Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2be0f52d-9ab7-386f-be3b-ece2dce48b61.roa
File:                     2be0f52d-9ab7-386f-be3b-ece2dce48b61.roa (raw, json)
Hash identifier:          AWkykoUwqHZKdTUeNQOvmZoIMVwmm0pQLhLyEde8NCk=
Subject key identifier:   A3:9F:5B:79:A8:20:9F:CC:CF:8A:A3:5A:A7:56:D2:8D:CB:F8:68:DD
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CEBC224080C2E081F337475A0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2be0f52d-9ab7-386f-be3b-ece2dce48b61.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c0bc:2100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:24:08:0c:2e:08:1f:33:74:75:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=43b98c92-e994-4fe8-a694-4b4cbdee3ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:71:e4:2a:f1:82:4e:b5:fb:d9:81:dc:8e:12:
                    12:4b:0e:7b:19:3b:17:90:b3:ba:f2:e4:69:ef:3f:
                    42:9d:9d:1c:eb:d5:63:03:88:34:ec:39:71:5f:3b:
                    14:cf:a1:9a:10:26:0d:0b:97:3d:a2:60:10:c9:26:
                    d1:64:f8:a9:f1:0a:d0:9b:9b:d5:24:6e:0a:41:7c:
                    e3:71:ed:16:e0:39:73:16:e0:c6:41:98:5b:d5:73:
                    17:8d:02:fd:b5:53:eb:c0:d2:e2:2d:2c:18:69:a3:
                    5b:7e:c3:b6:bc:85:77:5b:f9:d3:2c:d7:0d:ae:76:
                    8c:3d:98:44:70:67:2b:47:77:7b:e8:e0:30:85:2e:
                    90:cb:a1:a7:8c:b8:fb:71:53:fc:af:98:de:27:0b:
                    01:e6:73:f8:dd:ce:f4:74:fa:88:78:a5:75:8d:83:
                    65:2d:02:09:74:77:d2:87:34:17:22:fb:fa:48:c3:
                    92:4e:c7:e1:e2:86:62:a6:5a:a9:e5:7f:f8:d3:ef:
                    23:ed:5a:1c:3a:51:57:20:7c:8a:fc:65:db:c0:57:
                    a3:eb:da:88:55:b9:87:d8:60:da:10:e6:39:5b:dd:
                    93:43:17:24:a1:5a:d0:c0:a7:32:f3:81:a7:1a:f6:
                    a7:c3:f0:77:31:58:03:47:0f:4a:f7:4a:ee:6d:69:
                    a4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9F:5B:79:A8:20:9F:CC:CF:8A:A3:5A:A7:56:D2:8D:CB:F8:68:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2be0f52d-9ab7-386f-be3b-ece2dce48b61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0bc:2100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:95:62:18:d9:2c:b9:a3:be:68:3d:e9:9f:2e:93:0b:5b:e7:
         cc:65:c0:f4:1c:30:9f:08:eb:76:4a:26:b1:1f:f0:5f:bd:98:
         0e:13:96:5f:87:4b:71:99:4d:50:dd:d7:77:8a:f2:40:f2:2c:
         58:f2:dd:d9:5d:03:ae:26:8b:c3:5a:6f:24:66:fd:76:7f:c5:
         35:c8:61:77:e4:fa:6a:29:6d:df:0c:a5:96:d5:ab:94:4a:50:
         ef:d9:e1:3e:b7:32:c6:5c:a0:b7:e2:05:dd:1a:ee:b1:f5:d3:
         89:8d:1d:1a:20:c9:ea:36:49:31:76:e1:96:cb:cd:11:e7:84:
         b8:a0:b0:9d:07:e6:60:66:c9:fe:8f:37:37:7a:80:30:9a:3c:
         12:f2:39:1d:f9:a4:75:30:25:34:fd:c9:12:b1:bb:a0:16:b0:
         f0:34:3e:e5:10:73:5c:00:11:fd:90:64:76:ba:35:26:76:d2:
         be:d5:2b:4e:74:5e:e6:db:0e:61:56:49:9f:14:43:43:a0:43:
         59:b6:75:d1:0b:bf:7b:80:12:84:7a:1c:4d:41:80:bb:49:b2:
         c0:e4:5a:a8:a9:d1:a1:78:1d:f8:05:39:1d:79:9c:c9:dd:e9:
         50:89:a6:c5:ec:fd:dc:5c:11:44:5f:34:d4:29:cb:0a:da:1b:
         0d:60:8d:65
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzrwiQIDC4IHzN0daAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
NDNiOThjOTItZTk5NC00ZmU4LWE2OTQtNGI0Y2JkZWUzY2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXHkKvGCTrX72YHcjhISSw57GTsXkLO68uRp
7z9CnZ0c69VjA4g07DlxXzsUz6GaECYNC5c9omAQySbRZPip8QrQm5vVJG4KQXzj
ce0W4DlzFuDGQZhb1XMXjQL9tVPrwNLiLSwYaaNbfsO2vIV3W/nTLNcNrnaMPZhE
cGcrR3d76OAwhS6Qy6GnjLj7cVP8r5jeJwsB5nP43c70dPqIeKV1jYNlLQIJdHfS
hzQXIvv6SMOSTsfh4oZiplqp5X/40+8j7VocOlFXIHyK/GXbwFej69qIVbmH2GDa
EOY5W92TQxckoVrQwKcy84GnGvanw/B3MVgDRw9K90rubWmkkwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKOfW3moIJ/Mz4qjWqdW0o3L+GjdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmJlMGY1MmQtOWFiNy0z
ODZmLWJlM2ItZWNlMmRjZTQ4YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAvCEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJJViGNksuaO+aD3pny6TC1vnzGXA9BwwnwjrdkomsR/wX72YDhOW
X4dLcZlNUN3Xd4ryQPIsWPLd2V0DriaLw1pvJGb9dn/FNchhd+T6ailt3wylltWr
lEpQ79nhPrcyxlygt+IF3RrusfXTiY0dGiDJ6jZJMXbhlsvNEeeEuKCwnQfmYGbJ
/o83N3qAMJo8EvI5HfmkdTAlNP3JErG7oBaw8DQ+5RBzXAAR/ZBkdro1JnbSvtUr
TnRe5tsOYVZJnxRDQ6BDWbZ10Qu/e4AShHocTUGAu0mywORaqKnRoXgd+AU5HXmc
yd3pUImmxez93FwRRF801CnLCtobDWCNZQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:24 2026 by rpki-client