Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42982f4e-96ee-395d-8bf7-2f63618018bc.roa
File:                     42982f4e-96ee-395d-8bf7-2f63618018bc.roa (raw, json)
Hash identifier:          TsAxO3AA6tFPJls/c29Jk8fBkXhDxOJr55GzBrjf/ic=
Subject key identifier:   04:7B:30:AA:29:37:DB:82:48:DC:B3:B8:E9:1D:E9:4E:E4:C7:E9:18
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CF4223F8F8239CF6CC4064000
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42982f4e-96ee-395d-8bf7-2f63618018bc.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     54253
IP address blocks:        2603:c0c6::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:3f:8f:82:39:cf:6c:c4:06:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=d090745a-8387-4dcc-a585-193c5d1c6e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:34:70:99:06:46:23:34:7c:70:e8:dc:bf:
                    3d:c2:97:c4:4a:5b:ad:dc:ca:f5:7f:45:eb:3e:09:
                    2a:04:ca:18:96:7c:1e:d5:2f:57:d2:1b:6c:e9:9b:
                    71:35:3e:14:9e:da:fd:09:08:ba:e4:78:be:2b:ed:
                    3e:2d:98:c1:aa:91:98:11:22:83:c6:d4:88:2e:af:
                    c3:0c:9b:32:f3:11:8b:4a:6a:02:36:e1:37:18:0d:
                    64:e9:a0:c3:cd:90:57:94:39:b3:19:94:3c:e5:cb:
                    49:96:5c:59:a0:5b:6f:ac:bd:9b:99:e9:9a:0f:81:
                    fd:60:6e:51:aa:13:5b:5e:02:e6:d3:9d:05:a9:56:
                    5a:1f:7f:01:9f:a6:c6:58:fb:26:7d:80:7e:45:e6:
                    32:3c:b8:d9:39:43:55:13:03:a5:8d:5d:49:1b:ae:
                    11:dc:89:7a:85:32:eb:36:90:3a:8d:02:5c:98:8c:
                    d7:c9:d0:05:81:96:77:a2:9b:0c:90:14:e2:12:7c:
                    49:ed:70:7a:11:01:7b:79:62:48:a9:9e:12:fe:a9:
                    eb:c3:0b:63:7f:bb:c0:fd:4b:a0:d0:3a:a5:dd:89:
                    18:81:bf:a9:0c:84:ac:75:95:d0:40:f0:32:4c:6d:
                    ce:d9:f3:c2:d0:7b:cc:3d:c3:f4:88:86:9d:2b:a4:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7B:30:AA:29:37:DB:82:48:DC:B3:B8:E9:1D:E9:4E:E4:C7:E9:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42982f4e-96ee-395d-8bf7-2f63618018bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0c6::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:33:94:c6:a1:08:55:6a:38:58:a2:4a:3e:5e:64:79:7c:5b:
         61:89:fc:b9:d8:0e:f7:0d:4d:5a:03:9d:79:a6:dc:8f:6f:bb:
         86:59:6d:68:ac:d4:bd:dd:90:5c:c0:dd:e8:46:c4:3d:35:87:
         46:ed:c2:a2:8e:8d:19:10:91:5d:6a:4b:3d:c7:b6:e3:b7:12:
         91:79:f1:fd:12:bc:00:ad:6a:14:89:72:c5:e2:d9:f0:1b:20:
         5b:83:98:1e:6f:c3:2d:31:64:8f:35:2b:cd:9a:f9:1a:76:ea:
         72:e6:ea:aa:ad:25:f4:cd:ea:e7:7c:56:c4:f6:b5:7a:d8:7f:
         1e:25:4c:7e:2b:fc:e7:6e:ee:68:c7:c1:ce:81:e1:e5:82:75:
         8a:a9:ed:b4:d8:2b:c6:91:40:58:a3:46:86:74:34:49:02:85:
         68:73:13:a5:b9:76:9b:b5:74:33:e2:a8:69:4e:dd:65:f4:eb:
         cc:1c:55:0b:6f:71:c7:ae:5a:a3:db:53:27:15:7a:30:62:9d:
         60:0f:b4:57:c3:cb:58:a8:92:4a:98:c8:79:b0:fd:bc:85:79:
         5f:9f:48:f8:c2:bc:c4:45:20:bf:eb:c6:a4:c2:92:b9:f7:a4:
         32:52:43:60:c8:a2:d4:59:30:73:31:c8:08:87:7f:82:b2:ef:
         cb:c9:01:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:34:58 2026 by rpki-client