Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/84696fcf-76e3-38d3-8004-c21ccc487bd5.roa
File:                     84696fcf-76e3-38d3-8004-c21ccc487bd5.roa (raw, json)
Hash identifier:          iqMtYz2D6TyrQcPCqspMOp9xwU5oQyXmuBa+UtUgc68=
Subject key identifier:   80:80:9F:96:CD:FC:75:FD:40:59:AC:44:12:CF:34:87:62:21:96:10
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE8F779584914794FEDD881C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/84696fcf-76e3-38d3-8004-c21ccc487bd5.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c088:2100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:79:58:49:14:79:4f:ed:d8:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=b18ec95a-7e39-4137-a74c-2e9bc0c865a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:ca:5b:5c:86:e2:9a:e7:dc:9c:28:84:6d:
                    5a:56:9a:4b:84:64:8b:bf:0a:9a:5b:69:52:81:0e:
                    e5:87:f8:02:b6:b6:56:68:dd:96:e2:fb:b2:ed:30:
                    38:e7:81:69:4b:f1:fa:f2:c1:fe:4d:6a:be:e0:74:
                    78:82:25:54:80:97:96:10:be:c0:74:7c:d1:06:14:
                    e8:92:44:7f:57:7e:3a:23:56:a4:c1:c2:08:4c:18:
                    10:83:79:f8:49:ea:29:0b:c1:c6:b4:fb:ff:f9:35:
                    e5:61:b7:24:84:e1:7f:a6:b4:ae:e1:c3:bf:b1:02:
                    41:04:52:16:bd:c2:29:ef:2e:e7:41:20:b7:46:42:
                    3a:7a:69:17:bd:3b:8a:18:59:4e:78:22:e6:09:e5:
                    1f:06:1c:e2:9e:9a:26:d4:9d:2f:c2:01:d3:4c:50:
                    5b:d2:80:81:b5:3e:47:3c:53:71:e1:81:63:a3:2c:
                    28:a0:07:d0:86:7d:ed:53:c8:a5:94:f7:71:e8:a2:
                    79:a6:a0:05:ee:c2:d2:4d:12:45:63:b9:70:90:5b:
                    26:90:9e:8d:25:84:15:53:8d:78:01:84:0c:c3:a7:
                    81:d3:e9:31:de:36:2f:48:62:ac:19:65:1c:d9:dd:
                    79:d9:28:10:cf:52:e8:0b:a2:3d:09:0d:5f:5c:ef:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:80:9F:96:CD:FC:75:FD:40:59:AC:44:12:CF:34:87:62:21:96:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/84696fcf-76e3-38d3-8004-c21ccc487bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c088:2100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:cc:22:13:65:42:ff:03:a1:ab:64:51:6b:2b:77:d5:02:6c:
         27:e6:59:ea:14:e6:37:5f:91:1a:2e:75:07:0c:7a:43:e1:0e:
         2d:0d:10:f9:a7:1b:50:a7:3f:40:5b:df:d5:08:49:ec:6a:94:
         a8:09:77:45:27:bd:27:7b:49:93:cf:ea:78:8e:73:9c:ee:5b:
         2e:8f:42:09:9a:b5:73:78:07:5c:69:9f:26:73:0b:5c:0c:18:
         fe:b0:df:97:f3:96:7d:e8:f9:a2:e2:f4:2d:07:a0:9d:eb:04:
         7a:03:7c:06:85:66:3b:5c:1e:b4:ca:f3:f2:9f:46:64:c1:03:
         a8:ff:1b:85:19:b9:c4:00:4e:90:92:e5:bc:82:84:81:82:3f:
         74:0e:83:fa:f2:50:e4:ac:51:c7:ff:be:84:ea:e0:28:e6:25:
         05:c4:3a:4e:7d:57:66:c9:61:7b:73:65:c7:50:31:e3:89:30:
         e7:98:2f:39:18:35:43:cd:a0:af:99:71:d7:47:91:1f:01:a5:
         60:b9:76:76:f0:d5:e8:bd:52:fd:5f:fe:93:77:45:18:33:f1:
         f5:2b:46:dc:ce:41:2b:dd:f2:53:83:af:38:1a:dc:de:76:9e:
         15:2e:90:92:fa:ea:cb:84:1c:39:3e:0c:dc:06:1b:1d:bf:e6:
         4d:7c:69:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:47 2026 by rpki-client