Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3886be9c-8697-3af7-bf05-1b0b0567a6ca.roa
File:                     3886be9c-8697-3af7-bf05-1b0b0567a6ca.roa (raw, json)
Hash identifier:          FCGJgxie5L0NMcsUwKlJO1NLDhE7DTajtguQgli5M1A=
Subject key identifier:   6B:ED:BE:4B:A9:2F:17:99:AE:8C:EA:C2:FC:29:06:A3:29:7C:48:4A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE8F774C5DF94A4A0F2C9DD90
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3886be9c-8697-3af7-bf05-1b0b0567a6ca.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c049:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:74:c5:df:94:a4:a0:f2:c9:dd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=7d82f52d-0a3c-4dd7-9761-0b0e895255b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:5f:21:bd:21:89:66:34:6f:bd:8b:78:3d:
                    92:a9:9a:d1:69:93:49:69:7a:df:a1:17:14:d1:2d:
                    2e:ad:75:f1:a6:af:fa:7e:13:38:48:c6:ab:9f:1c:
                    2a:10:0a:fb:b5:9f:ac:1f:b9:a1:11:1e:e8:6b:42:
                    9d:eb:da:88:9e:86:bf:12:8b:f7:9f:e1:13:7b:11:
                    99:a5:ef:c5:35:9f:7b:5f:2b:29:71:bf:35:16:6b:
                    f7:fd:ad:26:bb:94:f3:e0:c8:0c:8d:96:b3:79:01:
                    5e:f1:c1:e3:ec:59:bb:d9:9a:72:73:17:df:92:f6:
                    09:ba:e0:04:c0:91:e0:21:50:fb:9b:5a:fe:15:1d:
                    b9:82:d5:14:b7:64:c6:bd:e7:9d:3a:6d:3b:d7:03:
                    30:5b:da:1b:b5:8c:e9:69:19:a2:c2:15:ad:90:35:
                    92:17:d7:84:c4:aa:ce:19:27:b6:02:ef:a5:df:02:
                    84:b5:52:03:14:00:ac:dc:ac:2f:7a:63:3a:0e:3e:
                    50:2c:7a:5a:c6:23:d2:32:9a:cf:7b:28:76:52:e4:
                    51:1b:71:98:96:81:9a:95:01:2a:bf:1a:f4:cb:10:
                    1a:a0:c8:a3:16:eb:9b:52:67:6f:56:44:d4:5c:3e:
                    76:6e:0f:49:f5:4d:6e:e1:db:c7:c0:a5:77:66:29:
                    a0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:ED:BE:4B:A9:2F:17:99:AE:8C:EA:C2:FC:29:06:A3:29:7C:48:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3886be9c-8697-3af7-bf05-1b0b0567a6ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c049:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:95:54:af:00:0e:a5:10:e7:32:99:fe:0b:63:1f:ba:b4:6e:
         fb:e5:95:90:13:9d:fa:ec:60:84:20:9b:d0:35:d4:d9:c9:71:
         44:19:7a:40:1e:67:ad:a7:b4:0b:b0:52:df:06:fd:14:79:66:
         18:cb:06:5f:61:57:42:9c:64:60:a4:20:0c:ca:69:e1:da:67:
         fd:2b:89:5b:38:ef:d6:d0:ab:81:32:e7:88:87:2f:be:7e:01:
         24:c5:ad:b2:af:9a:d5:a2:5a:16:ab:b7:c7:21:a3:05:f6:37:
         17:cb:a2:b2:76:88:a5:02:90:3b:91:3c:8a:de:49:8f:9a:8d:
         0c:97:7b:c0:57:00:28:9c:e4:5c:b0:de:94:13:9a:9f:bc:d8:
         33:c8:d5:ce:cb:c8:94:c6:a6:d8:18:36:37:2a:85:dc:1c:56:
         9c:4d:be:f5:31:d1:e1:36:ed:6f:49:13:c4:db:e3:20:5e:21:
         80:08:b6:45:e8:aa:32:a5:d4:d8:9c:50:3f:56:48:70:ae:2a:
         fe:78:cd:ac:80:b7:4c:c6:a0:5e:08:b4:1e:fb:38:57:e5:70:
         93:38:b6:72:aa:38:78:1f:34:25:bb:cd:f9:d1:7f:3e:99:29:
         0c:ff:87:a8:32:94:25:e4:b1:b9:2b:7a:41:c3:72:13:d4:0c:
         66:39:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:11:18 2026 by rpki-client