Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c6ad14d-0593-318b-a83b-6400a19fb64c.roa
File:                     3c6ad14d-0593-318b-a83b-6400a19fb64c.roa (raw, json)
Hash identifier:          5Nde9Xc1kk4nhxAbkFdjxZ7xyundSTN+JTdk2OmLvz4=
Subject key identifier:   16:62:C8:8A:FA:E9:6A:10:F2:CE:7B:F0:8C:F0:77:84:32:7E:BE:D7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CEBC23A886F84D3ED002C9400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c6ad14d-0593-318b-a83b-6400a19fb64c.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c0bc:2900::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:3a:88:6f:84:d3:ed:00:2c:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=76c929aa-fc24-40f9-b779-1705029f6774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:87:e1:a8:36:55:e3:cb:f1:b0:5d:8c:96:f2:
                    33:ea:b7:3b:ff:52:9b:d0:8e:b9:69:6a:d3:2b:91:
                    ed:a2:0f:5a:b0:ce:96:00:ef:df:8e:9d:6b:c1:b6:
                    cc:0c:5c:5f:a3:45:70:39:b3:d6:7b:fc:ec:40:26:
                    ae:78:5a:72:4f:0c:3e:e9:ee:8a:c6:c3:b4:78:ac:
                    ed:93:35:3f:e0:21:8f:db:0b:ff:12:3c:9c:b4:9a:
                    f1:b5:bf:41:65:0a:8d:72:36:b4:c5:15:b5:fd:39:
                    a9:26:f2:15:d8:c2:19:8f:fb:d1:20:51:b8:83:0d:
                    fc:5f:d1:e8:8c:e8:2c:48:43:35:47:b3:1a:6c:67:
                    75:b4:66:52:68:2a:9c:9b:ac:71:e3:85:87:0d:fc:
                    1e:45:47:66:0b:a8:a4:7b:bd:98:25:ae:e5:c1:24:
                    d3:a4:b0:2b:29:7c:72:5e:34:b6:ad:a8:93:51:10:
                    39:d1:a1:3d:41:d7:7e:ce:5a:03:7b:20:9e:f0:d2:
                    d3:e3:22:ac:2d:e9:b4:41:ac:d5:3d:ea:06:ff:e6:
                    2a:d7:8e:e7:56:b3:17:32:dc:13:ed:61:57:fb:88:
                    01:61:0c:cc:a5:4b:2e:83:97:26:4b:c5:26:36:c6:
                    5c:5c:b6:25:7a:3f:4b:90:1d:d8:af:dd:f2:ce:db:
                    e7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:62:C8:8A:FA:E9:6A:10:F2:CE:7B:F0:8C:F0:77:84:32:7E:BE:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c6ad14d-0593-318b-a83b-6400a19fb64c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0bc:2900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:79:a4:92:34:9f:ed:a1:4f:27:3e:74:f1:d5:c0:38:0f:8d:
         63:89:16:8f:b3:07:8b:05:c0:b0:97:32:f2:00:86:2e:5d:88:
         4c:20:42:04:5d:63:d4:8a:73:95:46:3d:b2:d7:d4:7c:80:e4:
         a1:bf:b7:f8:5f:04:57:c7:15:af:82:4e:aa:92:08:07:80:bb:
         5b:be:de:93:c0:92:93:fd:21:de:a4:cf:22:cc:69:06:05:c6:
         50:c3:4c:53:dd:99:5c:0b:c6:1d:b8:99:78:8c:f6:02:0f:cc:
         95:ea:b7:17:0f:ff:bd:0b:db:ee:79:62:85:1d:fc:b5:27:8a:
         74:6d:3c:55:91:9d:ab:e4:08:37:92:22:7f:9a:3e:bb:ab:45:
         6d:a2:38:93:ea:d8:ab:af:1c:b7:38:18:f5:f4:27:97:e2:9b:
         c1:f3:11:3f:b1:e4:8d:ed:f1:93:23:35:df:69:eb:40:b3:bc:
         7d:4a:55:f4:10:c5:04:ed:90:cf:d4:04:fe:c6:a4:d0:94:15:
         68:38:66:da:d8:47:7c:a8:07:c7:13:3d:a0:fd:be:44:89:fb:
         c5:41:6b:fa:81:4b:01:ae:e6:d1:4d:66:86:5a:e2:cf:03:72:
         5d:d2:75:d7:0f:e2:7f:51:52:7b:14:f5:2c:62:10:6a:fd:17:
         79:7e:d0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:28:38 2026 by rpki-client