Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6e2a9f60-d6e5-3944-8943-18697aedc5e3.roa
File:                     6e2a9f60-d6e5-3944-8943-18697aedc5e3.roa (raw, json)
Hash identifier:          uzqQ1/iWUsaUKZhRFtwVB1/Y1/u2G+QzAO8w8ONLUXQ=
Subject key identifier:   7D:64:1B:FC:E7:55:4D:51:D3:52:A5:35:91:DD:DA:29:EB:FA:D7:C3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA78837D2E73E1375AFC71900
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6e2a9f60-d6e5-3944-8943-18697aedc5e3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0d9::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:37:d2:e7:3e:13:75:af:c7:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=eee8f8b3-2af6-46d6-b98c-86fe09b9b5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a6:c6:5d:76:93:fc:de:0d:96:f0:d8:7c:67:
                    f1:7b:59:b3:04:ee:2b:2b:75:96:8c:fb:19:a0:3d:
                    ae:f6:88:a9:0d:65:ba:a2:f1:8e:67:6d:a6:db:a9:
                    06:c9:75:9e:7e:40:d4:1a:ce:24:de:a6:32:d4:db:
                    be:18:a2:cc:fd:34:a8:56:64:31:39:a7:03:9d:ec:
                    b7:b4:85:9d:7e:04:a6:99:32:2b:53:c1:45:eb:76:
                    02:2c:1e:03:67:ac:be:8a:12:23:3a:b3:17:9e:17:
                    76:b4:10:87:3b:4e:b6:15:96:ee:73:95:67:c3:78:
                    43:e6:d9:db:b9:b6:ae:c2:6b:c2:cc:0a:46:fe:81:
                    d1:73:72:d8:af:39:f8:1a:5f:56:9d:43:22:ac:01:
                    65:8d:be:8c:91:32:90:34:3c:38:57:23:b5:1f:ee:
                    05:99:0b:26:88:4b:b0:c1:25:ea:0b:f2:0c:61:14:
                    d2:9f:1c:de:62:6e:44:e9:1b:84:c8:41:b2:73:98:
                    db:22:aa:97:70:db:7b:4d:1d:61:20:b4:47:3b:3e:
                    50:c9:55:2e:43:d0:6f:d5:23:ef:f9:b9:a4:3d:a5:
                    c3:5a:68:02:9d:9a:84:1a:4d:db:0b:63:2d:4c:c7:
                    e9:83:a8:5e:35:7a:8c:40:3c:b8:74:ba:9c:24:cf:
                    59:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:64:1B:FC:E7:55:4D:51:D3:52:A5:35:91:DD:DA:29:EB:FA:D7:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6e2a9f60-d6e5-3944-8943-18697aedc5e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0d9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:0d:ba:f4:79:10:f3:c4:35:4b:35:ff:7d:f9:f0:96:b9:12:
         01:f7:66:f4:fd:26:4b:2b:6a:d0:31:b9:ef:d5:58:31:69:52:
         14:8b:10:4e:f5:3e:87:00:51:70:3b:fd:e5:26:c8:73:e8:1b:
         30:6e:a9:7e:bd:f6:5f:b2:60:72:1e:d2:17:16:6e:4a:cf:be:
         ea:f0:da:78:e4:9d:8e:69:8f:6e:f0:b9:6a:f8:aa:91:45:e2:
         ec:15:fa:f8:05:8a:20:c5:82:59:ff:e5:cd:e7:4e:64:29:ff:
         70:e3:05:2f:87:19:8d:27:64:ba:01:92:60:20:fd:2e:4b:6f:
         61:99:31:d6:c1:c9:51:55:f6:65:6d:a4:1e:64:1c:cd:d7:f9:
         d8:68:ad:c5:ae:76:00:59:b7:97:a2:f0:60:b4:e3:91:52:35:
         2c:d0:13:2d:14:b6:10:cc:61:d1:47:72:59:3c:f4:02:44:35:
         2d:08:a3:29:53:c5:aa:6f:ed:22:4e:fe:20:5f:3f:87:ff:49:
         dc:e0:ed:a1:da:50:e6:6e:89:a9:f1:c9:23:18:2e:2a:2e:b8:
         dd:01:8d:ca:fc:f7:86:d2:16:29:9a:f4:b9:69:b2:88:24:e0:
         38:c9:7d:cb:fd:eb:df:40:69:33:f0:e8:c7:f8:eb:29:b0:f3:
         84:70:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:20:08 2026 by rpki-client