Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a5d68064-b98c-3324-8d45-8f36058fb3c5.roa
File:                     a5d68064-b98c-3324-8d45-8f36058fb3c5.roa (raw, json)
Hash identifier:          uc/i9eueN1c0SOJesJtKDRozogKImDPA/d5GLamAsaw=
Subject key identifier:   A2:8C:AD:11:7B:4E:F7:82:5C:7C:8A:F2:03:68:AF:8A:18:BA:A5:0D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CF42242D6B7BB477F3EDAA980
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a5d68064-b98c-3324-8d45-8f36058fb3c5.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     54253
IP address blocks:        2603:c0c0:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:42:d6:b7:bb:47:7f:3e:da:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=1dc9a2a7-372a-4207-a364-dcaf2d1a2b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:89:5d:b7:81:0a:c7:4e:69:f5:6a:fd:22:
                    e1:19:26:96:62:f2:e1:65:73:da:4a:a9:02:0c:eb:
                    d5:8d:45:7c:70:47:40:f2:20:d5:e3:b7:b2:5e:21:
                    43:a2:ad:2c:80:7e:a3:c3:bc:42:b5:16:2c:b4:1b:
                    20:48:2f:32:d6:6f:11:af:73:93:9e:02:11:b2:c8:
                    87:9f:34:3a:c7:71:a0:39:1d:ee:27:82:1c:1a:9f:
                    16:19:fd:5b:30:65:57:62:f5:55:8a:ba:18:bb:ed:
                    7a:b7:19:98:c2:3a:03:39:4d:f0:11:53:2e:96:48:
                    ba:ba:0c:17:32:da:1f:19:13:bf:0f:51:d5:32:2e:
                    0d:e3:a2:e5:50:f3:6c:3e:0c:b6:24:f8:19:16:8a:
                    3d:ab:81:4a:22:9a:e9:57:fa:c9:07:dc:d0:96:38:
                    98:89:f2:a8:c3:1f:33:d2:6b:cf:71:20:44:10:16:
                    db:27:92:97:f4:e4:8e:7d:a3:cf:fa:1f:6e:c1:0f:
                    41:98:70:14:3d:60:b0:47:c9:2a:b2:2e:23:7e:4b:
                    71:be:45:81:5e:2b:64:9f:c0:b6:82:9b:66:99:30:
                    44:9a:28:99:f6:ea:bb:74:2a:85:fe:b8:13:b1:cc:
                    e9:db:d9:09:99:ef:db:98:39:73:8e:04:04:05:dc:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8C:AD:11:7B:4E:F7:82:5C:7C:8A:F2:03:68:AF:8A:18:BA:A5:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a5d68064-b98c-3324-8d45-8f36058fb3c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0c0:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:06:cd:22:a4:db:52:d7:5d:2b:8d:94:48:2f:a9:a7:78:ff:
         4d:3d:98:ba:76:dc:dc:fb:91:d4:7c:4e:3c:e6:65:4d:c7:82:
         09:f9:e2:a0:6a:38:65:c2:0f:8c:06:5d:79:9b:4e:b2:46:39:
         84:56:1f:64:44:56:fc:87:d9:32:01:32:13:4d:45:b1:7a:36:
         4d:a1:bc:2b:0c:0f:75:fa:03:1c:71:f3:4c:46:8a:af:fd:17:
         f4:20:a5:c3:74:98:22:88:09:e1:91:53:09:7e:15:10:46:7b:
         8b:26:8f:af:1b:c3:35:72:05:30:e3:fd:6d:cd:55:91:29:ca:
         96:f5:87:ec:fa:18:69:5b:20:d3:ed:f1:90:cf:a3:44:44:32:
         f3:ef:15:e7:d9:30:4c:3a:70:69:72:13:8c:cc:e5:fa:81:68:
         b6:43:25:96:9c:50:ef:f7:ca:ec:fe:32:aa:f8:0b:8c:02:7e:
         f6:67:de:9b:e8:8b:cb:4d:6e:bb:3c:79:ad:8c:61:97:11:c3:
         b0:bf:1d:be:3c:10:5c:7d:14:1b:66:5b:d9:da:b5:b3:7d:6c:
         4d:a5:3a:dc:2d:1b:ab:fb:6d:11:99:68:fd:fd:93:73:da:46:
         54:5c:53:c3:b2:12:64:d9:5a:09:d4:9f:77:00:e4:07:d8:e7:
         a4:dc:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:04:33 2026 by rpki-client