Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a4c402b-3c18-3205-b29d-18411f0b9d63.roa
File:                     4a4c402b-3c18-3205-b29d-18411f0b9d63.roa (raw, json)
Hash identifier:          Lmj3y/NGYj6dLu3CcCCh6B/C04rgErwjUAYAQRidFgk=
Subject key identifier:   C1:E5:1A:53:92:69:E6:22:4B:13:E7:F0:E5:33:84:8A:EB:05:F5:A5
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE8F7697D0B053B788E6FE880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a4c402b-3c18-3205-b29d-18411f0b9d63.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c058:2800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:69:7d:0b:05:3b:78:8e:6f:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=42f6f0d1-9c2a-4c5b-a03d-42fb3256f5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ab:75:f6:9d:2b:4e:9f:fa:38:9c:19:cb:b6:
                    f8:73:da:a8:09:89:dc:14:56:84:95:1d:6e:eb:d7:
                    01:19:c7:b0:65:a4:62:e1:53:06:90:d2:d6:ba:c8:
                    ab:a4:ab:43:33:1e:12:c9:20:8e:f2:eb:09:07:20:
                    ac:08:d2:d2:63:5b:56:56:d4:32:d9:96:67:3a:5d:
                    e6:ef:f4:26:85:0d:9a:4a:bf:22:4c:f6:f6:98:91:
                    4c:50:c5:ea:dd:a4:e8:3f:18:f5:de:00:d0:9a:de:
                    ea:76:c2:37:28:4a:14:5d:45:09:f9:60:45:ca:9b:
                    96:44:1b:02:8d:98:fc:b9:5a:86:10:80:13:2c:45:
                    80:14:c5:f4:ea:d7:2f:20:f9:54:0d:6b:a4:8c:69:
                    3a:8c:80:8f:3b:05:56:fe:82:0d:d3:6f:56:7b:a1:
                    50:19:4a:54:8d:0c:7a:21:ca:21:db:3e:f3:5a:31:
                    1b:39:b0:26:33:0e:bf:4e:b2:ca:32:b6:9f:24:98:
                    b7:ba:27:ec:d0:fe:cf:db:8a:d2:96:94:a1:f2:ca:
                    33:20:31:47:81:4b:65:18:35:d7:f5:f3:9b:b6:9a:
                    74:b0:d9:24:d8:a4:33:30:28:9f:74:81:a7:09:d9:
                    f6:91:d4:33:45:5e:b4:6f:73:fe:a3:91:2e:93:3b:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E5:1A:53:92:69:E6:22:4B:13:E7:F0:E5:33:84:8A:EB:05:F5:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a4c402b-3c18-3205-b29d-18411f0b9d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c058:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:8e:a9:61:b6:15:38:63:33:8a:02:f9:6d:b6:43:96:b3:38:
         39:37:ad:6a:21:29:90:b2:6e:db:70:0f:93:69:a7:a2:d6:e7:
         11:02:47:04:f1:fa:d5:d8:64:71:ba:be:5f:2c:6b:31:9d:7b:
         da:4b:bf:c5:04:ae:69:f9:be:8b:e5:e7:38:07:30:ee:60:64:
         df:05:8e:18:5a:34:a9:20:e4:06:f7:08:cf:b0:b7:4e:04:68:
         d4:9d:81:68:cd:ca:69:53:0f:55:d3:56:23:80:7d:5d:79:de:
         16:22:53:dc:88:9f:39:89:2d:3f:41:ca:8e:a3:5c:95:ac:dd:
         6d:61:69:7d:70:c8:ef:09:b8:c9:68:7e:86:de:ce:2a:ae:bd:
         a4:5a:74:3a:60:d9:04:44:f9:ff:a0:36:a4:91:0b:de:26:14:
         24:24:56:d3:3f:05:71:47:92:39:71:32:bd:16:11:49:fc:9e:
         08:22:d3:d1:5c:ab:72:33:db:9e:d1:35:75:68:b2:79:84:30:
         3c:4e:cb:84:fd:0a:40:dd:07:7e:cd:c7:e5:bf:07:07:7c:4d:
         46:ed:78:28:77:34:3a:a5:ea:78:c3:c5:99:a7:7a:09:c1:df:
         65:6f:8e:38:85:48:e4:7e:d1:1c:0e:59:71:c7:e2:67:79:2f:
         65:ac:81:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:34 2026 by rpki-client