Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/93b64d53-5f8f-3f2d-a1b1-74f94c356770.roa
File:                     93b64d53-5f8f-3f2d-a1b1-74f94c356770.roa (raw, json)
Hash identifier:          U2ZMka/cCdUO2PvYDn25UFuOZdiV8BpxlyQaITf2f/o=
Subject key identifier:   AD:4B:2B:07:50:3A:F6:53:5B:63:A6:7E:4F:DF:F6:75:3A:CC:10:2E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CF4224309AB1307D750CE3700
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/93b64d53-5f8f-3f2d-a1b1-74f94c356770.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     54253
IP address blocks:        2603:c0ec:2800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:43:09:ab:13:07:d7:50:ce:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=65b40db1-a76c-4577-b791-5a356a3b606c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:a7:00:50:d4:e8:89:28:77:12:8a:f0:25:
                    30:67:d5:b9:56:b3:9f:0b:fe:f6:d6:ed:5b:a8:9a:
                    87:5e:48:54:69:9e:c5:6e:32:73:b3:09:f6:75:f0:
                    52:86:c0:ab:3a:e0:c6:18:9c:c3:7a:da:2b:88:94:
                    e8:5a:b2:55:1c:e9:16:01:0b:cc:fd:53:1c:22:b2:
                    5c:a4:12:86:67:36:84:66:71:79:6e:32:4e:e0:a0:
                    f8:21:ec:1c:8b:a1:2f:df:bb:1a:5e:18:cd:c4:0c:
                    97:0a:7a:12:44:f3:91:8c:a6:8b:bf:63:cf:f7:42:
                    60:bc:28:e7:6c:1d:08:f0:ba:9b:f1:ac:08:9e:94:
                    55:5a:61:24:20:99:d2:5f:71:cc:d9:de:f3:c9:14:
                    50:f9:97:ea:68:34:86:3a:e0:5b:16:ff:04:41:90:
                    46:10:f0:70:87:8c:de:61:a7:1a:31:65:14:a5:b9:
                    d9:ed:19:1e:23:ed:9a:ec:72:85:35:65:35:33:e2:
                    c5:84:1d:6b:c4:fd:3a:b6:f4:c0:8e:b5:19:84:f2:
                    bd:c2:4f:a1:5b:ea:b1:0f:5f:ff:b7:98:57:82:00:
                    2d:24:ef:8d:88:d8:47:57:de:9e:b1:ad:06:9e:b0:
                    14:6d:ec:65:e5:5c:84:f0:d3:19:86:f1:4e:61:66:
                    16:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4B:2B:07:50:3A:F6:53:5B:63:A6:7E:4F:DF:F6:75:3A:CC:10:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/93b64d53-5f8f-3f2d-a1b1-74f94c356770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0ec:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f4:3c:9a:43:6c:90:29:12:64:23:e6:b1:1d:48:d2:fd:43:
         c8:41:50:58:96:02:75:99:50:72:fd:90:ad:38:2a:af:13:6f:
         22:7f:c5:74:ef:0f:2a:f0:97:d6:dc:81:54:a4:13:56:21:bf:
         0b:92:e6:18:8f:5a:fe:3c:ce:44:c9:15:00:7c:2d:11:98:ab:
         99:4b:46:d0:26:77:84:c3:42:1b:df:4b:7d:8d:ff:fe:ec:6e:
         5e:05:78:af:c0:8b:eb:a2:2d:82:fb:f9:4b:b4:4c:86:47:0b:
         c6:27:8e:50:a4:2d:d0:d2:58:56:f6:c1:89:99:f6:81:ba:0c:
         ee:26:54:b1:a2:f3:ec:31:9c:e7:5b:11:40:07:8e:98:91:f4:
         a4:ee:e2:79:78:fe:a2:25:f0:39:73:32:df:98:f8:e4:fc:4e:
         c3:9a:ef:d3:9c:b2:99:09:dc:2c:86:d5:78:5a:9c:35:5e:36:
         05:b0:db:84:41:89:0b:53:48:04:5a:68:ef:e0:91:9e:7f:5a:
         73:11:15:4f:ee:f4:18:99:3b:a9:24:6a:13:74:56:bf:6b:68:
         83:d0:c2:ae:fe:27:c0:38:32:1a:51:de:16:46:0d:37:39:44:
         f0:7a:40:d9:83:18:8d:26:77:72:7b:93:b9:82:b2:e1:9f:a4:
         44:ab:45:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:44 2026 by rpki-client