Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63c9c942-b306-3374-818b-80c27236f19d.roa
File:                     63c9c942-b306-3374-818b-80c27236f19d.roa (raw, json)
Hash identifier:          tY6BhzUn1CtMTkUd2gRtCU7hZs4LdCmmZn7DM6Xb07g=
Subject key identifier:   FC:EC:97:2D:6B:43:8C:72:6E:36:9E:4D:9B:D6:6B:CA:BB:2B:3B:DE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE8F76897B7052038A859D720
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63c9c942-b306-3374-818b-80c27236f19d.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c081:4000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:68:97:b7:05:20:38:a8:59:d7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=751c59c5-8ac8-4e0c-b45c-dcaca85e8c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:52:00:eb:fe:aa:b4:4d:e0:22:01:91:95:a8:
                    45:cc:e7:0c:aa:d1:b1:5d:76:21:2e:23:89:46:4e:
                    6e:d4:ad:a3:0b:67:57:77:c8:dd:b4:ad:fe:13:54:
                    2d:b7:85:3d:aa:56:0f:a2:0d:a9:be:c6:20:51:ca:
                    f6:60:8b:4a:e4:86:95:da:1d:fe:42:38:91:c1:23:
                    86:4e:bc:55:7c:e8:7b:a9:6b:72:1f:97:28:39:d7:
                    24:d4:e3:32:60:f7:4e:30:97:5a:6e:94:2c:5c:c3:
                    fa:1f:c4:7f:b1:3a:ae:4c:e8:6a:6b:c0:bb:17:1c:
                    fa:46:11:cd:10:ed:a4:88:e9:eb:4d:f7:16:3e:2f:
                    36:a1:c1:7c:f0:b7:b0:97:0d:9e:8b:39:58:64:35:
                    e7:56:fc:d9:b8:32:5c:c5:c9:7c:f6:2f:23:8a:e2:
                    7a:cb:48:60:91:03:c0:80:be:34:18:48:33:b8:53:
                    50:9b:95:03:4f:e9:82:38:e4:bc:e0:35:af:e2:16:
                    e3:d1:86:0f:5a:17:22:74:e2:52:db:12:f3:5d:01:
                    6b:cc:38:07:d7:bc:33:35:28:b2:e1:d0:20:40:d6:
                    43:f4:7b:70:47:cb:b0:a4:15:b1:63:38:cb:f6:d1:
                    4e:e2:08:a2:f1:b7:79:80:e5:e2:79:5f:0d:15:6f:
                    33:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EC:97:2D:6B:43:8C:72:6E:36:9E:4D:9B:D6:6B:CA:BB:2B:3B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63c9c942-b306-3374-818b-80c27236f19d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c081:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:66:12:2e:df:3d:f9:cf:f9:19:94:39:98:b4:1c:8e:71:00:
         e5:56:fe:1c:57:7d:24:80:8a:42:4c:9a:f2:39:58:3b:ba:51:
         32:fa:6d:ca:f3:dc:49:70:9e:28:82:14:bf:27:3c:7a:ce:3a:
         5c:6d:e0:0f:af:e7:96:3e:ef:b9:9f:f4:72:e5:45:61:50:03:
         1c:9d:2e:7b:a6:2b:23:73:3f:e0:7a:53:7f:5b:a8:00:58:29:
         7e:a6:c8:a8:59:c6:62:5d:eb:7c:ad:2f:23:de:66:ce:79:52:
         fd:64:95:51:0c:16:e8:b9:b2:71:6e:57:d5:03:7a:2b:7b:59:
         55:f4:7c:d6:e8:74:4b:df:0c:59:22:3b:c5:9e:f2:25:dd:33:
         d0:1a:41:8c:aa:ac:2c:f3:75:19:62:07:ad:ae:33:34:b0:e0:
         c5:f0:ee:b3:e9:c5:b8:d3:68:d1:5a:1f:77:fe:48:0f:81:ce:
         4d:47:40:a6:53:b0:b5:b1:d8:57:a6:17:15:a2:30:6d:28:d5:
         ea:4a:51:0b:eb:ba:ba:e6:fd:d3:e2:16:18:b3:95:43:32:8c:
         81:85:85:2f:cb:95:18:40:32:fd:74:b7:00:03:57:77:65:68:
         54:1f:64:c4:3c:33:e0:7a:92:11:1e:eb:29:49:de:a6:11:c4:
         1f:04:42:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:19 2026 by rpki-client