Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b99276dc-4a42-38cb-afa1-e41f41b9df4a.roa
File:                     b99276dc-4a42-38cb-afa1-e41f41b9df4a.roa (raw, json)
Hash identifier:          XoqNwRqiX91eIDXKy4Dv5b3lWZU/6VHfb++UAhoiFFM=
Subject key identifier:   36:FF:68:00:B9:BF:86:A0:4A:42:62:BD:7D:F2:F6:8F:89:9A:AA:E2
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6DD4D6EACF464A04E4EE28E0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b99276dc-4a42-38cb-afa1-e41f41b9df4a.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:a800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:d6:ea:cf:46:4a:04:e4:ee:28:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=1163a2be-b9f0-428e-be0d-621cc5eeccbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:f9:af:f6:b6:0c:43:9b:23:6c:51:cc:c8:
                    9a:dc:8a:dd:da:17:e0:55:2d:c5:fc:ed:1a:1b:bf:
                    c5:b4:02:74:88:02:d2:85:d8:86:70:20:09:13:fc:
                    a3:47:a6:9c:65:84:9b:8f:9c:6a:d7:3e:e9:fa:19:
                    29:e8:1c:06:d1:b5:ba:cb:be:b9:1d:57:73:9e:34:
                    3d:70:cd:2c:79:2f:13:43:18:6d:18:2f:88:6a:bd:
                    d9:5b:ec:47:16:5a:ef:b2:75:b3:d0:60:32:81:5d:
                    fe:de:96:a3:0a:72:4b:49:60:26:fd:90:a8:74:44:
                    82:67:3b:9d:30:dd:29:6c:7d:cf:63:c8:e4:07:8c:
                    ea:84:1d:23:7f:61:11:82:07:a8:c7:7a:15:65:61:
                    74:35:da:13:4f:d0:90:3e:27:d8:5b:2e:a1:4d:9a:
                    f5:31:19:83:26:f3:19:04:9a:95:b6:33:9b:7c:e5:
                    db:17:fa:b3:39:70:25:dd:37:f8:9e:5b:9d:7b:9e:
                    bb:9c:0e:95:56:da:5d:fc:53:ce:ce:5c:82:23:f1:
                    1a:8c:21:97:ab:46:12:3b:64:7b:21:ca:35:d4:03:
                    37:86:7a:80:72:d7:a2:d2:0b:f4:65:36:2c:9c:6d:
                    0e:56:29:a8:48:62:b9:fb:49:e9:00:3d:02:7e:47:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FF:68:00:B9:BF:86:A0:4A:42:62:BD:7D:F2:F6:8F:89:9A:AA:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b99276dc-4a42-38cb-afa1-e41f41b9df4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:a800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5b:8d:78:a6:b8:e5:cd:fc:32:17:80:77:f4:53:bb:5b:32:
         fe:3a:84:b6:fd:bc:9a:99:5d:12:da:8f:49:59:03:9c:e4:e0:
         0b:cf:5e:bb:e7:1f:8f:4d:3b:b4:61:6d:43:ef:9e:36:86:46:
         bc:bf:91:c4:13:82:df:6f:0b:0f:ff:79:ec:e0:e0:7a:8c:1e:
         4a:23:40:ad:5b:25:b3:42:d2:16:14:e9:a0:a2:2c:77:5e:7a:
         e0:67:64:72:1d:f2:2d:4e:55:7d:eb:af:85:43:f5:76:36:db:
         f8:1c:09:17:ae:26:b6:15:43:b8:d8:4d:13:52:c8:7a:b3:0f:
         07:9e:14:69:9c:6f:d6:8b:fa:07:48:07:e0:0b:4f:1c:62:b2:
         1f:a4:80:a5:b0:e5:87:54:4d:b5:d1:6b:0a:8e:95:fa:30:80:
         49:b1:d3:c8:ff:02:a9:08:b9:d6:f6:73:0a:1c:d0:3a:d3:2b:
         b3:5f:e9:fc:5a:fc:e3:84:4a:91:27:1f:a1:f2:70:d5:3a:b7:
         56:fe:b5:5f:09:69:f4:b1:8c:c7:67:e9:62:e6:78:6e:8b:8d:
         30:82:f3:7a:bb:24:1f:1b:ca:26:05:47:d3:0f:8f:0a:d2:e3:
         6b:1f:80:68:f3:88:6b:66:29:32:8b:d1:05:a3:48:08:f0:82:
         51:49:0e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:45:29 2026 by rpki-client