:99:78:0f:a2:39:f8:63:17:49:90:41:ab:2b:3d:
         85:15:0d:91:1a:88:15:6b:01:59:68:85:07:75:ab:2e:b5:99:
         9e:91:e2:14:02:04:53:b2:a3:d8:93:a0:37:11:de:4b:0f:ce:
         20:13:0f:bb:3e:0b:a8:45:b8:ad:e1:aa:cd:62:a5:37:71:6d:
         02:f0:d8:4f:93:9e:c3:cd:1b:d5:4d:a2:16:5e:3d:d3:2c:88:
         48:2e:79:f7:cd:8c:7d:73:f8:9e:c9:a3:18:73:14:d6:3f:92:
         e6:b7:9d:43:b5:2d:30:9d:8c:28:bd:84:fe:b5:9b:d1:52:3e:
         10:55:ed:4b:ea:51:46:15:1f:35:5b:ab:14:08:19:0f:03:1c:
         53:a6:18:b9:49:54:c2:75:3c:d2:1e:60:ac:f5:19:f3:4c:db:
         15:d9:ad:50:54:d3:22:23:29:d4:18:b6:3f:f4:0e:32:af:d4:
         71:43:d9:dd:9e:ca:4b:d4:94:0c:29:7f:2d:0d:a4:29:6b:bf:
         52:83:a5:fc:a0:8e:76:34:19:44:25:76:63:af:92:89:b2:90:
         3d:aa:d3:ae:1c:1f:b8:37:2f:57:c2:bc:65:f0:18:3f:e9:11:
         26:72:e4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:53:07 2026 by rpki-client