Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d18af67f-af5d-3ce4-9b58-2590acc31e2e.roa
File:                     d18af67f-af5d-3ce4-9b58-2590acc31e2e.roa (raw, json)
Hash identifier:          v3QRT5EjfXuxc2GVcglTe9/QgZ/7ceZiPdZlXC3MwyI=
Subject key identifier:   D1:85:10:4C:CF:FA:A7:58:80:31:4B:73:DC:CC:04:A9:30:1D:A8:A0
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CEBC22753020371C60BEEE21C
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d18af67f-af5d-3ce4-9b58-2590acc31e2e.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c0bc:1200::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:27:53:02:03:71:c6:0b:ee:e2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=f6a9d160-9eeb-43fd-a891-c3f2985d3149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:49:84:42:94:4d:df:1f:e0:46:eb:ac:7c:48:
                    8e:b4:66:b0:31:78:f5:48:f2:8b:21:a8:1a:f1:99:
                    70:50:65:9c:4e:b6:0d:33:0c:a7:35:a1:01:37:6a:
                    06:6b:48:cc:a6:93:cd:7a:0d:00:b9:68:c1:da:3a:
                    97:7f:b0:9f:4a:ff:70:04:25:14:02:7b:1f:af:c2:
                    0f:64:ca:bb:ad:dd:a2:a1:51:5e:62:fc:67:ce:f6:
                    68:c1:fe:12:3a:13:af:a0:9e:4b:ab:d4:f7:42:da:
                    a5:4b:6e:86:b5:ca:04:ef:f6:f7:97:0c:e0:a8:84:
                    1b:63:b9:f0:3c:48:aa:38:b5:46:19:bc:1d:83:93:
                    94:36:35:7e:6b:3d:56:c5:6c:5b:1c:8b:7e:d8:4c:
                    13:19:ee:47:6b:14:be:2d:44:9c:32:16:8f:33:9e:
                    37:a3:ee:f2:a5:a9:01:b3:9d:86:d1:11:ad:51:17:
                    11:74:3d:cc:d8:23:ab:40:8c:8c:08:8d:05:ea:a4:
                    17:8f:36:43:bd:63:50:2e:9f:98:46:22:28:df:36:
                    95:07:3b:3e:57:c0:b6:94:dc:d7:dd:c5:0d:b3:67:
                    36:4b:fa:cf:c8:37:c5:ff:31:91:a5:f5:c7:5e:b2:
                    6e:da:7c:57:77:39:61:48:f4:ef:b7:ac:fd:b2:f0:
                    a7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:85:10:4C:CF:FA:A7:58:80:31:4B:73:DC:CC:04:A9:30:1D:A8:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d18af67f-af5d-3ce4-9b58-2590acc31e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0bc:1200::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3d:4a:80:01:60:51:1a:40:76:f4:00:77:01:d4:99:ff:52:
         09:0e:ba:ec:b6:02:72:10:b7:9a:a8:41:77:16:5d:54:57:bb:
         7a:07:e4:c8:48:96:a7:69:f1:45:6c:17:7f:22:63:56:b2:33:
         3f:78:c5:ce:9e:85:50:34:37:3b:4f:25:03:21:f0:b5:ea:9e:
         c9:f1:91:26:04:32:fa:9f:b5:0c:a5:72:df:85:e6:b3:b5:cc:
         fa:75:2b:72:f8:20:ef:59:79:b3:c7:09:f7:23:c9:c8:96:d0:
         e7:6a:00:9d:f0:c0:1d:44:25:fa:0f:22:3f:38:e5:ab:3d:a5:
         da:6c:2e:f1:db:12:ab:77:6c:a4:4b:48:04:25:a8:a7:d6:c5:
         4a:db:7d:40:4f:62:c9:bb:2d:64:88:9b:db:89:19:a6:e5:da:
         80:ba:23:3f:e2:1a:47:c8:d8:26:b7:8d:c7:49:6c:58:b5:b2:
         7a:52:92:10:dc:81:8a:ea:b7:d6:a1:d3:d7:7f:54:a2:2a:1c:
         9b:35:61:73:cb:e3:e2:65:0c:d3:fb:07:f5:b7:c9:a8:b6:69:
         fa:c4:db:8c:7f:ac:50:07:a5:a3:71:b9:21:fc:d5:64:25:7f:
         81:4b:ba:68:5c:5f:39:b9:a9:0a:f0:6c:a0:f0:67:e0:21:b6:
         9d:85:7a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:30 2026 by rpki-client