Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9211436c-b14f-3d3b-bfba-ab55ee4be3fb.roa
File:                     9211436c-b14f-3d3b-bfba-ab55ee4be3fb.roa (raw, json)
Hash identifier:          aRHbvz33leWaT7SDtBVksrlLPFzxApVN0LM2a58zQIw=
Subject key identifier:   F5:84:B1:F3:FD:35:1E:7E:BD:BE:1A:12:0B:00:49:A8:05:D3:0D:6C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EBC77196DBBFFFB33B2D646C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9211436c-b14f-3d3b-bfba-ab55ee4be3fb.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0d2::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:19:6d:bb:ff:fb:33:b2:d6:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=dff22047-9e67-4bfa-8d13-c8fd58723f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d7:dd:67:05:75:82:68:23:88:6b:a3:34:11:
                    71:02:7e:5d:87:06:f4:81:da:54:4c:5a:7b:26:6d:
                    11:b1:cb:79:45:3a:53:17:a4:8c:ec:de:3d:65:3a:
                    fd:c2:a9:c1:d9:f7:0f:00:76:bf:f0:a0:cd:b4:6a:
                    46:91:17:b7:83:b7:1e:71:77:9d:9f:db:f2:d5:a6:
                    a1:77:69:80:bc:81:9d:8a:fe:43:13:ad:09:16:46:
                    b5:bb:1b:ab:bb:95:eb:91:ca:53:e9:fd:a8:ef:1a:
                    63:30:3e:67:f8:a6:bb:fa:95:7f:7c:b4:c7:ee:c6:
                    33:b4:a0:46:cb:ec:d7:f5:2b:8a:4c:b7:96:92:8f:
                    69:89:02:17:2b:85:5c:3b:33:1e:93:37:f4:53:6f:
                    16:db:76:76:ce:ad:e2:20:5e:c4:b4:12:e3:87:8c:
                    7d:fa:81:c5:c4:60:46:15:69:c1:ee:c9:fa:29:26:
                    06:28:0e:84:5c:cd:d5:ee:5f:96:05:49:17:cf:c3:
                    85:e0:3e:76:b9:49:0a:6f:64:5e:40:43:43:92:49:
                    3c:79:11:a7:17:4c:13:e6:26:72:c8:1b:87:04:e6:
                    38:5a:a1:3b:78:4f:af:c0:60:a6:23:cf:1e:1f:25:
                    f2:d0:71:5c:70:8e:03:e1:cf:de:3e:ee:f4:87:50:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:84:B1:F3:FD:35:1E:7E:BD:BE:1A:12:0B:00:49:A8:05:D3:0D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9211436c-b14f-3d3b-bfba-ab55ee4be3fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0d2::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a1:88:a5:4b:a0:39:a5:b2:22:c2:c8:61:f8:ff:0c:e9:48:
         95:0c:14:2d:1a:99:17:87:0f:d4:04:8e:b2:0c:7e:04:f6:cc:
         30:bb:96:9e:20:43:68:79:13:40:ec:db:fd:5e:79:84:79:f2:
         fc:d0:2c:9a:3b:c7:ff:f5:7b:93:4a:35:3d:32:aa:1b:8e:a5:
         b4:62:ad:e0:d9:fc:f1:23:fc:4b:c4:75:87:8c:5a:bf:78:20:
         58:d0:11:d8:e6:71:79:c8:5b:42:d4:4c:fb:7c:3d:59:7e:92:
         9b:8d:45:b1:bd:af:bf:27:6b:45:6d:f7:5e:c6:ba:4e:72:ae:
         91:42:e2:4b:7e:07:7d:f5:9f:e3:a4:6f:9e:a0:1b:31:d3:1d:
         4a:9f:78:61:74:d6:04:df:eb:03:2f:51:49:ef:b3:01:01:07:
         40:88:c3:b3:77:43:b5:d5:77:f3:5f:13:3f:01:ad:46:6a:5a:
         8d:4c:db:90:9c:cc:65:58:d0:ec:fe:18:59:bc:c8:33:fe:42:
         3f:e0:36:ef:b5:95:28:e9:af:24:29:83:98:c9:68:02:6d:b3:
         a3:d2:38:3b:dd:53:10:9c:d9:3c:3e:75:56:34:da:fc:3c:07:
         ff:87:b2:40:1a:27:6d:2e:cf:13:9d:0a:c6:8c:dd:dd:ee:7f:
         5e:b6:95:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:18:47 2026 by rpki-client