Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/10056a5e-4c46-3782-9ec0-e74d7814f5bd.roa
File:                     10056a5e-4c46-3782-9ec0-e74d7814f5bd.roa (raw, json)
Hash identifier:          rJYh4LfqHix2/2LLjBa0AIRZzM65I5IMAFxwGeSHuGc=
Subject key identifier:   F6:E3:5B:DF:FF:84:DB:9B:4A:0D:C4:15:A1:4C:12:8E:23:92:3E:30
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CF6ECE031F500893FC1C67600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/10056a5e-4c46-3782-9ec0-e74d7814f5bd.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     54253
IP address blocks:        2603:c0fc:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:e0:31:f5:00:89:3f:c1:c6:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=06abd6b3-a440-4329-82f5-8677955990f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:dd:39:f0:7b:95:9c:8d:34:50:af:5e:4f:
                    ee:c4:1f:39:5e:09:6e:da:6e:90:34:ff:db:11:10:
                    cc:03:7c:1d:79:2e:57:45:a2:13:dd:32:33:e0:77:
                    1e:18:5f:9e:ff:f7:db:be:79:91:3d:43:b9:3e:7b:
                    df:eb:d5:b5:a4:bb:d8:5e:ca:4f:ab:76:4e:8c:ec:
                    a7:11:87:f3:99:09:a2:0e:24:fc:ff:7d:e8:86:8d:
                    34:52:9b:a0:8f:ac:7b:73:05:3c:5b:69:7b:3d:46:
                    34:0e:52:76:e9:91:6d:5c:65:da:bf:c7:04:8a:41:
                    72:31:1b:ac:74:68:63:37:48:6b:27:de:59:06:22:
                    0f:e3:5a:17:ee:31:0c:d5:e8:cb:1b:74:17:94:64:
                    28:e5:b9:c3:95:cf:b6:56:06:5f:30:8b:d8:17:f6:
                    61:92:7f:54:01:c4:cb:1f:fd:29:d4:93:e2:24:ee:
                    cb:8b:0c:46:94:45:ac:df:90:7d:91:2f:56:0a:7d:
                    14:fb:d5:ca:87:36:77:8c:ac:0e:9b:74:5b:4d:ca:
                    be:58:05:90:5f:8b:fb:cf:d8:5b:6c:57:ca:c6:88:
                    32:d5:53:d0:46:a6:13:9c:49:d3:f5:fe:88:ae:d6:
                    31:b7:5d:16:43:bf:40:b3:03:b5:46:dc:69:ed:69:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E3:5B:DF:FF:84:DB:9B:4A:0D:C4:15:A1:4C:12:8E:23:92:3E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/10056a5e-4c46-3782-9ec0-e74d7814f5bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0fc:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:3a:15:e2:64:36:5c:fa:c4:13:0a:9d:d4:d5:0a:d1:d3:
         e1:69:26:d9:da:49:77:04:0f:b5:ce:f6:dc:db:4b:df:11:17:
         bb:b7:b6:af:bb:24:4a:bc:f9:51:79:43:9d:9a:61:5c:ca:87:
         07:bd:b5:82:bc:1c:96:ed:a0:87:90:c9:67:6c:c6:d5:12:ce:
         7b:ee:92:cd:13:9f:ca:00:a0:78:4a:30:67:e4:9e:b8:e3:39:
         48:c7:4b:09:55:49:36:7f:57:5e:9d:9d:66:74:e4:c4:d6:b0:
         8b:37:07:2e:cc:08:12:4c:54:55:5b:cd:19:e2:e5:62:87:2f:
         0c:e4:2c:91:bd:fc:ad:97:c1:ba:63:19:f0:da:80:d3:f6:f1:
         4c:83:b7:eb:55:7f:11:64:f2:d7:18:a2:0d:ca:29:ff:9b:a9:
         7e:27:99:64:68:20:c7:ca:d8:03:ee:0f:62:6c:61:a0:cd:33:
         6d:e9:c3:e9:82:9f:c1:d3:ec:5d:04:3b:65:5a:ff:27:bd:45:
         5a:11:d8:d3:38:47:bd:d8:01:0d:51:06:fc:b4:f1:2c:5d:b5:
         21:6c:1f:12:2f:2b:55:a4:14:9f:7d:ea:2a:f7:f5:d8:0d:2b:
         65:f3:39:1e:95:ed:a4:90:7c:23:28:52:65:c2:b7:1d:71:d6:
         8d:dd:1d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:01:11 2026 by rpki-client