Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d185ed6b-bf24-3cf1-bbd9-a99114c05055.roa
File:                     d185ed6b-bf24-3cf1-bbd9-a99114c05055.roa (raw, json)
Hash identifier:          8YohIoe5Rzb15Zljqz19HtOvquA6QHE/KLESIpQNCbs=
Subject key identifier:   96:6C:AF:1B:F0:FA:4A:C2:83:40:57:46:9D:80:BA:46:62:03:58:76
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6B0A0EBB9A38EA95A924BB00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d185ed6b-bf24-3cf1-bbd9-a99114c05055.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:1800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:0e:bb:9a:38:ea:95:a9:24:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=f8d7003c-ba41-4c61-9315-a923473ce711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:fe:2c:a7:c2:fb:f9:29:7e:3d:eb:43:ce:
                    4f:7a:57:07:cc:67:3b:fc:93:24:df:b0:db:9f:27:
                    ff:01:bc:01:2c:16:2a:26:95:24:bb:52:fe:7c:67:
                    5e:95:8d:54:88:3b:2c:c0:61:bc:e4:a0:cb:b7:21:
                    5e:a0:d8:f5:ce:fd:59:8b:28:1f:dc:df:78:3b:3d:
                    36:19:99:2d:9c:02:ce:c9:60:ec:51:ac:2c:46:4b:
                    e1:89:f1:0f:f7:91:2d:b2:4e:89:a4:88:9d:b3:dd:
                    f9:aa:7c:86:60:38:05:79:eb:1f:41:31:5c:ea:89:
                    ef:1d:25:67:7b:81:01:f2:2f:95:56:93:d5:ea:c0:
                    8c:57:2b:ff:73:a6:65:d6:5d:86:dd:f9:5b:83:44:
                    bd:8c:b6:a4:77:f8:a9:86:17:f2:f4:d6:ec:c8:31:
                    bc:af:f4:a0:d0:66:93:26:b2:65:08:5f:49:16:d1:
                    ed:04:76:cc:2e:fa:8d:a3:ae:bd:ed:47:a6:bf:13:
                    0f:68:f5:5b:82:6f:d1:e1:cc:ec:40:82:13:4f:90:
                    bb:e9:5e:90:14:b6:68:65:f9:68:ca:24:e7:a1:2b:
                    dd:67:15:50:3f:6d:1e:d3:8c:10:a9:6f:dc:32:bf:
                    5a:42:77:fe:d5:30:32:75:23:87:40:bf:be:9b:b4:
                    d8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6C:AF:1B:F0:FA:4A:C2:83:40:57:46:9D:80:BA:46:62:03:58:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d185ed6b-bf24-3cf1-bbd9-a99114c05055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:1800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:49:38:76:ea:c7:ce:90:00:93:28:a0:75:fe:72:a1:89:90:
         d8:f6:74:b4:c0:10:37:5e:4a:73:cc:f1:28:89:c8:ef:f1:48:
         8c:66:88:28:1e:aa:d7:c8:5c:ce:cb:25:b0:ff:46:47:8e:69:
         a4:90:a8:bc:70:45:02:63:2f:8e:5b:2a:d6:08:27:95:81:54:
         d6:e0:97:ba:79:69:4c:a4:fc:cd:df:a5:81:26:6d:21:ee:43:
         43:aa:15:0a:39:fa:64:e4:76:c1:1f:74:4c:4a:0a:b3:8f:86:
         39:3e:79:c8:c5:84:32:82:fb:b7:46:44:cc:4e:34:ed:35:9b:
         08:f2:8e:c5:5b:c5:a1:e8:86:6b:45:13:5e:67:c1:f4:8f:b1:
         91:35:3b:40:6c:2f:a5:12:6d:29:68:b9:4c:4e:9c:07:86:56:
         cc:6d:ae:46:5d:69:8f:d5:cd:f0:0f:d5:d7:55:71:5b:76:9b:
         18:c4:84:39:77:4c:fd:30:a3:e2:00:b6:0c:f4:42:90:db:41:
         68:47:ca:a5:29:fd:d4:ea:de:ef:ea:fb:05:21:a7:71:0a:ac:
         e2:fa:e0:2a:c2:e0:a8:a5:81:65:57:a7:e3:24:f8:25:c1:c9:
         9e:d4:76:cb:e8:bf:db:1b:cf:32:cf:28:30:9f:3f:dc:12:d1:
         27:f4:f6:f8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5rCg67mjjqlakkuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk
ZjhkNzAwM2MtYmE0MS00YzYxLTkzMTUtYTkyMzQ3M2NlNzExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwH+LKfC+/kpfj3rQ85PelcHzGc7/JMk37Db
nyf/AbwBLBYqJpUku1L+fGdelY1UiDsswGG85KDLtyFeoNj1zv1Ziygf3N94Oz02
GZktnALOyWDsUawsRkvhifEP95Etsk6JpIids935qnyGYDgFeesfQTFc6onvHSVn
e4EB8i+VVpPV6sCMVyv/c6Zl1l2G3flbg0S9jLakd/iphhfy9NbsyDG8r/Sg0GaT
JrJlCF9JFtHtBHbMLvqNo6697UemvxMPaPVbgm/R4czsQIITT5C76V6QFLZoZflo
yiTnoSvdZxVQP20e04wQqW/cMr9aQnf+1TAydSOHQL++m7TYhQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJZsrxvw+krCg0BXRp2AukZiA1h2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDE4NWVkNmItYmYyNC0z
Y2YxLWJiZDktYTk5MTE0YzA1MDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAhgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAT0k4durHzpAAkyigdf5yoYmQ2PZ0tMAQN15Kc8zxKInI7/FIjGaI
KB6q18hczsslsP9GR45ppJCovHBFAmMvjlsq1ggnlYFU1uCXunlpTKT8zd+lgSZt
Ie5DQ6oVCjn6ZOR2wR90TEoKs4+GOT55yMWEMoL7t0ZEzE407TWbCPKOxVvFoeiG
a0UTXmfB9I+xkTU7QGwvpRJtKWi5TE6cB4ZWzG2uRl1pj9XN8A/V11VxW3abGMSE
OXdM/TCj4gC2DPRCkNtBaEfKpSn91Ore7+r7BSGncQqs4vrgKsLgqKWBZVen4yT4
JcHJntR2y+i/2xvPMs8oMJ8/3BLRJ/T2+A==
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:53:07 2026 by rpki-client