Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e3841b4-a0c8-32de-9716-518415329152.roa
File:                     8e3841b4-a0c8-32de-9716-518415329152.roa (raw, json)
Hash identifier:          RaM9/4vbXB1IuOTsvnt5GrlXM/hjRxW0nWaK2mMjMBM=
Subject key identifier:   48:59:65:AC:65:2F:48:0D:E1:8F:5B:49:20:97:06:05:7F:C6:64:72
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6F3EAE950FEB5BA1ADFA1E40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e3841b4-a0c8-32de-9716-518415329152.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:8400::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:ae:95:0f:eb:5b:a1:ad:fa:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=6d131d67-7c89-479f-a7ee-a364ff5b9d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:61:12:4b:ea:50:21:c8:13:ef:f6:26:f1:
                    ba:08:49:01:b0:51:9b:f8:2c:76:2f:ee:34:01:05:
                    38:33:39:0d:6f:a9:2d:06:e0:24:82:c1:36:68:9c:
                    44:bb:87:59:d8:81:a4:93:b0:03:78:00:0b:f5:5a:
                    7a:36:e6:af:f9:85:ba:45:93:64:35:f6:dd:c6:35:
                    6a:fa:cb:77:eb:ad:15:c0:76:59:06:27:a1:28:fd:
                    7a:9f:13:27:00:c1:56:9c:45:2c:31:02:f2:d8:5a:
                    3b:c7:62:69:17:77:49:45:0b:c1:d3:8c:54:7b:93:
                    49:ab:78:49:94:3a:e2:52:a0:5a:05:f2:5f:8d:49:
                    77:4c:d4:e9:80:6a:a7:98:5c:51:98:4b:33:8f:f6:
                    8f:21:d7:84:47:f9:9d:30:07:46:c3:46:c3:43:ed:
                    9d:91:cf:3a:d5:fd:5a:89:ac:90:76:31:9b:c7:30:
                    eb:12:9d:7f:09:70:79:26:05:6b:05:3d:d0:35:e9:
                    f8:60:d0:1e:db:d4:5b:1d:7e:c9:ff:2c:12:b8:cd:
                    34:ec:fa:f9:35:6a:bc:03:dc:e7:79:4a:d4:51:db:
                    bd:1f:9f:da:10:b2:1c:72:2a:67:dc:62:18:99:fa:
                    b4:5f:c5:4a:4f:2d:ee:03:1e:65:ba:6d:e9:6f:66:
                    f0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:59:65:AC:65:2F:48:0D:E1:8F:5B:49:20:97:06:05:7F:C6:64:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e3841b4-a0c8-32de-9716-518415329152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:8400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d9:25:2a:57:a0:52:f8:9d:82:c6:76:35:d2:78:16:5f:b7:
         72:43:2e:a4:20:bf:ba:1a:83:16:d7:59:41:ae:9a:b8:a2:7f:
         01:4e:75:ee:af:ab:51:a6:e6:3f:79:24:8a:0d:64:60:76:96:
         3c:db:c5:b6:92:0b:c4:44:38:7c:e8:dc:e7:3d:18:45:45:83:
         71:69:6b:ce:18:79:38:e8:90:bd:e7:71:08:87:5b:d4:7b:fd:
         ee:cf:57:22:fe:37:f7:6c:9c:b4:82:bc:f1:98:fd:f7:d3:fe:
         df:20:e8:4e:3c:e7:65:5d:9d:c0:67:d2:46:2f:94:27:c6:89:
         3e:b4:c9:74:e2:2b:c8:c1:61:cf:a9:3a:31:a0:30:59:34:16:
         22:ad:1e:c9:11:00:a5:09:c7:58:5f:6a:52:f9:00:56:74:45:
         2f:fa:a7:68:c0:20:77:1a:08:93:e3:0c:51:6e:8f:35:90:71:
         6d:ae:c3:42:86:e1:f7:20:cc:9a:0a:85:6d:04:80:17:26:bd:
         7d:0e:f6:30:d4:89:a6:24:64:6b:d7:76:8d:cd:29:99:70:c5:
         4b:02:96:cc:fd:ae:46:31:12:7b:7b:36:64:6c:8f:1c:c8:4c:
         1f:34:c6:02:4d:61:e3:3f:30:04:dd:fd:9e:6a:25:0a:4b:65:
         a0:47:4c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:51:30 2026 by rpki-client