Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7e7591c3-b2aa-34d5-9b06-8ffeea457bc8.roa
File:                     7e7591c3-b2aa-34d5-9b06-8ffeea457bc8.roa (raw, json)
Hash identifier:          cNXg3qbIurXmvk5JBMKc6h/EVvBJZJ9mnhqrJBck2ak=
Subject key identifier:   CA:01:0C:58:A9:0F:05:BB:73:9E:89:BB:BE:9E:D9:6B:AB:60:64:B7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA7883382AE5338112FB39580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7e7591c3-b2aa-34d5-9b06-8ffeea457bc8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0be:4000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:33:82:ae:53:38:11:2f:b3:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=292c2875-8c9c-485c-81f4-6422e7592105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:41:4e:f3:16:3e:63:06:2e:1f:79:0d:b3:5a:
                    ca:c9:9e:3a:39:b3:c5:34:cd:35:85:9c:01:3f:80:
                    03:54:de:90:b1:2c:92:8b:a5:4b:9f:b8:b7:ae:c3:
                    6a:99:8a:18:97:af:9b:39:aa:fe:03:7b:ab:f2:c3:
                    23:d3:01:63:4e:28:d4:50:e0:12:26:4f:10:14:d9:
                    7b:9d:e9:6d:4c:b9:02:de:00:e5:7c:ba:23:ea:dd:
                    03:e2:40:f2:01:f0:b9:89:8d:7c:c3:e2:d4:7f:5c:
                    ed:84:82:60:56:94:f4:bf:30:d3:e1:a2:8f:a1:07:
                    7b:0b:84:bc:b1:6d:ef:be:53:07:4c:0d:50:b7:bb:
                    6c:5a:a4:a2:f4:66:e0:ea:78:e8:74:5d:7f:07:c9:
                    9c:c6:ea:50:f8:cd:70:1a:75:c2:0e:94:d2:b3:3f:
                    75:a5:6d:6c:d7:bd:57:d2:06:f6:2a:65:c8:5f:a5:
                    20:5a:23:f1:ca:47:3d:4d:c9:a9:04:05:45:fc:86:
                    a6:c0:ee:45:24:83:ef:ce:7d:0a:b4:5a:58:30:3a:
                    56:98:7e:dd:62:88:9a:45:46:fa:56:a9:37:11:48:
                    b3:d2:c2:30:d5:b8:f3:54:d3:3b:96:c7:97:84:f2:
                    67:a2:82:28:1c:cf:e5:b9:07:34:12:b6:a9:f7:fe:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:01:0C:58:A9:0F:05:BB:73:9E:89:BB:BE:9E:D9:6B:AB:60:64:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7e7591c3-b2aa-34d5-9b06-8ffeea457bc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0be:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:8d:48:b7:00:0b:aa:6d:0e:37:dc:82:9d:39:b4:27:3c:ba:
         d2:cc:2a:10:f3:e8:8d:19:61:2b:1a:ae:c5:32:a2:ed:d7:fe:
         56:e5:dd:1b:f4:58:8d:25:56:1e:97:f7:1f:44:58:3b:72:1c:
         a5:d6:fe:65:96:2d:3e:6c:c3:ea:55:b7:06:5a:b9:ef:d8:90:
         1c:f6:05:47:02:38:07:fe:6a:a3:05:22:c7:c3:19:16:1e:00:
         95:a1:80:32:ac:b7:03:24:89:21:7a:99:85:14:3b:c3:5a:85:
         27:f4:6f:3d:66:59:d1:99:2b:7f:53:34:fa:b8:3d:9a:4f:52:
         f4:93:30:14:31:eb:a0:1e:d3:47:40:84:7d:19:a0:06:62:ec:
         59:5e:ac:e6:2c:63:17:b8:d0:44:7d:e3:fe:e1:cb:00:3a:64:
         db:ed:bb:10:da:4f:3b:35:32:d7:05:40:04:94:60:68:56:5f:
         e1:f2:f4:40:0e:a4:72:54:a8:49:0b:06:78:e3:b3:11:33:31:
         96:9e:02:29:22:68:72:70:f0:42:80:f4:7a:0d:41:d5:95:b2:
         77:38:ae:03:3e:62:66:70:22:18:c3:8b:dc:5b:49:5f:31:32:
         32:c1:ab:f6:ef:20:1c:ba:4c:8f:dd:21:0b:0f:78:a0:dd:b0:
         78:21:d2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:36:32 2026 by rpki-client