Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa
File:                     c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa (raw, json)
Hash identifier:          UeXaop6U4DdIWD+ywYhYNd2O9QkTLWnWGG/4Yme4w2k=
Subject key identifier:   66:42:57:D1:BE:4C:3F:43:3F:FA:6A:D1:9A:88:71:D4:D6:3D:5B:C3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA78711BC79B4AF5B52145D00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c088:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:11:bc:79:b4:af:5b:52:14:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f041bfc6-e509-4329-9733-b4c2432e1939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:c0:18:f1:6a:72:0c:6d:99:ba:fe:50:54:
                    93:d1:68:34:50:ab:1d:a7:1a:dc:c8:88:c2:8c:66:
                    3a:b8:82:91:fa:51:0a:f2:f6:d5:40:6f:ef:24:81:
                    c3:50:e7:ac:ad:e6:25:1f:f7:36:45:44:22:13:61:
                    e2:f4:1e:bc:da:12:93:a6:2f:3e:1a:a9:94:14:a7:
                    f6:2d:22:b9:3e:dc:72:3f:d4:66:05:48:a3:0e:26:
                    26:03:78:c5:bb:9e:34:b3:d1:be:ef:33:e9:73:91:
                    c4:86:c3:79:2d:ac:f2:62:a5:5b:49:de:99:f6:52:
                    17:f9:98:de:e3:60:dc:9f:b6:12:39:da:7b:14:0a:
                    5a:42:73:51:67:71:ce:c8:29:b7:ac:3f:aa:64:7a:
                    6d:f0:cc:5d:b5:9f:93:6a:7c:d4:c8:96:53:aa:29:
                    57:00:ba:74:94:73:9d:3b:3b:4b:e0:e6:61:71:8e:
                    39:b8:20:b1:b4:7e:11:3d:b8:a6:5b:94:cd:f3:be:
                    d9:7d:04:1b:57:4f:57:1f:d6:58:12:0a:70:a8:a0:
                    88:1f:c6:b1:08:e7:7b:ed:53:b0:07:79:15:13:85:
                    05:29:54:ef:9f:1e:fb:de:21:2e:ec:0e:b4:31:af:
                    61:b0:bb:a1:08:8f:9f:09:10:e4:fc:cf:76:f1:54:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:42:57:D1:BE:4C:3F:43:3F:FA:6A:D1:9A:88:71:D4:D6:3D:5B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c088:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:98:e0:c6:fe:68:22:73:14:59:f0:25:cb:8f:df:b5:6c:72:
         bc:bf:8c:23:24:e1:1f:fd:ab:d2:fa:22:fe:5f:fa:cf:60:f0:
         2d:dc:16:20:00:00:11:48:a9:95:52:38:88:c5:a7:19:78:30:
         5e:68:3f:fd:49:d3:a3:3c:11:85:9a:4e:15:b4:18:8c:49:2c:
         42:fc:11:68:70:59:b9:8c:fb:f9:38:3d:40:07:f4:4b:e2:f1:
         da:5d:bb:e5:5d:9e:65:50:24:90:21:56:6b:09:a3:a6:1a:f2:
         74:71:ae:a8:a4:f3:11:57:4b:1d:1a:f7:f3:8d:34:1e:80:24:
         74:3a:50:cf:5b:bc:25:55:2a:4e:a5:94:40:7c:f5:20:2c:63:
         c8:68:2b:df:8b:1d:9d:12:4d:e1:79:57:de:3d:17:a7:60:72:
         c2:c4:94:27:4b:8f:f0:32:1c:46:6b:83:71:b2:15:ba:b6:2e:
         cd:b8:86:71:e3:a3:65:99:ef:3c:d0:67:c0:eb:6a:69:91:81:
         c2:36:9b:08:25:76:17:3b:be:3f:1d:8a:db:62:39:36:67:0e:
         95:42:24:2f:d0:67:c5:ee:63:5e:8f:71:a4:d4:13:05:1b:3e:
         a8:f0:2b:7a:79:1b:b3:09:09:cb:3c:02:54:b8:e2:66:85:dc:
         10:b4:b4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:36:31 2026 by rpki-client