Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f45e8cdf-c690-3501-be64-e93c5645215a.roa
File:                     f45e8cdf-c690-3501-be64-e93c5645215a.roa (raw, json)
Hash identifier:          yTXvc9O1ibfAqOmBDPPlWqfzfaKVsWEv8BZRutzMQHg=
Subject key identifier:   95:96:99:63:6C:1E:0A:53:4D:0F:F4:19:25:05:9B:BD:16:B5:88:D6
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA78712A6A317FB08BB3E6940
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f45e8cdf-c690-3501-be64-e93c5645215a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        2603:c058::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:12:a6:a3:17:fb:08:bb:3e:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=151825b3-4707-4bde-ab8f-853a2d19c974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:87:4a:a9:38:87:7e:c4:cc:a3:73:8d:e3:62:
                    7a:2e:c7:f3:cf:dc:70:ed:0a:36:38:08:3e:f7:c7:
                    27:6c:0f:5e:84:2f:d3:2a:ed:3a:3d:84:17:7f:11:
                    01:84:0e:84:ca:25:3d:9e:f8:77:e1:72:cf:e3:17:
                    96:82:36:79:d9:b5:0a:fa:39:93:a7:69:51:15:eb:
                    22:c8:41:4e:dc:16:ad:3b:e1:cd:ce:ce:ff:ec:b8:
                    49:b2:5d:f0:77:cd:71:59:3b:f3:24:29:6c:96:b0:
                    c6:fb:90:71:31:3f:51:5f:8f:ee:8a:01:79:bc:cd:
                    d1:54:9b:d7:2f:52:cd:c0:ac:89:1e:3b:91:a0:9c:
                    12:fd:f8:de:c7:be:7a:7a:89:5d:6a:81:2a:54:fa:
                    11:36:02:f8:5f:77:9f:67:1a:bd:91:fc:4a:ed:b1:
                    e8:08:e0:db:a7:79:61:2e:9e:e2:71:c0:3a:e3:20:
                    c0:d1:2c:b5:13:ef:1f:c3:ff:79:53:bb:f0:cc:d3:
                    6c:c8:2a:d7:05:cc:a8:a7:c8:36:90:31:88:6a:f2:
                    6b:24:cb:54:fa:bb:54:c6:75:c6:79:56:46:dd:d4:
                    5e:03:de:30:b3:00:7e:0d:36:fd:d5:19:82:9f:4d:
                    06:c3:ba:0e:f5:8a:83:91:1e:dd:a9:00:8a:a4:a6:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:96:99:63:6C:1E:0A:53:4D:0F:F4:19:25:05:9B:BD:16:B5:88:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f45e8cdf-c690-3501-be64-e93c5645215a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c058::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:6b:85:46:d1:60:c4:30:f0:76:04:0d:a0:d8:6b:93:b0:87:
         df:26:12:82:5f:e1:30:5f:14:78:ca:a2:33:2f:bd:8c:ed:b8:
         6c:ba:fa:98:bf:b7:d4:68:ce:70:3e:07:0a:fc:8b:c2:a1:02:
         3b:f3:14:33:e4:d1:95:07:6f:1d:03:64:c3:2e:be:0d:e8:0d:
         25:78:d1:30:0e:74:9e:9e:85:86:35:01:47:88:f8:6e:25:d8:
         ee:82:6c:49:f7:f8:46:64:4e:39:7e:14:95:f3:86:5e:ae:5d:
         30:e4:24:41:5f:46:4c:3d:01:35:33:fa:9f:e0:ed:86:8d:e9:
         ee:74:2e:ee:8b:6a:e6:d1:b0:d2:84:cb:5a:d3:53:1d:8c:68:
         a2:0b:66:a5:3c:5c:6c:7e:05:c5:78:6e:58:53:de:09:5d:14:
         53:c0:78:ed:cb:48:16:a8:f7:bb:f2:b8:f5:17:9e:2c:6f:1a:
         f8:bb:a4:b9:a3:12:ae:b1:2f:e5:ca:10:81:a1:77:4a:09:79:
         3e:ce:2f:c8:91:1a:30:bc:d1:2b:08:59:d5:aa:02:6c:f3:13:
         ea:e0:72:b9:ff:e5:18:7d:4f:45:c5:2f:f4:fe:ad:3b:8f:ba:
         9e:84:6a:30:0d:92:5d:0f:7f:c5:aa:04:6e:3c:e4:62:c6:e6:
         99:bc:68:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:18:35 2026 by rpki-client