Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/93555433-6c3d-3fb9-8f66-da33e97431ef.roa
File:                     93555433-6c3d-3fb9-8f66-da33e97431ef.roa (raw, json)
Hash identifier:          nr06PXYogDMJ1tki2c0CXg6UtMEwzzXvN1DVPQiACZM=
Subject key identifier:   4F:B1:B7:64:3F:35:D8:90:9D:E5:C2:8C:93:C0:35:13:D7:98:1A:74
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F498A90546C8C4476A09BA440
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/93555433-6c3d-3fb9-8f66-da33e97431ef.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        2603:c068:2800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:90:54:6c:8c:44:76:a0:9b:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6d0636b1-1a12-49f0-bd2b-c8e5372699dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ef:15:23:64:6d:ed:bc:c7:44:fa:f3:6f:c2:
                    c7:21:77:51:fa:9f:58:ba:d8:ba:88:34:c2:4e:56:
                    3c:04:20:8c:b4:b9:10:f0:17:f6:79:81:65:ce:b8:
                    c3:04:29:fb:8d:7a:d7:43:a4:16:f1:7f:2f:0a:c6:
                    33:d6:25:f0:3f:09:66:74:8a:fb:c3:b6:44:f9:f6:
                    a4:0c:29:e5:4a:5f:57:1f:c1:3d:b5:55:25:d2:0c:
                    d6:d8:ca:5a:c8:c5:29:ce:bc:26:57:be:b6:48:de:
                    d8:9f:17:5d:b0:4f:ba:d5:a5:4d:90:8e:59:6d:3a:
                    70:c4:ee:df:f8:12:b2:bc:22:58:30:6a:09:85:e2:
                    e6:90:69:96:9e:aa:d8:9f:7a:d6:a4:58:44:74:81:
                    ae:03:b1:52:a0:50:34:ad:f7:6b:bd:41:cd:e1:72:
                    e9:b7:85:1a:7a:9d:ac:3b:58:0c:1b:9e:27:c5:7a:
                    14:a3:d9:70:ce:48:12:99:b7:58:af:77:87:61:97:
                    37:47:29:93:67:7d:ca:af:6d:09:b2:a3:5e:01:d4:
                    e6:98:08:5f:21:f0:21:39:32:4c:c4:28:bd:58:4c:
                    06:38:f6:09:3a:9a:c5:6d:bd:f4:7b:23:65:24:7e:
                    b6:de:ce:ff:cb:40:36:8f:7d:93:9f:9a:34:b1:44:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B1:B7:64:3F:35:D8:90:9D:E5:C2:8C:93:C0:35:13:D7:98:1A:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/93555433-6c3d-3fb9-8f66-da33e97431ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c068:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:5a:21:13:a3:19:8e:5e:e6:63:21:2a:8b:d5:3b:80:7e:30:
         56:e1:ac:ed:16:67:68:db:1d:29:a2:b5:03:fb:8e:c6:e0:62:
         2e:a9:a9:60:cd:aa:a2:f1:9f:da:fa:f1:ed:27:07:e6:25:62:
         8f:8c:cf:83:5f:25:19:05:c0:66:c3:6d:81:c7:b1:35:d0:f8:
         a4:ce:b9:ce:a7:72:62:d1:62:7d:70:38:c8:5c:ad:0b:65:0b:
         a0:d9:e3:a7:5c:b7:02:78:8c:a2:d8:a4:35:7e:ad:34:18:b3:
         7e:d1:a0:fb:f0:bc:30:00:73:fb:41:33:b9:c0:7e:95:b8:c7:
         d7:c2:91:b9:ac:40:e4:c0:2b:71:1f:2e:2b:b5:4e:0c:82:c2:
         f8:a9:45:10:c1:02:d6:9b:3f:62:9c:ce:d6:c0:6d:b7:32:f0:
         2e:5d:00:10:b2:2d:42:9b:d6:68:cc:91:0f:98:00:a9:d3:f8:
         a6:e2:5b:35:12:5e:cb:7a:60:34:fd:2c:04:f5:c5:be:5d:8d:
         54:0a:ec:75:85:3b:10:4f:26:ed:ab:f8:36:0b:ab:a9:79:92:
         dd:51:92:a0:53:19:f6:3c:7c:ca:fe:6d:9a:77:db:56:42:60:
         ee:af:46:9c:a0:56:af:90:5d:2e:f5:40:18:ef:67:2f:84:b4:
         c2:a0:64:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:45:48 2026 by rpki-client