Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8767f217-759c-3dd1-b177-008c26086493.roa
File:                     8767f217-759c-3dd1-b177-008c26086493.roa (raw, json)
Hash identifier:          CpaJZ/v3niDrPd2hAXsQ9sYHwpJX7BbLtH9ULXWHDQU=
Subject key identifier:   7D:8B:F6:5C:CC:88:BF:C4:2D:06:6D:0E:37:CC:25:43:41:79:47:62
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD78B242A562BB80B8EEDBB80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8767f217-759c-3dd1-b177-008c26086493.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     54253
IP address blocks:        2603:c0f5:4000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:24:2a:56:2b:b8:0b:8e:ed:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=e4007427-5249-45d2-a876-845a041487d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:14:27:a5:c2:f5:18:7a:a3:b4:38:d0:01:
                    33:47:9f:44:eb:3c:5d:5e:0c:c0:05:e6:50:e5:48:
                    d9:90:9d:c3:ff:fe:d5:34:07:7b:db:ca:05:c2:11:
                    56:07:e2:f7:57:ff:85:44:6f:3c:d9:dc:d9:55:d4:
                    3f:bd:3a:9e:33:6b:fd:7b:31:6d:50:69:9b:4e:87:
                    32:ac:6c:ee:fa:5c:b6:45:d1:ab:0e:14:0e:d6:14:
                    c5:18:48:09:d8:5f:bd:e5:e6:09:03:25:26:d5:54:
                    f6:14:ed:16:ba:f0:38:7b:91:23:f3:c6:1d:94:f0:
                    f2:67:f9:f5:87:dc:06:03:6a:15:5c:bd:f0:83:b6:
                    43:9f:76:82:fc:83:8e:d7:85:df:79:a7:ff:f3:ee:
                    b6:5b:2f:e8:8a:75:9f:27:88:b0:7a:ea:e4:77:82:
                    73:23:ef:f8:3a:ca:d2:fa:8b:42:da:0e:ea:e1:3f:
                    67:62:15:07:c0:e0:cd:28:8d:89:d8:86:8c:3f:aa:
                    97:8a:9f:32:5b:9e:1c:8b:a9:b1:d3:09:e6:82:db:
                    63:fd:5a:4a:3f:4c:29:8b:60:c0:11:54:a7:9c:31:
                    b4:9f:30:8b:e5:c0:e2:df:4f:fe:3e:7d:5c:54:d2:
                    a2:83:b0:a6:e1:e5:37:c7:b6:2a:f5:4f:76:fa:2e:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8B:F6:5C:CC:88:BF:C4:2D:06:6D:0E:37:CC:25:43:41:79:47:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8767f217-759c-3dd1-b177-008c26086493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f5:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d2:51:84:b1:c3:ab:1e:67:f8:cd:86:6b:cb:35:4f:17:7c:
         1a:7b:d2:00:44:d3:4f:5a:ac:f5:f2:e1:59:a1:89:69:68:7e:
         1d:43:82:a6:f7:34:d0:9a:1a:f4:14:92:48:59:08:53:d1:4f:
         4e:4a:53:34:7d:33:37:23:72:79:bd:b5:53:b6:50:00:64:7a:
         41:20:4e:0b:ed:4d:60:35:da:be:62:2d:9f:03:55:96:fc:0b:
         43:a0:0c:65:70:c8:ce:cb:7f:4a:94:e1:84:7e:be:ad:22:be:
         ef:4a:3b:41:21:c0:da:92:5e:c3:b0:5b:d4:6d:cd:8d:d9:b2:
         ef:2c:ff:05:80:af:71:5d:0c:2c:d5:ae:23:04:f3:64:ab:0b:
         de:77:cb:2f:a6:ed:06:03:e4:71:f6:e9:e9:0e:a4:f4:fe:50:
         04:28:a7:63:b8:cd:6f:55:58:c0:c8:be:c0:67:1a:e6:fe:df:
         d0:0f:be:22:ba:ca:e7:f2:99:d8:69:d5:10:56:80:6a:0a:aa:
         c0:a3:bc:48:ea:85:37:a4:93:ed:38:55:14:98:6a:e8:36:e9:
         ff:f2:f2:4e:4d:e6:00:58:68:75:a6:fe:b8:7e:ce:c1:61:1d:
         6a:d6:08:c7:a7:e5:9d:70:01:68:a5:48:f2:9b:29:b3:5c:ea:
         18:f0:de:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:06:04 2026 by rpki-client