Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccef90dc-9587-33ab-93f0-769b0aadf960.roa
File:                     ccef90dc-9587-33ab-93f0-769b0aadf960.roa (raw, json)
Hash identifier:          JyQfXTP29i60Wttl102Aly9VML2ihyluo8Dz8t3UeNg=
Subject key identifier:   53:DD:FB:D4:DA:D6:4E:68:2E:9F:E6:75:66:DC:98:C5:3B:03:90:D4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CF6ECCF8C7C364E48765C0540
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccef90dc-9587-33ab-93f0-769b0aadf960.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     54253
IP address blocks:        2603:c0f4::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:cf:8c:7c:36:4e:48:76:5c:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=2f0074e0-69ac-466c-8ef5-405bb48f939d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:25:dc:26:08:20:29:40:69:e5:b2:c6:23:71:
                    00:19:f2:8f:e1:00:b3:2a:c3:68:ca:c0:15:6d:f5:
                    78:2b:2d:f7:50:0d:b6:49:96:a9:62:c3:0c:1d:b2:
                    1c:37:78:26:eb:15:76:62:5e:d1:d0:65:cf:03:41:
                    9c:41:5f:c7:71:28:05:c0:70:98:4b:f7:75:3f:8f:
                    f5:c2:24:a9:13:99:c7:d6:92:4e:ee:0a:c0:ff:8c:
                    bd:04:9f:f1:88:c4:6b:58:89:83:98:3b:d1:82:90:
                    0d:d7:a8:b2:15:b0:e1:40:5c:c1:d4:39:d2:9c:6f:
                    38:f7:72:47:eb:41:a7:44:14:1a:48:b5:f7:d1:2f:
                    b4:9f:14:da:89:d8:b9:00:59:33:10:b2:a4:bd:91:
                    f8:69:92:76:11:d4:f9:37:e2:3f:90:55:19:04:57:
                    0d:d7:86:25:5a:2f:e2:57:01:b9:90:ab:ee:a9:c8:
                    ae:0f:0c:fc:b3:80:92:4d:fc:45:23:05:46:42:6c:
                    17:af:f3:7d:d8:a4:9f:57:d4:f5:d9:da:ff:ac:30:
                    17:ab:a2:b3:9b:a4:ba:44:de:f3:b3:62:cd:7e:5a:
                    7b:46:84:53:06:1a:5d:29:95:ed:77:2e:35:0e:d9:
                    04:5e:d8:1e:57:b8:50:d3:8a:2c:c3:46:21:50:17:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DD:FB:D4:DA:D6:4E:68:2E:9F:E6:75:66:DC:98:C5:3B:03:90:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccef90dc-9587-33ab-93f0-769b0aadf960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e6:31:cf:82:a1:03:66:50:d9:07:36:d1:37:09:06:9b:a1:
         19:ae:8e:76:5c:e9:5b:11:86:07:4b:9c:2d:d2:f0:13:c7:9f:
         b7:e7:28:b7:3f:db:db:c8:a5:85:65:d1:2a:d3:1c:41:ee:a2:
         2f:68:98:1d:d1:26:22:5a:60:b8:54:90:d0:2b:e0:e4:94:e8:
         2a:f5:54:79:29:7a:f4:41:94:59:22:e5:9a:44:90:0d:ef:37:
         5b:4a:0f:26:51:23:53:71:37:1d:66:5e:8a:38:83:a4:e2:e4:
         d8:83:37:60:9e:99:d5:b0:d3:4f:00:9e:b8:22:9a:c6:88:b6:
         93:96:57:fb:48:da:41:e8:15:ef:0e:17:ad:f7:bb:68:d0:a5:
         4c:a2:21:46:88:f8:66:bf:43:43:0c:4d:90:c2:61:9c:a6:c4:
         c2:41:ae:09:e1:ca:3a:30:1e:0d:a8:17:52:e3:9c:6d:a6:b1:
         10:f7:21:c1:50:92:21:1f:4c:18:bc:67:ce:83:1b:05:d5:a9:
         85:e8:31:b3:a2:af:4a:4a:2d:41:4c:2e:05:0a:d8:97:d5:10:
         2f:77:ad:cb:56:43:2d:4a:e5:1c:f1:89:b6:42:77:cb:f2:29:
         d2:18:a9:9f:7c:af:29:b5:4a:0e:4e:2a:af:ac:81:5f:30:1e:
         48:0a:96:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:32 2026 by rpki-client