Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40a05fdb-2849-3818-929d-944c15f89f17.roa
File:                     40a05fdb-2849-3818-929d-944c15f89f17.roa (raw, json)
Hash identifier:          p5uNSGUFZop7nItPXrxjpwFxb30XdIF5hLWj9d3CZpE=
Subject key identifier:   39:6B:34:82:DA:5F:85:C7:04:EA:AA:AA:C4:CE:E2:C4:75:86:25:DF
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE8F760B580995BDD088CDF80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40a05fdb-2849-3818-929d-944c15f89f17.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c048:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:60:b5:80:99:5b:dd:08:8c:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=f6f8254a-3f52-45af-bd1b-3ade1d17ef78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cd:eb:cc:ff:b0:f6:d8:6e:ad:de:ff:ed:6d:
                    57:4e:bb:59:a3:60:a2:b2:ce:8d:b2:df:21:44:a4:
                    d4:3a:95:61:1f:06:40:5b:45:fe:09:20:9d:b8:15:
                    f3:39:b6:e7:62:ed:b0:b9:2c:74:fc:f0:d9:25:17:
                    22:05:61:97:49:8e:b1:5d:a3:9c:a4:d2:cb:7b:fd:
                    57:86:09:f1:42:56:8f:b4:ed:f4:2f:93:47:00:1e:
                    8d:96:3e:4b:d6:29:30:89:a8:9c:f1:cb:a4:13:65:
                    87:8f:ef:18:10:fb:c0:05:bb:74:d2:2f:c8:5f:67:
                    00:73:76:99:d4:a1:8c:8d:e3:8c:43:37:85:a2:67:
                    70:f0:00:95:2f:40:40:9b:82:ac:5c:06:45:28:7d:
                    6b:c0:90:f8:30:fb:98:56:dd:20:b3:16:0c:0a:45:
                    c0:07:da:bb:1c:66:f9:8e:e5:df:3c:d7:01:9f:52:
                    e5:89:c9:de:d2:39:8f:ab:1a:73:ed:ef:82:e6:19:
                    ab:3a:c4:63:58:f7:2e:38:57:2d:fb:7e:28:db:be:
                    b7:08:38:78:8c:5c:ee:7d:61:cf:de:86:76:42:ca:
                    ba:4a:18:39:8c:ca:e5:fb:c2:76:00:97:4d:23:e8:
                    a0:cb:a2:55:94:27:8b:07:77:4e:a2:8d:f6:0c:85:
                    cd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6B:34:82:DA:5F:85:C7:04:EA:AA:AA:C4:CE:E2:C4:75:86:25:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40a05fdb-2849-3818-929d-944c15f89f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c048:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:b3:e1:4f:4c:b8:65:58:cf:d6:fc:07:48:19:70:d7:f4:6f:
         a4:12:ad:07:59:0b:7f:41:5d:e1:f7:fe:1a:a2:80:b5:7d:65:
         3c:2d:80:d7:4f:12:d7:99:95:92:12:39:8d:89:0b:6a:55:cb:
         be:e1:66:f8:b5:87:e7:6e:5c:33:ab:2c:e2:e1:d7:6f:7e:27:
         45:56:93:43:a3:75:9d:40:65:d4:43:60:8e:0a:b7:59:e0:c6:
         4e:72:95:6a:57:03:a0:46:84:d6:8d:ca:6d:92:22:e4:de:b3:
         c5:1c:50:07:2a:3c:7f:c0:eb:c6:de:4e:8a:65:bd:0f:40:18:
         c3:05:a9:83:85:ff:77:2d:59:db:db:9d:63:0d:74:66:a8:cd:
         63:e1:a9:40:3c:f8:17:a4:8d:01:30:fe:38:2a:c3:ea:54:99:
         13:97:7b:92:75:f2:55:3f:c0:09:aa:34:03:f3:0c:31:6d:49:
         7c:f3:35:f2:e8:3b:1a:ce:16:1e:3f:5d:04:3f:98:09:fb:a9:
         4b:39:18:72:2c:79:80:d5:4d:e1:89:da:f6:1f:11:2b:73:d1:
         41:f9:fd:15:13:fc:24:5d:3b:69:b9:2e:cf:03:39:5a:b5:6c:
         b0:c2:b1:1f:59:70:da:11:81:2d:bc:1e:e0:a2:c2:76:63:cc:
         d4:73:a1:6c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzo92C1gJlb3QiM34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIxOTAyMDAzMloXDTI2MDUyMDAxMDAzMlowLzEtMCsGA1UEAxMk
ZjZmODI1NGEtM2Y1Mi00NWFmLWJkMWItM2FkZTFkMTdlZjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM3rzP+w9thurd7/7W1XTrtZo2Ciss6Nst8h
RKTUOpVhHwZAW0X+CSCduBXzObbnYu2wuSx0/PDZJRciBWGXSY6xXaOcpNLLe/1X
hgnxQlaPtO30L5NHAB6Nlj5L1ikwiaic8cukE2WHj+8YEPvABbt00i/IX2cAc3aZ
1KGMjeOMQzeFomdw8ACVL0BAm4KsXAZFKH1rwJD4MPuYVt0gsxYMCkXAB9q7HGb5
juXfPNcBn1Llicne0jmPqxpz7e+C5hmrOsRjWPcuOFct+34o2763CDh4jFzufWHP
3oZ2Qsq6Shg5jMrl+8J2AJdNI+igy6JVlCeLB3dOoo32DIXNMwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDlrNILaX4XHBOqqqsTO4sR1hiXfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDBhMDVmZGItMjg0OS0z
ODE4LTkyOWQtOTQ0YzE1Zjg5ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPASBAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHLPhT0y4ZVjP1vwHSBlw1/RvpBKtB1kLf0Fd4ff+GqKAtX1lPC2A
108S15mVkhI5jYkLalXLvuFm+LWH525cM6ss4uHXb34nRVaTQ6N1nUBl1ENgjgq3
WeDGTnKValcDoEaE1o3KbZIi5N6zxRxQByo8f8Drxt5OimW9D0AYwwWpg4X/dy1Z
29udYw10ZqjNY+GpQDz4F6SNATD+OCrD6lSZE5d7knXyVT/ACao0A/MMMW1JfPM1
8ug7Gs4WHj9dBD+YCfupSzkYcix5gNVN4Yna9h8RK3PRQfn9FRP8JF07abkuzwM5
WrVssMKxH1lw2hGBLbwe4KLCdmPM1HOhbA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:27 2026 by rpki-client