Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dfb59c64-46d3-3ef8-9268-81757d9a133d.roa
File:                     dfb59c64-46d3-3ef8-9268-81757d9a133d.roa (raw, json)
Hash identifier:          m9MYFYbCyCtEqWI/NAcJ5A0K/whQEkGRPnhhYQkNPhw=
Subject key identifier:   E2:6F:01:1F:27:75:C9:8B:3A:88:AC:76:EF:27:55:CB:C0:6D:6A:6D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6DD4CBC41B4101F34E0AF140
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dfb59c64-46d3-3ef8-9268-81757d9a133d.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:c025:4000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:cb:c4:1b:41:01:f3:4e:0a:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=721b7920-9c73-4029-9e27-1dcc35c7ff5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:01:6c:34:11:97:65:0e:6b:d4:5c:45:07:a8:
                    18:5b:6f:0d:d9:1e:02:ca:71:e0:a6:f8:b6:20:b5:
                    35:83:80:d3:e6:e6:2d:75:8f:5c:c7:b8:de:a2:51:
                    5c:8e:3b:4f:9b:7c:fa:15:28:c6:ab:42:e4:3b:c3:
                    db:b9:52:af:45:48:a3:fd:e5:e3:0f:9c:80:37:5a:
                    5a:ac:c2:58:30:75:7d:ae:74:26:04:3b:af:25:5c:
                    64:69:0f:bd:7e:76:5b:c9:f6:4f:22:e3:a0:c8:d4:
                    a4:34:8f:6a:63:e1:76:f6:48:07:26:f7:3d:4a:e3:
                    b4:c9:b5:1e:0e:84:aa:eb:c7:46:e7:ca:7d:20:f2:
                    22:33:7e:0d:84:08:37:a2:5c:19:06:4e:02:ec:a7:
                    7d:9f:36:fa:a4:d4:9e:b9:d1:29:8d:7f:cb:bf:50:
                    0f:44:a4:30:53:b4:c1:98:9c:6e:e5:a8:ee:5a:16:
                    ea:73:d1:f3:0a:c3:93:d7:8a:67:ae:bd:a7:25:79:
                    f4:fc:e5:39:23:28:4a:32:7f:ec:56:68:b2:20:6d:
                    bd:09:d9:ae:0b:57:2c:f2:d0:83:e5:35:97:d7:58:
                    80:8a:f6:eb:9d:fd:5c:4a:34:57:83:fd:92:f0:e4:
                    d3:dc:9d:e1:4c:3a:f9:ca:ad:f6:8a:0a:f3:3c:66:
                    34:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6F:01:1F:27:75:C9:8B:3A:88:AC:76:EF:27:55:CB:C0:6D:6A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dfb59c64-46d3-3ef8-9268-81757d9a133d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c025:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:ba:cf:85:5c:93:34:93:42:d8:75:fc:66:40:ff:0a:25:13:
         3e:a4:6c:f0:2b:17:15:ef:ea:ce:82:32:d7:a5:cd:03:42:4a:
         3b:18:c8:34:b3:16:b4:91:ea:b2:42:cf:b4:76:30:64:e9:1a:
         df:4d:2c:ef:24:96:9b:f7:5c:5c:57:83:98:6f:3e:4f:ef:4d:
         11:60:ed:8e:2b:31:c4:06:5c:c6:36:d3:ba:4f:a7:a2:f3:51:
         35:dd:dd:a3:85:52:f8:38:7d:94:ad:60:f4:da:14:c4:e0:f8:
         0e:51:b6:b1:51:0b:55:92:08:4b:7c:93:da:29:90:f4:8a:3e:
         08:23:28:4d:54:e4:9e:5a:7a:75:5a:90:30:c9:bb:cb:9a:20:
         b5:ea:f9:8c:e9:3a:07:95:2d:26:e0:9e:d2:fb:ed:61:8c:8a:
         f4:2b:95:2d:32:fa:d7:fa:0c:b1:3d:3d:26:17:18:b2:7f:fb:
         12:ef:e6:8c:f8:a1:db:d6:57:07:ad:01:9e:e0:ce:4f:64:a3:
         b3:47:c4:61:e5:34:84:aa:5e:b8:40:e4:e1:5b:ff:e7:59:f2:
         89:2b:cd:54:69:d0:11:96:40:e8:1d:67:0d:65:38:5f:c7:db:
         f6:0a:ba:1b:2e:f0:50:e6:f2:61:9e:21:81:66:f0:8c:5e:f0:
         ca:79:f9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:49:09 2026 by rpki-client