Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccef90dc-9587-33ab-93f0-769b0aadf960.roa
File:                     ccef90dc-9587-33ab-93f0-769b0aadf960.roa (raw, json)
Hash identifier:          unmad/NYouoBN1y+JO7dau/UxpFO24TU7BwkGEjYLkg=
Subject key identifier:   7E:57:12:77:AF:85:87:A4:28:E1:DD:6E:17:92:50:96:90:1D:AD:B1
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DD78B134D0B186227D415D840
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccef90dc-9587-33ab-93f0-769b0aadf960.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     54253
IP address blocks:        2603:c0f4::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:13:4d:0b:18:62:27:d4:15:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=c7497480-1902-4048-babc-cd308aa2d038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:34:63:d3:fc:e0:29:68:76:54:96:b3:36:d4:
                    cb:91:ae:34:c0:a5:da:30:2e:2e:a7:a4:99:d9:48:
                    69:e0:94:4f:b8:72:90:52:6b:69:3f:6b:ef:d6:98:
                    ac:b3:9a:eb:a5:f3:78:de:b1:59:46:1c:c1:57:be:
                    de:59:90:58:53:55:87:aa:04:df:0e:d4:78:0f:a0:
                    67:84:93:c4:46:70:27:8b:c2:a2:e0:eb:48:ae:54:
                    ca:5f:7c:dd:f6:51:1f:14:30:72:a3:a8:c4:77:08:
                    ce:47:08:7a:d7:36:83:0e:35:2c:30:73:5c:17:7a:
                    7f:13:ed:90:dc:39:f7:94:6a:66:e9:36:af:e2:79:
                    e4:93:50:c1:68:64:44:48:4e:78:77:bc:47:57:3f:
                    76:15:4d:21:be:40:cf:f5:bc:36:6e:8e:e1:bd:7c:
                    b9:d5:22:1c:5c:ad:28:b0:b4:96:79:86:3d:56:3b:
                    7e:90:ef:c0:d1:62:5c:f1:48:be:61:a6:a7:0a:9b:
                    17:b5:c4:2d:aa:f7:af:63:cd:b7:0e:a8:72:85:a0:
                    0d:0c:68:00:be:cb:89:6e:b8:b5:17:39:ab:42:83:
                    a1:0d:e5:b8:5d:ca:f5:43:4e:be:7e:f8:10:2a:36:
                    0e:0e:1f:f1:9e:5a:04:0b:07:5f:f6:91:79:0e:16:
                    10:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:57:12:77:AF:85:87:A4:28:E1:DD:6E:17:92:50:96:90:1D:AD:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccef90dc-9587-33ab-93f0-769b0aadf960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8e:9c:bd:e8:5a:02:b9:99:65:43:09:d0:fd:5d:a5:24:38:
         7c:f3:d3:fe:d9:90:b1:99:00:92:df:02:8a:58:22:e1:b7:dd:
         42:38:7d:b0:20:64:08:d8:ee:21:f8:fe:ab:26:c9:00:9b:55:
         d7:fc:9c:02:02:e7:79:f1:de:34:42:8a:5c:ef:6d:ef:51:f8:
         17:1e:56:b4:49:c0:82:38:95:4c:06:8c:37:ae:52:86:e1:6e:
         f1:f1:b3:47:26:83:1e:d5:28:1a:4b:54:8b:27:73:b1:fa:2c:
         01:75:e9:e9:92:a7:39:ab:a0:28:78:cc:2c:d2:3c:11:2f:f2:
         f4:ad:10:34:8c:d7:73:a3:b0:ca:86:6a:6d:d4:79:d9:b7:23:
         78:78:2a:3e:89:6d:67:8e:68:14:b9:ef:83:e0:37:1e:8f:e5:
         68:7e:01:bb:65:eb:62:52:63:c7:a3:9c:d7:9b:e7:b9:2a:c8:
         d0:eb:fc:dd:87:7e:01:90:4c:62:04:af:6e:12:b2:ee:ee:38:
         25:5d:98:29:86:52:27:e0:fb:78:36:e7:b4:53:79:9b:03:8a:
         36:43:0b:3c:ad:a4:ad:fe:eb:17:ea:fb:b9:77:d1:83:71:0f:
         4c:f2:df:7d:12:e0:f1:5b:a6:74:1e:be:f7:66:b9:59:04:8f:
         97:e7:49:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:04:32 2026 by rpki-client