Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61f3933f-cafd-39f7-8471-fdbf75462005.roa
File:                     61f3933f-cafd-39f7-8471-fdbf75462005.roa (raw, json)
Hash identifier:          Qr5h2d8pk2LU+Lk0SShmFlmWgczez/BOCQW2mm+6Pqo=
Subject key identifier:   9F:88:8F:20:C9:67:97:5B:D8:18:BA:E3:05:3C:42:33:52:4A:87:44
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EB84755F628D9838FE0E73AC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61f3933f-cafd-39f7-8471-fdbf75462005.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0d0:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:55:f6:28:d9:83:8f:e0:e7:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=e66dabca-a21a-4ba1-a4a2-e83a8b46d8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:a5:9c:80:85:1b:9a:22:05:54:fd:c8:b4:
                    27:e2:dd:33:d1:a3:a6:3a:a2:a9:53:9b:7a:02:b3:
                    7f:8b:6f:ca:2b:aa:07:9d:6b:02:dc:32:59:22:3b:
                    3a:9b:2b:ad:07:ea:09:0d:f9:b8:31:60:7a:49:4a:
                    b6:bc:f8:ee:95:ef:f3:db:eb:ea:f0:c7:b6:f2:e3:
                    93:67:bf:7a:d6:ef:9d:b1:20:9b:54:2e:37:d4:ac:
                    b0:b0:d5:6c:b5:b6:45:ca:53:60:e3:0a:e6:1e:d2:
                    7c:cd:b0:c3:66:fd:04:b4:cf:05:63:40:12:31:c2:
                    3a:ee:a5:58:f6:3c:4f:2f:9a:4b:4c:27:fe:30:10:
                    d8:d5:65:92:b4:50:07:85:6f:a0:b4:98:2d:4c:69:
                    3f:4a:db:e1:eb:1d:e4:54:88:55:84:d4:7f:b8:27:
                    3b:ac:41:af:65:5d:82:e5:f1:ea:a1:74:af:4c:98:
                    f8:6e:1a:f3:28:88:93:ed:79:71:8f:c9:d2:45:76:
                    b0:9d:ff:59:54:bd:c5:ae:8c:8d:20:91:78:4d:de:
                    84:70:0a:c8:9b:4e:82:49:7a:3b:7e:1e:8f:3e:51:
                    56:01:93:3c:fd:ba:1b:10:85:7d:7a:91:06:1f:c3:
                    24:12:a6:83:28:f5:7c:d9:56:3f:61:81:82:e4:9d:
                    9b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:88:8F:20:C9:67:97:5B:D8:18:BA:E3:05:3C:42:33:52:4A:87:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61f3933f-cafd-39f7-8471-fdbf75462005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0d0:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:2f:86:77:bc:55:09:44:8f:a4:37:1a:6c:2a:f1:48:0a:10:
         c5:cc:24:86:13:cc:ec:12:aa:25:05:b0:0e:e2:da:fa:17:de:
         6d:83:09:d6:01:f7:75:0a:6e:95:d7:74:96:92:33:8f:e7:0b:
         b3:0e:1a:d8:78:58:b6:1d:f8:fd:30:b2:9d:9c:ff:22:8f:d1:
         83:16:35:e8:b9:75:4b:38:3d:3e:84:31:7d:2e:f0:4a:d8:2c:
         fe:37:48:dc:b4:9f:cf:eb:7f:8d:c9:9e:30:f5:73:70:80:ea:
         07:70:3f:25:15:dc:d3:a2:fa:c0:0b:5c:01:27:03:14:4b:d3:
         db:0f:bf:b2:6d:12:37:6f:6e:5f:2f:ba:70:b5:28:a9:b3:4b:
         c1:34:6c:15:e4:de:2f:af:fe:c1:b4:2c:52:c5:96:43:97:25:
         ae:60:f4:34:80:87:0c:b4:9d:f6:aa:cc:21:f8:53:6a:b9:7c:
         41:ce:be:3f:dc:7e:b4:c6:a2:57:92:f8:7b:e7:8e:a6:23:4c:
         3e:1f:77:a3:c0:34:01:22:39:6e:62:e5:27:03:b4:0d:9f:57:
         c2:86:1a:64:9a:4d:c3:7a:6d:ba:39:3d:4d:84:e9:ba:70:f7:
         40:6b:46:5a:9a:4f:25:7a:28:6a:78:d4:ec:4f:ae:8e:da:38:
         ad:c8:fe:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:39:21 2026 by rpki-client