Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64aece37-0f65-3acf-a89c-08404c04574c.roa
File:                     64aece37-0f65-3acf-a89c-08404c04574c.roa (raw, json)
Hash identifier:          aBc9s8jJnZq1VjoBXL7t/4AAo2V+udNYrRyQP/cwjjo=
Subject key identifier:   0F:64:48:95:37:DC:26:79:03:B4:72:48:B7:36:36:AE:21:5F:BD:05
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E66DA39982E5BC3F561871080
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64aece37-0f65-3acf-a89c-08404c04574c.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     31898
IP address blocks:        2603:c027:8000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:39:98:2e:5b:c3:f5:61:87:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=501b909a-1df1-48b5-9238-3e1471bb1b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:83:ff:50:c1:df:4a:8f:ab:b6:60:50:70:
                    e4:1d:ee:08:c5:a5:fd:d3:24:5c:bb:2c:a1:55:ff:
                    f1:6a:cc:fb:c3:76:0a:fc:18:39:fb:0e:16:b2:1c:
                    89:5f:37:32:be:36:7e:3d:38:71:83:b4:df:53:5c:
                    aa:69:d8:f8:5a:26:99:fc:6f:37:47:99:40:60:e7:
                    3a:f1:58:68:8d:fd:b5:48:0c:8c:5e:35:60:c3:0f:
                    d3:fe:42:84:53:e5:fe:f9:6e:82:91:9d:d8:1c:ca:
                    e2:2e:62:29:0f:1f:94:29:94:cb:d0:47:74:05:ff:
                    b3:28:09:f0:61:c1:93:7e:7b:69:6e:4e:04:c1:a9:
                    1b:f1:16:88:dc:32:28:ef:e7:49:e7:8a:a2:60:76:
                    e9:27:d9:56:0f:40:e0:b6:99:a9:2c:ec:01:4d:85:
                    e6:11:59:c1:b6:c1:9e:b5:95:26:6a:c1:b3:8f:52:
                    d8:2e:fb:50:84:d1:bf:b7:f3:bc:5c:44:3d:3a:05:
                    69:66:53:84:40:d0:78:01:50:c1:19:0c:37:0f:65:
                    cd:be:f9:ed:11:c4:f5:81:f8:c2:7d:f1:89:c6:c5:
                    05:49:f8:7e:ef:4c:17:19:8b:15:b5:60:23:3e:aa:
                    c0:68:a3:bf:03:e6:d9:d8:b0:65:cc:8d:91:2f:b1:
                    da:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:64:48:95:37:DC:26:79:03:B4:72:48:B7:36:36:AE:21:5F:BD:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64aece37-0f65-3acf-a89c-08404c04574c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c027:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ff:ec:7b:26:79:9a:3e:95:ca:a3:6c:e4:34:64:c8:a6:c4:
         f2:ab:ea:a9:c3:5a:af:fb:27:2b:b2:bb:7d:d1:6c:be:28:40:
         f6:a9:e3:93:b9:7a:1a:86:0c:b6:0b:5f:8f:62:78:b0:09:3f:
         d9:90:54:be:28:92:23:6b:22:b5:83:53:da:25:0c:c9:27:29:
         4d:ce:d0:87:23:0c:bc:28:a2:31:72:2a:12:dc:4b:98:71:49:
         ee:32:b4:74:5e:83:29:c0:64:ee:1c:8f:7f:1d:f2:8e:39:e7:
         a6:63:bd:df:95:53:79:c9:77:23:ff:08:13:bb:8a:b4:83:b9:
         91:eb:fd:f4:f5:20:53:04:7e:85:ea:26:58:08:9e:42:8b:31:
         5f:4e:f8:79:56:a6:cd:3e:c3:6e:6f:a1:f5:7c:d7:86:80:bc:
         37:0d:e3:72:d7:13:da:f7:e8:5d:1e:f1:d7:ac:58:c9:7b:4c:
         f2:91:10:db:23:a4:5d:03:9f:6f:04:1e:a5:52:9d:4b:93:94:
         00:82:be:47:99:dd:2e:8a:60:ab:82:f1:78:ef:92:48:b9:a0:
         d0:99:0d:80:59:eb:e4:d3:59:b8:ae:ad:96:b8:2d:de:ff:e8:
         28:ee:c5:f4:f6:34:bd:68:06:b5:e3:a1:a4:77:fb:31:3b:d7:
         a8:04:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:53:08 2026 by rpki-client