Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d56ab500-23f5-3bc0-bff1-a05b7d15960f.roa
File:                     d56ab500-23f5-3bc0-bff1-a05b7d15960f.roa (raw, json)
Hash identifier:          tKgy7pKAo9Wn928vshYWtlq9qHXMrpcZ3uZR6YWiyBU=
Subject key identifier:   5B:05:9B:C4:F0:71:D7:BE:92:BC:E9:AE:23:57:40:7A:98:C9:28:23
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE8F76667C004DBC350422000
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d56ab500-23f5-3bc0-bff1-a05b7d15960f.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c058:1000::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:66:67:c0:04:db:c3:50:42:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=d2d8043d-2b4d-4e38-bd9d-51f3381a0d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:16:69:51:7a:1b:81:3b:6a:43:f1:59:19:b0:
                    e3:76:06:28:3f:79:93:5d:ea:ac:cb:4a:53:4d:c5:
                    8f:67:95:b7:50:f9:31:24:f5:38:50:b3:d4:7e:f6:
                    f4:04:a5:c8:1f:ec:1a:76:f7:a1:67:11:7a:9e:ce:
                    2a:3f:c4:75:56:8f:3e:a6:37:04:41:02:99:1a:91:
                    25:ee:6b:f3:a6:61:39:83:40:81:a1:50:66:c9:2a:
                    55:05:5d:87:76:7c:96:31:e4:80:87:d1:97:d3:1e:
                    0e:3d:f3:7c:4b:a2:3d:2e:d7:76:a0:a9:ec:31:97:
                    67:2c:f5:02:1b:14:77:f4:cb:59:ef:72:e9:4b:c7:
                    a1:45:29:35:3a:73:65:d3:33:7c:0f:33:2b:d3:ad:
                    32:fa:a6:36:51:45:a9:ec:f0:de:e0:20:55:9a:82:
                    1d:b1:3e:39:11:0b:4c:36:14:65:51:87:55:f0:4c:
                    c6:30:56:ac:f8:3f:c2:6d:9a:31:a6:54:dc:3d:c8:
                    c7:66:be:cc:24:2e:9f:46:29:08:86:a2:a9:b0:aa:
                    8a:f3:3a:59:1e:8d:30:64:c8:e0:9e:8c:86:c7:40:
                    60:f2:ae:3b:3e:69:9b:32:6d:34:58:a6:26:95:9a:
                    4e:59:ff:7c:16:d4:d6:d3:71:a0:c8:c9:30:de:c3:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:05:9B:C4:F0:71:D7:BE:92:BC:E9:AE:23:57:40:7A:98:C9:28:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d56ab500-23f5-3bc0-bff1-a05b7d15960f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c058:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:1a:42:ae:1e:93:85:78:f8:6b:25:52:b4:b4:b1:98:d5:6a:
         db:d8:58:1d:e9:03:54:23:b0:f4:35:db:32:19:c4:0d:6e:93:
         5d:40:c8:b9:36:00:eb:48:a9:88:7e:ca:70:0f:84:09:46:ca:
         64:6f:08:b0:87:9b:e2:49:3d:1b:6b:e4:ba:29:9a:3e:55:d6:
         22:f6:66:eb:40:ec:ea:c7:e1:41:e6:25:29:8c:95:54:93:c4:
         b7:b3:3c:c8:26:ba:e4:5c:71:19:4c:c7:a9:66:81:17:51:85:
         25:1b:1d:94:f2:c1:a0:f9:48:d9:cc:cb:b0:ac:f5:b3:9c:e1:
         12:7c:83:60:2e:c9:f8:e9:2b:2b:1f:bc:8d:81:55:da:99:da:
         4f:16:c7:48:12:de:11:8b:e1:1f:fe:c4:ce:48:6a:53:83:90:
         89:e4:5d:a2:0a:89:98:29:bc:19:dd:41:d7:02:4d:1c:7c:d3:
         f0:bf:d9:f2:bc:79:ea:46:97:8b:37:46:1c:df:c9:93:49:d8:
         77:c0:01:7e:3f:ea:c6:22:c6:72:61:00:bb:27:de:31:5d:81:
         69:9a:c7:b1:ea:cc:f3:df:ed:87:92:a4:12:d7:3e:f2:d1:6d:
         10:53:8f:a7:8f:e9:b0:08:26:ec:d7:41:6c:60:20:36:56:0c:
         77:bb:e6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:45 2026 by rpki-client