Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3efc001-0ff7-3668-8850-0fa0180cede1.roa
File:                     f3efc001-0ff7-3668-8850-0fa0180cede1.roa (raw, json)
Hash identifier:          pqGAX1rZtIcde6PUVncmuuZGOWj5cN7zL+a4eJhwESk=
Subject key identifier:   27:E0:2A:48:DD:A5:43:BA:22:86:F0:19:2E:38:E8:25:CB:6B:DC:6F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA788379B170C7281E8A87D80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3efc001-0ff7-3668-8850-0fa0180cede1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c0c4::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:37:9b:17:0c:72:81:e8:a8:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3e4e3348-8f36-403f-a323-a391f1adcdc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:33:05:73:2d:bf:c9:46:a4:e4:e4:e4:0e:5a:
                    95:73:9d:8a:91:5a:db:ce:d3:d9:22:3a:bd:f2:0e:
                    51:b1:e9:d8:b5:c8:f0:97:4c:31:e3:47:3b:41:2a:
                    e0:06:6b:28:2b:ec:46:8a:eb:b8:dd:18:a1:f6:57:
                    12:f0:f0:ad:79:8e:3a:bf:45:34:b1:32:bc:7b:5e:
                    17:51:06:04:67:f2:a5:34:ca:e3:1c:6d:56:3e:51:
                    8b:4d:e7:82:cc:c4:0c:f7:87:85:db:08:d0:2f:97:
                    3e:65:7f:37:31:af:cf:71:2f:f2:ac:de:fc:53:1e:
                    5a:cb:c0:92:a1:66:dd:78:e3:8d:b1:b2:21:be:e2:
                    b7:5a:76:36:a7:8f:62:75:ce:89:45:a9:9c:bd:d3:
                    f7:2c:e6:69:de:65:7b:72:42:b3:c6:51:00:28:91:
                    61:07:03:be:3e:5c:14:52:8c:bf:27:5c:48:c9:67:
                    5a:3d:ea:53:d9:03:27:af:08:81:1c:9c:97:9d:f8:
                    a5:5a:42:3d:9e:75:f4:80:e8:94:01:76:cf:77:d8:
                    93:71:86:26:a3:92:3c:4d:18:ae:c0:e3:e9:e2:68:
                    08:83:e9:23:d3:1a:29:5a:01:53:13:77:fb:36:44:
                    e3:fa:77:14:0d:c3:70:05:11:cc:a4:40:98:bb:84:
                    1b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E0:2A:48:DD:A5:43:BA:22:86:F0:19:2E:38:E8:25:CB:6B:DC:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3efc001-0ff7-3668-8850-0fa0180cede1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0c4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:11:cc:b5:4d:6a:a8:c3:b0:bd:cc:e9:42:f7:09:03:dc:bd:
         d9:5d:33:21:6e:0a:9f:d1:14:db:15:db:10:df:96:1b:c4:df:
         2c:d8:cf:f0:d7:bc:b5:e2:04:1c:52:44:86:35:f6:f3:68:8e:
         79:6c:ba:09:81:54:75:97:d1:75:d9:a1:f6:59:a5:97:a3:27:
         b8:7b:b0:4e:66:74:28:48:8c:75:e1:dd:38:ce:7b:2b:5b:f4:
         d7:ad:f0:42:4b:0b:cf:b3:bf:ee:de:bf:74:7b:11:dc:68:ba:
         4a:fc:b6:9d:d8:5d:17:51:42:3c:50:6e:4f:46:a3:60:67:49:
         0f:d5:b0:1c:12:21:39:ab:de:a9:00:78:d2:17:ad:27:a6:71:
         db:06:0c:0c:2c:90:ee:f4:e5:71:04:01:12:21:b0:3a:20:13:
         f0:87:b8:51:0d:1c:02:3d:83:3b:b4:f2:9c:57:9c:a3:06:a4:
         1b:a5:c8:61:39:4a:b2:42:1a:41:29:f2:6d:99:cb:03:0e:e2:
         5b:1e:dd:42:c0:0b:e6:9a:c9:6d:4d:34:9a:fb:fa:59:ac:f1:
         41:2d:a3:d1:8f:68:44:ac:86:f0:2a:b7:39:34:ef:5c:2b:76:
         ab:c7:67:9b:e0:37:5f:80:41:7e:bb:7b:fc:98:b4:98:fa:29:
         47:b1:d2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:07:23 2026 by rpki-client