Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b20e4012-fff3-3e25-924a-a029bf37b709.roa
File:                     b20e4012-fff3-3e25-924a-a029bf37b709.roa (raw, json)
Hash identifier:          gob6zAvJSTzOYi2CcIXe/2AssUuLv219WSVckRGE3Gg=
Subject key identifier:   FA:F1:12:4C:EF:05:4B:51:43:1A:91:A0:0B:4B:DC:9F:EE:9F:4D:3D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6DD4CA3F7505D1A8AE5BF300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b20e4012-fff3-3e25-924a-a029bf37b709.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c02b:4000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:ca:3f:75:05:d1:a8:ae:5b:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=bb42d4ce-955e-4e4b-b9d8-8d274a29251f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:82:65:32:a1:00:2d:8f:c2:e6:f3:06:24:1a:
                    03:5c:4b:7b:5a:19:b1:d6:7b:a0:29:52:29:90:fa:
                    54:11:4f:52:33:11:49:77:ed:a7:cb:b1:48:f6:2b:
                    95:a5:de:c3:fe:a7:a3:a6:fe:cd:26:a4:67:e2:fe:
                    13:29:96:cf:aa:1b:f8:40:2c:fb:4a:95:fb:ff:3d:
                    6c:6e:4d:55:af:36:84:c2:3f:92:8a:87:70:68:7f:
                    6e:48:40:da:c3:6f:1c:b5:3d:e2:55:8e:67:77:a3:
                    b2:f5:20:dd:c8:48:bb:f8:c7:e5:d3:09:ce:f8:fd:
                    c8:ac:f2:19:71:0d:6c:b3:6c:1c:58:33:b4:76:6a:
                    f3:9f:fc:c3:ab:51:8f:c6:f6:ac:33:ae:13:1b:da:
                    f8:25:f8:e3:94:8b:d3:8f:99:d9:b5:0a:27:13:3c:
                    7c:2a:3f:e2:dd:e9:23:d2:d0:fd:21:1c:b5:e8:c3:
                    0a:38:d5:14:15:fc:3e:87:65:fe:6b:70:64:39:18:
                    5f:c8:5b:c9:ca:5d:c0:7e:98:0e:c9:96:11:32:3b:
                    de:c1:53:9f:0e:9d:d5:15:5c:e6:cb:dd:84:03:2b:
                    83:dd:8c:37:2b:de:f4:2e:8a:1d:b5:a7:51:f4:35:
                    3e:89:f9:ea:70:30:98:81:67:70:31:20:7c:5e:0e:
                    ce:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F1:12:4C:EF:05:4B:51:43:1A:91:A0:0B:4B:DC:9F:EE:9F:4D:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b20e4012-fff3-3e25-924a-a029bf37b709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c02b:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:30:31:ba:5e:16:e3:09:86:85:e6:76:b0:a6:76:d9:f2:1d:
         f1:82:69:a8:5a:bc:30:44:f6:6c:a9:1b:fa:05:58:b1:aa:1c:
         b8:c2:be:fe:7a:13:ce:b5:b6:71:f9:9f:ca:23:7a:7d:57:44:
         9e:62:be:d0:08:f4:52:03:13:75:bf:12:54:a5:3f:a8:19:c9:
         f0:b8:4b:cb:2c:ae:e8:cd:15:78:0c:5c:c9:b5:3b:db:dc:07:
         29:ab:cc:7f:c7:a8:0c:00:22:92:b6:3a:a0:f5:5d:de:a3:5e:
         28:25:8f:80:dc:62:02:83:eb:ad:0f:d2:12:63:80:37:8b:5c:
         69:1e:0a:47:da:5a:c9:a4:34:84:71:9c:49:f2:8b:1e:c7:61:
         35:99:b1:c6:f8:be:c3:4b:95:7f:7d:0a:4a:0d:a6:57:84:7e:
         28:c3:aa:a2:3c:d6:f1:76:5a:75:95:8c:20:e1:b9:cb:99:b3:
         77:97:f8:c1:19:c7:cf:e1:4d:ac:05:d4:d0:a2:b3:bc:e3:e2:
         0b:23:a4:f4:69:0d:6a:d9:8c:7e:80:f5:19:05:0a:60:38:d3:
         79:bb:0a:b9:e1:5c:69:cb:5e:15:e6:3d:e3:9b:48:e4:4f:96:
         b9:1a:9f:d7:77:f2:03:74:38:95:2a:8b:b1:fd:ba:2f:a8:ba:
         00:92:8c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:49:11 2026 by rpki-client