Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d8887fa-47ec-3f9a-8306-921ba26462c8.roa
File:                     0d8887fa-47ec-3f9a-8306-921ba26462c8.roa (raw, json)
Hash identifier:          U3+ga/P5faSOUnRxXBmE94RNZxoVu/IaE2MoMzMIxUo=
Subject key identifier:   32:CD:F8:69:30:6F:FE:0C:65:7A:FF:54:58:CC:B0:E2:21:5C:ED:7E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CEBC23B5D78E52DE79DE89C00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d8887fa-47ec-3f9a-8306-921ba26462c8.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c0bc::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:3b:5d:78:e5:2d:e7:9d:e8:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=7f05a620-806c-4d1c-9848-0b4bd7265772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:de:47:a1:a8:d7:d1:12:70:77:55:71:1d:9e:
                    ac:2b:0b:85:43:3a:52:75:06:f0:c3:99:db:4c:e9:
                    18:ae:28:62:8f:0e:e3:6a:93:8d:36:37:20:85:9e:
                    59:d0:c5:43:d5:75:93:e2:45:71:e9:c9:05:a9:c5:
                    56:23:af:93:15:80:98:fd:41:1c:55:95:45:0a:d3:
                    f9:ac:1e:ba:14:aa:1c:cc:c8:39:e4:29:00:66:e3:
                    60:d4:00:d4:b7:0a:ed:1d:44:6e:8c:3e:21:d5:c8:
                    59:7d:36:d5:9e:30:0d:0b:7b:bf:0f:64:66:a6:82:
                    c6:01:e8:22:e0:69:11:bb:08:d3:42:54:36:4d:db:
                    72:58:0c:c3:ed:b0:fb:4f:35:a4:31:d5:4d:46:e5:
                    e1:14:6a:05:31:38:d9:3e:c2:92:cb:cc:72:ee:d8:
                    ae:c0:16:9b:e5:0c:71:54:5f:e0:cc:d6:aa:18:84:
                    ef:b5:43:7e:4a:78:65:c5:ac:f3:1f:ed:c2:c4:f9:
                    1d:f4:bf:8b:70:9a:82:3c:aa:21:3d:99:ed:f2:07:
                    87:14:fd:0e:55:e0:4c:42:19:d9:c7:36:5b:f8:09:
                    8b:f9:a1:40:ab:49:79:5d:4a:4d:3e:fd:b8:54:db:
                    05:94:27:8b:e6:71:eb:89:93:84:7a:3d:36:ce:cd:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CD:F8:69:30:6F:FE:0C:65:7A:FF:54:58:CC:B0:E2:21:5C:ED:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d8887fa-47ec-3f9a-8306-921ba26462c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0bc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3c:6c:98:98:b9:a9:b5:91:bc:5a:c3:56:43:e0:ee:b2:11:
         90:79:2c:ba:24:8e:40:e3:79:3d:9d:07:03:cb:f4:5e:09:ef:
         43:c1:88:e5:41:77:9f:cb:bc:3c:2f:67:5f:24:44:27:09:f6:
         77:20:55:da:bb:31:de:ee:da:28:4e:de:98:a8:d6:26:14:ef:
         44:87:92:c9:a6:a1:f4:53:d7:d9:1c:13:68:07:ed:e9:3c:20:
         8b:fb:b1:df:26:f9:7b:79:a0:a3:5c:12:21:cc:f5:82:fd:dd:
         0f:49:f3:2a:32:e1:b3:1b:a0:16:97:2e:9b:58:ba:d2:33:c4:
         97:99:ad:f0:c9:e5:3b:54:f5:0b:61:da:ed:35:7d:b2:c0:80:
         57:d6:1c:5f:15:08:b4:31:82:d1:d0:3a:84:d8:78:cf:8f:d1:
         67:cb:e4:2a:9d:b1:7f:be:6a:59:14:79:aa:5e:e7:56:a3:b0:
         48:9a:cc:ac:fb:aa:78:1d:7a:3a:b8:6e:bc:9e:50:45:c3:e2:
         6e:09:05:e6:a3:ed:be:af:85:55:d8:be:4c:9a:a1:e9:ef:2c:
         50:e9:27:ef:53:ef:f5:35:1c:0e:b1:1d:ec:fc:4b:44:47:a4:
         51:3b:6e:a8:95:70:6b:48:ec:89:34:f1:d4:e7:c3:7a:d1:0d:
         ce:b3:8b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:12:03 2026 by rpki-client