Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b75772e6-b6f2-31df-99cc-035f3aba2b1f.roa
File:                     b75772e6-b6f2-31df-99cc-035f3aba2b1f.roa (raw, json)
Hash identifier:          h3tR4bcaN76hSoYWvaDeG33jah+LdX380i4pO1x1MyI=
Subject key identifier:   C3:23:85:B3:B0:D7:5F:D9:C1:7C:62:1F:8A:E4:A5:F3:4C:17:11:6A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD78B21DD9FEC829C76CD7700
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b75772e6-b6f2-31df-99cc-035f3aba2b1f.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     54253
IP address blocks:        2603:c0f4:1200::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:21:dd:9f:ec:82:9c:76:cd:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=4c753368-be41-4059-9d1c-3fb81691191b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:86:9c:7f:8c:6c:cc:3b:63:61:4e:75:fd:fc:
                    7e:c5:64:4d:69:0e:3c:e4:b6:8c:72:b8:40:15:38:
                    b6:4f:b9:7c:35:82:15:ea:f2:79:3a:31:42:a2:5b:
                    a7:fe:e8:cc:9b:80:0e:2a:60:e6:f8:8d:2e:bd:20:
                    5d:0f:a9:59:02:3b:ab:39:16:bf:30:43:28:f3:97:
                    b7:c3:50:f5:d8:43:9f:9f:fd:41:a5:48:8b:24:38:
                    0e:4f:26:a5:76:dd:06:60:14:b4:3d:24:b6:26:cb:
                    ad:d0:46:70:96:a5:1b:d7:c9:63:a5:03:56:57:fa:
                    a6:e4:b3:d0:77:a9:87:ee:26:af:59:c1:e5:bb:5a:
                    87:e2:19:6d:07:14:15:ba:0b:00:31:3d:da:42:9c:
                    21:ff:d3:1f:b0:b5:bd:5b:42:52:42:da:6d:22:69:
                    ae:36:22:c0:d4:f8:ee:a5:07:b4:72:92:35:28:1c:
                    9f:70:97:c9:85:7d:b6:44:13:6d:38:a6:ac:d0:16:
                    b1:fe:70:67:3f:f0:54:88:0d:62:8f:c6:cf:62:d9:
                    6c:ca:16:ab:76:0a:5b:cd:a2:cb:64:eb:0e:b2:ed:
                    c9:b5:25:e2:71:57:6f:f3:5a:ea:a3:68:d2:16:01:
                    f4:d0:72:ee:9c:97:8b:3d:1b:e3:35:06:02:49:f2:
                    ef:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:23:85:B3:B0:D7:5F:D9:C1:7C:62:1F:8A:E4:A5:F3:4C:17:11:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b75772e6-b6f2-31df-99cc-035f3aba2b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f4:1200::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:cc:a0:d9:4c:82:b0:cc:a1:5e:0f:34:7c:3b:c5:6e:0d:df:
         95:fc:14:41:5a:b9:5f:3b:3e:4e:67:61:f3:ad:ec:2a:af:9f:
         c8:e0:6b:de:b0:6c:26:61:85:d0:37:89:8f:6f:2e:72:63:cd:
         aa:9c:3b:35:92:da:14:b2:eb:1a:e7:6a:b8:a8:ae:4e:8b:1f:
         38:f6:93:8b:93:85:93:b1:e3:5b:00:eb:66:00:c3:48:b9:f4:
         26:7b:16:d3:65:52:aa:55:eb:f2:96:3c:a8:5a:d9:b8:99:8e:
         64:ea:63:48:73:72:d7:b7:7c:5d:00:b1:7a:9d:25:41:92:9f:
         c9:1f:ee:d6:e5:ad:20:2e:66:09:4c:2c:4b:38:19:d0:e0:e4:
         88:a0:51:ff:5d:b8:93:f0:a5:25:42:4d:34:72:b2:ba:86:e5:
         42:f7:df:8e:53:4e:09:dc:11:25:85:c2:ec:e5:b8:77:2c:98:
         b3:6d:f5:65:8c:fd:65:cd:f6:51:37:7e:cf:38:71:ba:ca:e2:
         fa:fb:d6:b6:64:23:85:16:81:e1:24:a3:1e:ba:60:3a:cc:c5:
         70:50:d5:c7:5e:3d:f9:d3:2e:d4:d5:04:06:46:15:30:28:d4:
         75:df:30:a7:c8:40:c8:e8:ca:b3:6a:7c:56:77:51:f2:07:5f:
         e2:e5:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:03:34 2026 by rpki-client