Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f21b148-0e96-38cd-b0c3-7037125b460a.roa
File:                     5f21b148-0e96-38cd-b0c3-7037125b460a.roa (raw, json)
Hash identifier:          Y89AxnuJGvsxgdVhQjKIOOKocOVRZhX/UcYzqU5e6+Q=
Subject key identifier:   6C:4E:85:3B:DF:07:42:35:B8:16:0C:FC:B4:24:19:CA:43:48:FF:12
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6B0A2CDD231C1F973488F940
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f21b148-0e96-38cd-b0c3-7037125b460a.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:a000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:2c:dd:23:1c:1f:97:34:88:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=7d882653-455b-45ac-b4e4-e1f4027ec316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:14:d8:50:f8:56:ec:14:a5:d4:3d:d1:3e:
                    47:c8:c2:7b:2d:19:4e:77:fc:24:e3:48:1c:51:91:
                    fd:bc:00:89:2f:7e:29:1f:68:db:c4:8f:e2:1d:13:
                    e8:89:dc:9f:2c:3f:b2:6b:a0:04:aa:c1:d2:bd:0b:
                    28:af:0f:35:0a:b3:4c:70:23:22:ec:f5:12:fa:37:
                    e2:66:82:08:96:5c:a3:ac:28:19:c8:29:22:7a:d0:
                    3c:a8:cd:93:a7:26:70:6b:cd:7b:f0:27:15:52:ef:
                    ed:29:2d:36:c3:74:9e:0b:95:0f:8d:df:bd:4d:05:
                    06:db:f3:19:3e:b3:9a:07:c9:6d:a1:c5:39:cb:98:
                    f7:78:84:61:77:60:91:e2:b5:2b:02:f7:cf:6b:c8:
                    93:62:43:be:aa:59:f5:1f:a6:21:f5:18:d8:3a:6f:
                    f3:d8:30:75:8f:a8:43:64:cd:d5:4d:b8:f5:35:be:
                    ae:f9:da:09:21:cb:4f:07:4e:d1:79:b7:74:5e:d1:
                    ac:1a:63:86:59:42:cc:bf:aa:19:88:ca:06:27:47:
                    10:88:c5:98:3c:07:81:1c:43:78:0d:0d:ae:a2:e8:
                    5c:69:f1:69:a3:ae:24:e1:fb:cd:64:c0:24:5c:c7:
                    ed:5d:6e:6d:48:64:08:b7:f1:53:38:bb:60:2b:55:
                    39:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4E:85:3B:DF:07:42:35:B8:16:0C:FC:B4:24:19:CA:43:48:FF:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f21b148-0e96-38cd-b0c3-7037125b460a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:15:b7:ce:ed:80:8f:6c:0a:88:2a:15:68:78:2c:5c:51:30:
         1f:7b:7b:1e:f1:61:db:12:d7:90:22:9e:ae:a0:5f:53:2f:49:
         65:56:7e:b8:28:49:1f:63:a3:f1:d7:6b:33:e4:1b:37:7f:e4:
         b2:7a:89:cb:b2:fa:d7:13:4c:c2:c0:e4:f8:ae:fd:02:eb:ad:
         5a:89:60:a1:5d:0c:69:84:d9:3f:2e:23:28:47:53:73:88:c6:
         6f:a6:ce:fd:60:e0:ce:67:51:86:98:9b:95:17:56:4d:0b:b2:
         e7:e2:ec:5b:4d:bc:42:22:a9:0b:b1:2c:81:43:97:30:37:7a:
         09:03:cf:9e:fa:1d:cc:3b:11:54:4a:79:2e:79:e4:5b:07:97:
         92:79:8c:16:ab:10:1f:21:0a:02:b2:3e:aa:d9:01:36:47:6b:
         07:51:d3:54:3c:a4:69:c3:4b:22:70:78:a6:0b:a2:2c:23:80:
         23:be:66:98:d7:dc:80:72:40:31:18:4a:fd:32:1a:51:0d:24:
         7c:b2:86:95:b9:7c:02:c5:d8:58:19:83:86:ad:0e:ed:4c:b8:
         62:a5:e2:a1:95:68:46:f1:1e:25:61:ef:2b:d7:18:a5:80:07:
         eb:6d:ad:89:93:80:f5:ba:f0:56:ba:b7:a7:1d:d7:8e:e1:98:
         5a:e3:9b:b4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5rCizdIxwflzSI+UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk
N2Q4ODI2NTMtNDU1Yi00NWFjLWI0ZTQtZTFmNDAyN2VjMzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMcU2FD4VuwUpdQ90T5HyMJ7LRlOd/wk40gc
UZH9vACJL34pH2jbxI/iHRPoidyfLD+ya6AEqsHSvQsorw81CrNMcCMi7PUS+jfi
ZoIIllyjrCgZyCkietA8qM2TpyZwa8178CcVUu/tKS02w3SeC5UPjd+9TQUG2/MZ
PrOaB8ltocU5y5j3eIRhd2CR4rUrAvfPa8iTYkO+qln1H6Yh9RjYOm/z2DB1j6hD
ZM3VTbj1Nb6u+doJIctPB07Rebd0XtGsGmOGWULMv6oZiMoGJ0cQiMWYPAeBHEN4
DQ2uouhcafFpo64k4fvNZMAkXMftXW5tSGQIt/FTOLtgK1U5XwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGxOhTvfB0I1uBYM/LQkGcpDSP8SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWYyMWIxNDgtMGU5Ni0z
OGNkLWIwYzMtNzAzNzEyNWI0NjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAqAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAmRW3zu2Aj2wKiCoVaHgsXFEwH3t7HvFh2xLXkCKerqBfUy9JZVZ+
uChJH2Oj8ddrM+QbN3/ksnqJy7L61xNMwsDk+K79AuutWolgoV0MaYTZPy4jKEdT
c4jGb6bO/WDgzmdRhpiblRdWTQuy5+LsW028QiKpC7EsgUOXMDd6CQPPnvodzDsR
VEp5LnnkWweXknmMFqsQHyEKArI+qtkBNkdrB1HTVDykacNLInB4pguiLCOAI75m
mNfcgHJAMRhK/TIaUQ0kfLKGlbl8AsXYWBmDhq0O7Uy4YqXioZVoRvEeJWHvK9cY
pYAH622tiZOA9brwVrq3px3XjuGYWuObtA==
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:50:53 2026 by rpki-client