Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8142772-a75d-3ac1-b237-a9aac0d45d2f.roa
File:                     e8142772-a75d-3ac1-b237-a9aac0d45d2f.roa (raw, json)
Hash identifier:          fiDrjHcYnKguoTy22v8ycnHn8EmJQ47z2SPgpZOo2vw=
Subject key identifier:   B3:38:57:D4:B1:B4:0E:78:9A:F8:FF:FA:45:8A:0F:68:88:D0:70:10
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CEBC23951D1F0B8E563B31680
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8142772-a75d-3ac1-b237-a9aac0d45d2f.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c0bc:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:39:51:d1:f0:b8:e5:63:b3:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=cfad2510-b83e-4451-bd03-74c0fdb5df8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3a:35:1c:4b:c8:ec:1d:ab:b8:51:04:8f:43:
                    bd:68:f2:0e:31:e2:98:2f:7e:01:1e:71:16:d6:65:
                    39:15:40:62:1b:eb:f4:7f:06:17:53:93:32:34:1d:
                    6c:9c:08:04:e3:b2:5a:6f:98:50:7b:cf:cd:1f:73:
                    ab:54:76:d3:7d:db:87:d5:b1:bc:52:03:8c:5e:97:
                    d7:1d:3c:55:e2:70:98:48:cd:c5:df:25:ce:f6:ed:
                    64:06:28:11:b1:03:05:b9:b7:a5:fe:a6:00:1f:41:
                    70:d9:dc:50:1f:d8:02:38:cc:f2:37:10:ae:99:c6:
                    95:17:29:63:02:39:41:12:05:93:85:f4:00:ed:89:
                    3a:3d:32:49:2f:85:4a:69:07:b0:96:8e:f0:15:40:
                    f7:40:a8:11:70:3e:8b:62:d4:0b:85:15:6a:bd:f2:
                    9a:d0:72:f3:b3:68:2b:8b:7d:8f:b2:01:67:96:2b:
                    c9:92:07:56:c5:42:43:3b:80:f5:0b:af:8a:a7:40:
                    91:63:b9:a1:54:e7:2e:1b:f7:b4:12:81:64:dd:b7:
                    ae:bc:75:46:ae:da:ba:87:a1:ce:d4:f3:19:a5:47:
                    8f:b9:71:4a:2a:12:f4:c1:58:23:c3:34:50:bc:9c:
                    dc:34:7e:3c:2f:65:35:96:e6:c0:38:d3:4f:6f:ce:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:38:57:D4:B1:B4:0E:78:9A:F8:FF:FA:45:8A:0F:68:88:D0:70:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8142772-a75d-3ac1-b237-a9aac0d45d2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0bc:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:bc:cf:6e:72:44:e0:31:ee:2a:c8:9b:3b:51:c5:19:57:68:
         d1:1d:66:72:1f:45:3e:bb:92:14:58:77:91:f3:e7:44:58:a5:
         b9:9d:a2:28:f0:11:f7:ca:92:e9:2c:de:97:18:de:11:a8:c3:
         8a:79:ec:2e:24:fb:ec:e0:ba:e1:cf:dc:f8:f3:dd:f0:65:f0:
         43:45:50:be:45:8b:39:ec:15:43:88:bd:03:cb:89:07:38:d7:
         9a:10:74:fc:ca:77:57:3b:42:45:63:cf:31:2e:e8:3c:dd:14:
         aa:2d:57:fb:a8:b5:30:77:a2:e7:14:bd:e6:ed:88:af:c3:a8:
         ad:b4:b3:86:52:d1:c0:df:b5:dc:95:5c:06:ac:60:d3:84:cb:
         ca:10:65:fc:a8:ae:00:a8:42:af:e3:50:fe:67:65:40:d4:c0:
         59:c9:c9:8d:af:6e:92:47:ac:17:bb:63:f7:d6:ff:08:ae:2a:
         6d:31:1d:55:e1:ab:28:6f:d7:e8:bb:b7:e5:06:61:5c:03:e1:
         a6:ee:ea:34:c2:fd:e9:61:ac:97:6f:2d:7e:f7:53:c8:2b:14:
         05:7e:5b:83:ba:e0:fa:06:6f:6d:82:12:af:fd:cb:0a:48:f4:
         03:72:35:6f:d8:af:68:07:0b:d4:67:92:6b:98:65:79:5c:f5:
         8a:ad:ca:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:09 2026 by rpki-client