Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d584a562-386b-304c-9224-98ee7f0b142d.roa
File:                     d584a562-386b-304c-9224-98ee7f0b142d.roa (raw, json)
Hash identifier:          clRL5eX8R4f92DnABp7/6U3xuqK0apKe6UNEDJQRsD0=
Subject key identifier:   94:17:D6:86:3C:C0:44:3E:4D:89:93:6C:30:F9:4F:20:8F:62:85:94
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6F3A3470D3014966E595F288
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d584a562-386b-304c-9224-98ee7f0b142d.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        2603:c002:300::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:34:70:d3:01:49:66:e5:95:f2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=84507974-7feb-49a3-801d-46bd47a3adaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:db:e0:f0:68:b2:86:fc:83:a9:7a:a5:74:32:
                    36:ba:a9:f7:6e:0e:3f:13:ce:bb:9f:72:47:a7:a7:
                    05:a7:23:ef:15:0e:59:3e:9d:a2:02:e4:69:70:8f:
                    9a:5e:26:e8:94:56:8f:02:d5:48:e4:3b:4f:dd:e9:
                    b4:73:4a:bb:ed:d5:07:fe:10:f9:a6:2c:e0:82:af:
                    3a:ea:b8:dd:3f:3f:73:a8:ab:de:5b:9e:da:c2:ba:
                    55:44:79:39:9e:a7:b8:6c:28:ed:1f:6d:54:dd:ed:
                    cb:12:07:13:4c:6f:3d:f4:40:a1:7f:27:f9:65:3d:
                    78:cd:2a:f6:63:4a:a3:86:2e:4b:a8:84:fe:1b:aa:
                    b8:0a:ce:bc:17:db:7e:bd:4a:50:a3:92:c3:f5:57:
                    8a:66:ce:c1:b4:c8:80:5e:6f:78:d3:f8:4a:e1:44:
                    88:b3:c5:45:3f:0d:9b:5a:75:8b:ab:c6:0e:ed:b8:
                    3f:95:de:5d:d6:a8:e9:24:a6:a1:a0:ad:7d:77:3f:
                    08:df:bd:ae:07:26:50:10:89:82:be:a0:41:ce:82:
                    5b:f0:85:55:8e:22:cf:f0:dd:bf:d3:8a:25:8a:66:
                    75:07:12:a5:6d:a8:c5:ed:b7:5e:e2:e4:77:3f:2c:
                    41:90:4d:2a:56:6b:85:06:eb:4f:6d:32:d0:8c:59:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:D6:86:3C:C0:44:3E:4D:89:93:6C:30:F9:4F:20:8F:62:85:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d584a562-386b-304c-9224-98ee7f0b142d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:7b:17:e7:f6:a3:f5:ea:93:09:d2:bc:86:2f:5c:e3:16:54:
         17:22:f7:57:13:9b:f2:f5:61:f7:05:ae:12:1b:9a:7c:9a:62:
         09:21:bd:ac:42:e8:d4:b6:eb:ae:f0:40:06:31:c4:9c:96:80:
         c7:95:ab:0d:29:3b:9c:2d:af:66:44:01:93:72:4c:18:69:c9:
         97:29:3b:46:5e:83:6f:ef:f7:54:9c:71:76:62:2e:d8:9d:b3:
         81:53:bc:5c:50:53:92:7a:65:95:7d:ac:a3:33:35:c1:45:5c:
         df:ce:a6:f3:56:69:c9:f8:fa:fb:6c:e7:1f:f0:72:c0:92:c4:
         55:54:67:bf:3d:77:1b:43:4e:02:86:d6:b9:0c:d1:8b:64:32:
         b4:13:92:11:db:b5:ed:63:62:83:1c:98:2b:4e:8e:5e:49:ea:
         71:91:47:6f:96:44:ae:e9:14:de:44:a7:3a:a9:17:e6:68:80:
         c1:d0:b9:35:f4:04:c5:18:2b:7f:89:76:45:03:7f:79:81:dc:
         72:92:74:ed:6f:b0:50:85:d9:bc:b0:3f:67:3d:41:19:08:03:
         08:64:1c:f2:bb:16:bd:9b:47:f7:d1:1b:de:ca:50:fb:6b:22:
         e1:85:09:1f:43:16:2a:60:e5:33:92:52:89:4b:86:c6:f9:c9:
         97:f7:df:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:50:33 2026 by rpki-client