Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bd4555d5-87e8-36d1-a44d-c3db06a95483.roa
File:                     bd4555d5-87e8-36d1-a44d-c3db06a95483.roa (raw, json)
Hash identifier:          W5vWJx7Is/yD24bPb1C+ikhT8mInv81vhNE7s8Lp0rM=
Subject key identifier:   3E:CF:61:92:A0:E8:C5:ED:83:08:49:BF:64:2B:E4:D9:A4:F1:D8:11
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA78833E77F3441950147C780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bd4555d5-87e8-36d1-a44d-c3db06a95483.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0d5:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:33:e7:7f:34:41:95:01:47:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8f44f9d6-7089-47a1-b4a8-4d137ba587af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6a:45:ec:5e:17:1e:8b:9a:81:a8:ff:99:6d:
                    44:9b:b6:f6:03:6f:c3:83:32:bc:32:eb:b5:d7:24:
                    cc:c6:7b:c7:94:1f:ee:bf:d3:6d:aa:d7:6b:70:20:
                    99:20:ae:dc:7f:f5:07:0f:4d:1a:6e:ec:25:a2:8d:
                    83:89:78:c5:71:f4:87:3c:d0:4f:65:b4:11:10:ca:
                    1e:cc:e8:f2:c8:59:d0:90:b8:24:02:5e:9e:1e:d2:
                    a7:70:59:3f:a6:c6:0f:b3:1d:f1:4f:cc:67:2e:ae:
                    a5:52:e8:67:77:80:fc:f4:12:0b:78:0d:0f:70:2c:
                    31:02:d5:1d:1d:3c:51:77:a4:69:b4:a0:eb:4b:be:
                    ce:c6:99:ed:30:54:ba:0f:19:1c:f7:48:34:9a:2f:
                    d5:34:58:a5:51:17:97:cf:e3:51:9a:4d:2c:de:a8:
                    48:03:f5:06:5a:bc:54:ab:21:36:f1:bd:f9:8b:e1:
                    c4:ca:ed:2d:ce:3a:53:76:e2:d9:a0:0e:30:44:65:
                    c1:19:6f:9d:a3:fc:af:3b:b4:ec:72:aa:3a:d4:4a:
                    58:f0:16:ce:88:7c:2e:2f:cf:87:54:5e:6a:63:eb:
                    c1:fc:be:12:5a:8e:71:94:02:0c:72:8d:ab:17:58:
                    12:40:b7:f5:71:9e:43:7a:5a:77:cd:26:47:c1:ad:
                    92:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CF:61:92:A0:E8:C5:ED:83:08:49:BF:64:2B:E4:D9:A4:F1:D8:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bd4555d5-87e8-36d1-a44d-c3db06a95483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0d5:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:24:e2:ca:38:cd:40:0b:7c:1c:08:ed:ea:07:9a:0d:e6:54:
         4c:0f:3e:2d:0d:91:1c:aa:69:a1:81:14:ec:69:e0:00:9a:3d:
         93:13:e5:0c:50:2f:7f:ae:d7:11:42:1f:e0:7d:56:4a:5e:6a:
         48:7c:15:51:87:a2:56:30:fe:bf:1a:bb:0f:f8:e4:3e:68:4a:
         cb:72:c0:81:78:c6:14:90:cc:5c:83:21:34:84:3a:a7:0f:e6:
         ea:ed:bc:7c:c6:93:03:3f:0f:5c:60:79:32:63:d5:0d:36:34:
         22:1a:1c:6d:5d:6b:7a:ea:4a:32:80:f0:4d:6a:0b:a8:b6:05:
         33:c1:c1:e8:d8:2f:6f:d2:fe:b4:82:62:aa:52:0a:25:be:c2:
         e1:5a:95:94:5b:38:7e:cf:30:f8:02:63:63:ce:57:f4:2a:bb:
         6f:f2:53:b9:6d:84:3e:d5:25:3f:3f:26:15:7a:44:5a:c8:aa:
         aa:a8:93:46:73:c4:1a:90:3f:1d:5e:61:b3:da:05:f0:c0:08:
         fa:0b:d7:f8:87:29:99:5f:c0:81:79:9f:d2:ca:a2:37:0a:38:
         3b:12:73:95:8a:d1:c2:86:7a:82:2f:10:a7:00:3e:b1:4e:75:
         aa:b7:7d:7e:5c:94:28:11:ed:9c:c4:e2:fd:e3:f0:d2:07:30:
         75:d4:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:06:34 2026 by rpki-client