Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/46373536-8f69-379d-8eb9-84d5cf030029.roa
File:                     46373536-8f69-379d-8eb9-84d5cf030029.roa (raw, json)
Hash identifier:          C4OCExtAyTeIMmG7yKyL+25a8hcWpKWlgh7QnYNmOyk=
Subject key identifier:   1F:72:EC:BE:34:2C:8D:87:2E:74:B4:83:A8:EF:1A:6E:8A:5E:B4:EE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CF4224007E35C6C4ABA0BD300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/46373536-8f69-379d-8eb9-84d5cf030029.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     54253
IP address blocks:        2603:c0d8:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:40:07:e3:5c:6c:4a:ba:0b:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=f7672390-f414-4a72-b6d5-bd65e5cc7fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:18:f0:28:ca:9c:15:54:7f:cb:66:6c:fe:03:
                    a2:5e:c3:b6:5c:61:02:b1:b3:1d:c8:0f:8d:f0:29:
                    f5:37:53:94:ff:5d:80:be:24:d8:f5:38:fa:87:ff:
                    75:57:6b:0e:98:2a:d1:29:37:04:9c:3f:4b:11:d1:
                    e8:c3:ac:e4:6c:a4:9b:30:39:8c:97:98:0c:b0:58:
                    b4:ea:1d:84:c7:d5:91:9e:1b:c7:2e:51:a2:6e:b9:
                    d0:f3:6c:6a:74:c3:56:22:9d:77:f0:a1:5d:c8:ac:
                    2f:31:05:ea:8c:d8:6b:24:f8:a0:39:3d:38:64:f7:
                    4e:76:fe:60:cd:2a:30:8d:ce:e6:80:b8:f9:f6:d2:
                    bd:ff:6b:06:5e:c5:91:09:d7:4f:ba:9c:8b:e3:94:
                    25:47:b9:4f:7f:ec:cb:b5:99:2d:14:18:4b:c5:73:
                    7e:61:e4:b7:65:60:b1:9f:27:e7:24:5a:0b:bd:8a:
                    eb:cd:94:dc:e6:3a:74:88:5f:9d:22:ff:df:a2:0e:
                    55:7d:8b:6f:45:b3:0f:67:bc:0a:82:3e:2f:1b:cd:
                    02:06:5b:a4:d3:a8:f2:7d:dd:76:96:87:95:d6:7e:
                    2d:cf:12:2a:a6:42:a0:38:a1:eb:86:77:b9:b6:91:
                    9a:3e:ee:c5:6b:19:48:31:e2:20:0d:4c:fe:bc:93:
                    05:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:72:EC:BE:34:2C:8D:87:2E:74:B4:83:A8:EF:1A:6E:8A:5E:B4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/46373536-8f69-379d-8eb9-84d5cf030029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0d8:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:3d:06:7b:14:f4:e2:95:14:cf:34:64:e3:8c:90:9f:6e:68:
         38:d2:1a:05:a6:e8:f4:be:d3:3d:53:a9:3b:19:5e:ce:c6:37:
         a6:8d:27:d5:7e:52:6c:56:b4:b4:a5:98:a9:d4:dc:a0:3a:08:
         8b:5d:6c:00:45:61:85:9a:47:52:04:bb:3a:db:1c:43:4f:00:
         cb:c0:db:33:e7:20:d2:7d:1d:77:ef:f0:5d:67:e0:83:26:fe:
         5f:2a:b8:6d:44:f5:79:2a:b1:64:e9:7b:1e:99:cb:c7:c8:8e:
         86:2e:56:3d:13:11:e2:15:ba:49:cc:5a:7e:b1:f9:99:3b:60:
         72:cd:3e:b5:70:4e:b6:74:a5:70:3b:0f:b3:a8:83:93:e1:40:
         d7:02:80:e6:ff:d3:71:c6:f1:44:ed:93:0d:ba:b6:78:69:07:
         e0:9b:e1:33:88:5d:c8:6a:90:10:f6:15:cb:46:67:66:e0:bd:
         93:34:07:af:44:9d:d7:5a:e9:74:84:43:b8:a1:07:8c:41:1d:
         b1:14:d8:6c:4a:69:06:ed:f9:51:95:59:ed:3d:54:55:b8:97:
         c0:70:3b:05:0a:bd:8c:c3:aa:99:a1:8f:ba:58:7d:9e:00:44:
         59:9b:d6:fe:41:ff:d9:33:a5:46:21:82:cd:5e:d0:19:5c:66:
         42:bc:4c:ad
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEz0IkAH41xsSroL0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk
Zjc2NzIzOTAtZjQxNC00YTcyLWI2ZDUtYmQ2NWU1Y2M3ZmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRjwKMqcFVR/y2Zs/gOiXsO2XGECsbMdyA+N
8Cn1N1OU/12AviTY9Tj6h/91V2sOmCrRKTcEnD9LEdHow6zkbKSbMDmMl5gMsFi0
6h2Ex9WRnhvHLlGibrnQ82xqdMNWIp138KFdyKwvMQXqjNhrJPigOT04ZPdOdv5g
zSowjc7mgLj59tK9/2sGXsWRCddPupyL45QlR7lPf+zLtZktFBhLxXN+YeS3ZWCx
nyfnJFoLvYrrzZTc5jp0iF+dIv/fog5VfYtvRbMPZ7wKgj4vG80CBluk06jyfd12
loeV1n4tzxIqpkKgOKHrhne5tpGaPu7FaxlIMeIgDUz+vJMFGQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFB9y7L40LI2HLnS0g6jvGm6KXrTuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDYzNzM1MzYtOGY2OS0z
NzlkLThlYjktODRkNWNmMDMwMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPA2CAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALj0GexT04pUUzzRk44yQn25oONIaBabo9L7TPVOpOxlezsY3po0n
1X5SbFa0tKWYqdTcoDoIi11sAEVhhZpHUgS7OtscQ08Ay8DbM+cg0n0dd+/wXWfg
gyb+Xyq4bUT1eSqxZOl7HpnLx8iOhi5WPRMR4hW6ScxafrH5mTtgcs0+tXBOtnSl
cDsPs6iDk+FA1wKA5v/TccbxRO2TDbq2eGkH4JvhM4hdyGqQEPYVy0ZnZuC9kzQH
r0Sd11rpdIRDuKEHjEEdsRTYbEppBu35UZVZ7T1UVbiXwHA7BQq9jMOqmaGPulh9
ngBEWZvW/kH/2TOlRiGCzV7QGVxmQrxMrQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:12:06 2026 by rpki-client