Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40335948-8e2e-3dca-9760-da88beae43c7.roa
File:                     40335948-8e2e-3dca-9760-da88beae43c7.roa (raw, json)
Hash identifier:          sSVJeXjJxnFsokG8yIHjbVFvhE45yWUlQ+T8NBDt0nE=
Subject key identifier:   79:2F:18:77:A9:03:A4:5A:7D:EB:26:13:12:36:D9:23:78:40:BD:1A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE8F75FACF44B723EF49D2600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40335948-8e2e-3dca-9760-da88beae43c7.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c06c:2800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:5f:ac:f4:4b:72:3e:f4:9d:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=89d9126a-aae9-41b2-bc01-e85d9e58280a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a5:cc:81:1b:d4:5a:06:46:8d:71:65:ce:9a:
                    5a:22:e6:3d:43:3d:39:1d:12:64:bd:05:43:a6:a4:
                    ba:25:4b:5d:6a:c3:7b:44:d2:d7:b0:cb:1c:7a:13:
                    ec:9c:f7:08:e5:c7:ee:c3:8c:e1:7c:52:06:2e:a9:
                    37:4c:3e:5c:e8:cf:64:92:66:ef:ff:27:73:06:6c:
                    c5:93:87:32:82:6a:e2:39:bc:34:bd:fd:d6:04:aa:
                    55:9a:e4:cf:92:9e:72:44:2c:03:56:a8:b1:59:30:
                    c9:02:8d:b4:fa:52:1a:46:1d:81:67:eb:00:02:b0:
                    fd:8f:d8:07:4a:f5:97:98:38:2d:92:31:88:23:a2:
                    ef:a1:83:d3:c4:00:b3:41:0e:2f:3f:92:28:f3:af:
                    6b:e0:87:e7:c4:63:25:38:06:75:7b:80:81:8f:9f:
                    41:56:97:bf:45:43:1c:5b:16:93:91:6f:2f:ea:86:
                    a5:c7:11:60:78:25:81:ea:59:97:3a:51:17:f9:09:
                    dc:14:0a:59:e4:1c:86:d2:51:be:eb:95:6c:6b:ee:
                    c8:bb:f2:c4:32:49:6e:f4:fc:22:86:51:66:b0:ac:
                    69:da:68:1e:96:27:21:a0:67:fa:a5:a1:fc:88:2a:
                    8b:2f:8f:3f:4b:1d:b5:ad:b5:be:22:af:02:49:db:
                    57:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2F:18:77:A9:03:A4:5A:7D:EB:26:13:12:36:D9:23:78:40:BD:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40335948-8e2e-3dca-9760-da88beae43c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c06c:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d0:2e:ff:08:d2:1c:0e:88:da:ff:c4:db:c0:40:05:de:54:
         c0:b4:b2:be:20:43:06:25:14:7c:f9:5d:34:6d:e2:e1:11:3f:
         b3:4d:e3:5d:76:b6:93:f0:07:59:33:e5:8e:63:ea:7d:b2:04:
         64:46:4f:2f:04:35:da:99:d3:41:04:3c:51:90:dc:d8:56:2c:
         f1:14:d2:81:ac:39:f9:25:43:93:2f:6b:66:57:3c:94:6a:78:
         2a:03:cb:9d:8f:7d:32:cf:a9:8d:ea:f1:43:6f:f5:5f:26:7f:
         33:9c:78:b7:60:41:96:bb:45:a7:57:3d:fb:57:a5:1d:fb:6c:
         18:bb:ce:2b:8f:55:e6:38:e0:7b:ef:a6:2d:03:65:e5:e1:dc:
         73:d7:e8:ef:15:0a:f4:3e:a2:cf:ae:8b:8d:7d:55:d1:50:1c:
         b9:c2:1c:82:be:b7:33:41:ea:e2:f4:4a:4b:19:67:6a:ec:ad:
         fe:bc:51:70:0f:ed:81:82:d0:c7:94:0d:0d:bf:ac:93:22:43:
         c7:bc:96:c3:35:4d:bd:bf:73:8d:d5:5d:0a:50:cf:58:f3:c1:
         0e:fc:ba:bf:1a:37:be:ed:9e:62:76:f4:59:c4:d1:e5:20:dc:
         76:f6:1c:d7:8f:72:81:87:49:62:96:53:3f:0b:7d:2e:90:1a:
         47:6e:ac:f2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzo91+s9EtyPvSdJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIxOTAyMDAzMloXDTI2MDUyMDAxMDAzMlowLzEtMCsGA1UEAxMk
ODlkOTEyNmEtYWFlOS00MWIyLWJjMDEtZTg1ZDllNTgyODBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaXMgRvUWgZGjXFlzppaIuY9Qz05HRJkvQVD
pqS6JUtdasN7RNLXsMscehPsnPcI5cfuw4zhfFIGLqk3TD5c6M9kkmbv/ydzBmzF
k4cygmriObw0vf3WBKpVmuTPkp5yRCwDVqixWTDJAo20+lIaRh2BZ+sAArD9j9gH
SvWXmDgtkjGII6LvoYPTxACzQQ4vP5Io869r4IfnxGMlOAZ1e4CBj59BVpe/RUMc
WxaTkW8v6oalxxFgeCWB6lmXOlEX+QncFApZ5ByG0lG+65Vsa+7Iu/LEMklu9Pwi
hlFmsKxp2mgelichoGf6paH8iCqLL48/Sx21rbW+Iq8CSdtXsQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHkvGHepA6RafesmExI22SN4QL0aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDAzMzU5NDgtOGUyZS0z
ZGNhLTk3NjAtZGE4OGJlYWU0M2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAbCgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEADNAu/wjSHA6I2v/E28BABd5UwLSyviBDBiUUfPldNG3i4RE/s03j
XXa2k/AHWTPljmPqfbIEZEZPLwQ12pnTQQQ8UZDc2FYs8RTSgaw5+SVDky9rZlc8
lGp4KgPLnY99Ms+pjerxQ2/1XyZ/M5x4t2BBlrtFp1c9+1elHftsGLvOK49V5jjg
e++mLQNl5eHcc9fo7xUK9D6iz66LjX1V0VAcucIcgr63M0Hq4vRKSxlnauyt/rxR
cA/tgYLQx5QNDb+skyJDx7yWwzVNvb9zjdVdClDPWPPBDvy6vxo3vu2eYnb0WcTR
5SDcdvYc149ygYdJYpZTPwt9LpAaR26s8g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:26 2026 by rpki-client