Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/80e3092f-fe34-3ca3-9747-60100dbaf5d2.roa
File:                     80e3092f-fe34-3ca3-9747-60100dbaf5d2.roa (raw, json)
Hash identifier:          A6/Mh01620UWK5BZ0JTs7HYle5rajQQdroRQJejoupw=
Subject key identifier:   C2:7D:21:EB:7A:65:90:65:4B:C7:53:85:72:DE:54:1D:F0:C2:85:7A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CEBC223A81D970A47EBD70240
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/80e3092f-fe34-3ca3-9747-60100dbaf5d2.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c08a::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:23:a8:1d:97:0a:47:eb:d7:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=a35506c4-c342-41b7-ae1e-2e06cf48be9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:bf:66:d4:e5:be:b9:e9:a7:a4:5f:09:74:
                    88:af:77:03:43:8e:e2:4a:83:89:a8:d8:53:90:3b:
                    5e:c0:57:9e:cc:e2:0e:b7:24:d5:30:bd:16:29:01:
                    df:f8:fb:21:be:4f:a7:61:6d:f1:e2:ad:8a:e9:c0:
                    e1:27:63:4e:49:3f:d7:1c:17:30:33:54:ea:4e:b6:
                    6d:97:95:f1:ff:06:78:b1:ef:ae:12:b4:82:ca:81:
                    77:54:6e:6a:c3:ef:a7:d7:70:04:70:9a:32:6a:eb:
                    cb:6d:c5:d3:16:46:20:f8:61:34:0e:91:45:bd:1a:
                    19:40:87:0c:f6:fe:97:f8:a3:53:ed:10:fe:6c:4a:
                    7a:cd:e3:2a:d7:1f:09:01:7a:a2:e8:e4:1d:1f:c5:
                    f8:5a:b6:0e:aa:d2:c7:b6:97:4b:02:27:ed:00:4e:
                    4f:2e:b6:80:cb:97:df:d2:df:8f:61:f9:09:8f:3f:
                    90:36:f9:73:b9:6e:84:c6:7e:f1:84:d9:c8:31:6f:
                    da:43:80:09:55:33:b6:3f:c5:5d:d1:bd:37:09:13:
                    9a:1e:93:4f:75:f6:be:8e:96:b7:45:70:ec:9b:37:
                    9b:50:c7:4a:b5:0e:db:fc:28:c1:56:d6:23:22:dc:
                    0d:1f:68:13:09:6d:98:f8:1d:61:87:3a:68:5a:c0:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7D:21:EB:7A:65:90:65:4B:C7:53:85:72:DE:54:1D:F0:C2:85:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/80e3092f-fe34-3ca3-9747-60100dbaf5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c08a::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d2:81:95:60:27:be:61:e8:02:4b:a7:b1:ac:c8:86:b9:2c:
         71:64:50:0b:c9:fc:00:b0:31:b5:8e:1d:e1:f4:e3:e3:4e:59:
         63:33:30:4e:4b:ae:49:2b:d2:74:aa:76:e2:69:1a:e7:03:3c:
         ba:db:30:25:54:d5:b8:4d:72:af:67:c1:3e:64:82:cc:6a:d7:
         12:c6:b5:35:10:c1:ce:fb:bc:6d:2f:3f:61:54:0d:df:b7:4c:
         e7:58:91:6a:bc:3d:88:6e:69:f9:c5:59:dd:a5:69:f8:a4:04:
         9b:61:bc:37:cc:0f:d5:6a:b9:9f:a1:25:80:99:c7:bd:5b:ad:
         b8:da:5b:94:4d:d6:bc:dd:43:c9:cf:2d:fb:f2:72:d5:09:07:
         dc:f6:3f:07:93:9f:21:1a:02:03:12:12:92:b7:9f:a7:0b:49:
         64:e5:88:11:43:e5:3a:9f:f4:e9:64:fe:43:ae:0f:1b:0f:5e:
         12:f8:0a:2b:fc:fb:06:97:5e:36:c1:c4:fe:41:86:1f:d9:c1:
         53:75:fe:de:60:60:69:fa:d7:c7:da:9c:53:2f:e6:b6:1f:bc:
         e7:69:ee:dc:5d:0a:fc:8f:a0:e9:3f:d9:c9:ba:67:19:f3:be:
         c8:3c:62:c4:16:53:10:c4:06:56:b0:0e:08:d4:d2:22:70:26:
         87:2c:78:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:26 2026 by rpki-client