Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/73cfd197-ef2e-3d20-9958-ae182c795a3d.roa
File:                     73cfd197-ef2e-3d20-9958-ae182c795a3d.roa (raw, json)
Hash identifier:          ZbjxunNMK+Q5W2nsuTOAtHZnXMoGOgkVS9DDK6Gqu3s=
Subject key identifier:   D5:59:54:99:C4:6D:80:66:DD:FA:65:2E:A9:85:BD:8B:C4:79:B4:E3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE8F77876C533C6D902D8C180
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/73cfd197-ef2e-3d20-9958-ae182c795a3d.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c04a::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:78:76:c5:33:c6:d9:02:d8:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=e58ede03-163b-454c-a0a4-2cc4176c0f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:90:b8:12:07:78:f6:c9:ca:5e:e0:3d:be:45:
                    36:f5:94:65:c7:42:bf:ae:20:cd:a3:0f:9f:f2:59:
                    5f:c0:4a:ce:69:e0:43:67:c6:45:45:3a:75:28:ad:
                    7a:50:a2:28:7c:dc:b0:30:6a:28:c5:64:c0:b3:30:
                    d4:32:d6:85:19:bf:a8:a0:9c:63:b6:e9:61:61:8f:
                    f7:55:88:06:e5:19:00:84:56:bc:20:2d:34:c5:c5:
                    05:f7:1d:f3:a7:9d:80:88:a0:b1:7e:5f:d4:f3:5e:
                    6b:39:c8:0a:e3:da:2b:3d:bd:a5:d7:cf:5b:90:87:
                    73:01:fd:c6:2b:97:bb:00:95:0d:a2:dc:dd:3c:5e:
                    a0:69:cc:18:b4:68:eb:0c:04:0e:dc:c2:27:3c:ab:
                    38:05:da:ac:f1:d2:9e:30:b0:b1:e8:c4:6a:d2:b9:
                    58:a3:f7:af:d2:01:e5:70:bb:52:8a:cc:73:23:d6:
                    20:29:10:96:76:5f:17:20:58:6b:3e:99:3f:31:c5:
                    57:89:9e:7f:a6:c9:03:a7:d1:12:e4:13:75:9b:88:
                    2f:ff:0c:1d:54:e0:7e:b5:55:f5:2d:c1:c9:88:f5:
                    d6:86:5e:31:b6:d6:5d:e1:1a:c8:9c:8b:9c:33:dd:
                    d6:44:42:a8:6f:ed:38:84:1f:0a:06:ee:75:23:5b:
                    af:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:59:54:99:C4:6D:80:66:DD:FA:65:2E:A9:85:BD:8B:C4:79:B4:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/73cfd197-ef2e-3d20-9958-ae182c795a3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c04a::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:92:09:eb:db:4c:f4:96:a5:77:98:6c:d3:c3:e5:d0:5d:ae:
         02:f1:c7:9a:59:6c:d4:88:ee:8e:09:66:70:12:5f:01:7a:d5:
         74:1e:57:59:20:87:87:fa:86:7b:a7:e1:04:9b:2c:1b:d5:4d:
         8d:67:90:c6:58:9b:bb:99:a5:c4:21:5c:e6:13:52:5d:4d:39:
         c4:c9:bd:4e:6c:0a:87:dd:18:6b:00:30:d9:f5:2a:35:8a:98:
         51:3a:c4:74:e7:9c:c6:c7:12:a4:fc:8c:f6:5d:87:90:6c:0b:
         8e:dc:5c:b4:41:ee:14:05:1f:9c:d8:13:61:69:f1:b1:df:0c:
         5d:fa:4c:1c:2f:66:e8:8b:b4:d6:aa:3d:0d:fa:74:d5:de:4a:
         58:e4:6e:f1:f7:55:b4:69:09:2b:10:5e:54:34:c2:5c:ae:56:
         01:f6:37:cd:4b:62:b4:a7:40:0b:0f:20:1b:09:fe:e7:31:54:
         e4:ab:11:ff:bb:b3:a8:eb:4d:9a:f7:08:3e:72:91:df:5c:93:
         43:4b:0b:fe:7f:e2:c5:15:71:1d:be:b7:58:0a:0b:a1:d7:06:
         c2:4b:bd:47:dc:63:24:b7:7f:3a:b7:bb:48:27:94:ba:c7:cf:
         dc:ce:f8:58:c4:3b:9b:3b:e2:f1:de:a0:da:f8:6e:c2:fc:e9:
         11:92:ce:0f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzo93h2xTPG2QLYwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIxOTAyMDAzMloXDTI2MDUyMDAxMDAzMlowLzEtMCsGA1UEAxMk
ZTU4ZWRlMDMtMTYzYi00NTRjLWEwYTQtMmNjNDE3NmMwZjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpC4Egd49snKXuA9vkU29ZRlx0K/riDNow+f
8llfwErOaeBDZ8ZFRTp1KK16UKIofNywMGooxWTAszDUMtaFGb+ooJxjtulhYY/3
VYgG5RkAhFa8IC00xcUF9x3zp52AiKCxfl/U815rOcgK49orPb2l189bkIdzAf3G
K5e7AJUNotzdPF6gacwYtGjrDAQO3MInPKs4Bdqs8dKeMLCx6MRq0rlYo/ev0gHl
cLtSisxzI9YgKRCWdl8XIFhrPpk/McVXiZ5/pskDp9ES5BN1m4gv/wwdVOB+tVX1
LcHJiPXWhl4xttZd4RrInIucM93WREKob+04hB8KBu51I1uv0QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNVZVJnEbYBm3fplLqmFvYvEebTjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzNjZmQxOTctZWYyZS0z
ZDIwLTk5NTgtYWUxODJjNzk1YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPASgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAW5IJ69tM9Jald5hs08Pl0F2uAvHHmlls1IjujglmcBJfAXrVdB5X
WSCHh/qGe6fhBJssG9VNjWeQxlibu5mlxCFc5hNSXU05xMm9TmwKh90YawAw2fUq
NYqYUTrEdOecxscSpPyM9l2HkGwLjtxctEHuFAUfnNgTYWnxsd8MXfpMHC9m6Iu0
1qo9Dfp01d5KWORu8fdVtGkJKxBeVDTCXK5WAfY3zUtitKdACw8gGwn+5zFU5KsR
/7uzqOtNmvcIPnKR31yTQ0sL/n/ixRVxHb63WAoLodcGwku9R9xjJLd/Ore7SCeU
usfP3M74WMQ7mzvi8d6g2vhuwvzpEZLODw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:39 2026 by rpki-client