Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8a59e45-c500-38a8-abc4-b2e30c2626d0.roa
File:                     e8a59e45-c500-38a8-abc4-b2e30c2626d0.roa (raw, json)
Hash identifier:          3lSLQpoMq6ey8yGnjGbRNaM7vwvQPnWoOGD1RJufD9k=
Subject key identifier:   89:F4:A9:43:C9:F5:40:7E:84:9A:04:00:39:D1:78:44:00:C4:09:8E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE8F75E99870E78A741F4DF8A
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8a59e45-c500-38a8-abc4-b2e30c2626d0.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     54253
IP address blocks:        2603:c06c:2000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:5e:99:87:0e:78:a7:41:f4:df:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=cdc48842-7760-4abb-9f77-039bb1c1ba37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f3:db:c4:e7:fa:6e:c6:f9:b0:3d:08:9f:31:
                    b4:53:e2:2e:aa:75:9b:c2:a0:04:e4:ad:e3:ee:7d:
                    f7:6c:cc:63:21:92:7f:a1:4b:f2:00:48:4b:52:c8:
                    6a:bd:b5:57:bb:20:3c:c7:95:34:22:af:e4:9c:6e:
                    06:af:25:30:d5:da:32:a6:6b:4b:a9:b9:48:38:92:
                    0b:c0:ee:7a:e5:45:0d:33:52:0e:1a:38:47:ba:0e:
                    48:d7:1b:09:da:48:00:ce:2e:22:e6:2f:09:cd:90:
                    b0:a4:f9:93:38:0f:7c:b7:b9:1e:4d:5c:0a:b0:1a:
                    8a:9d:89:f8:db:95:e5:03:1a:c3:9c:60:76:8a:51:
                    99:d1:d4:69:0d:d9:c9:7c:7e:b2:50:04:a1:f4:a4:
                    0c:4a:06:3d:c9:75:0a:69:7e:19:e8:f1:df:b0:9b:
                    20:ea:bf:34:52:d8:c2:3f:64:74:e6:b5:b4:55:74:
                    42:98:cd:21:a6:12:c9:57:0c:30:f9:c8:71:f4:48:
                    8c:1b:ea:79:7c:6b:e1:11:5e:4b:d6:fd:3c:8d:10:
                    95:24:6c:12:21:ef:69:32:28:e2:31:82:8a:03:22:
                    55:f6:76:a0:39:e5:86:be:11:7f:51:84:7a:40:76:
                    9e:bc:ff:18:e0:3f:41:a2:fd:ae:77:29:02:ae:93:
                    e7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F4:A9:43:C9:F5:40:7E:84:9A:04:00:39:D1:78:44:00:C4:09:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8a59e45-c500-38a8-abc4-b2e30c2626d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c06c:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:a0:5b:d1:6d:58:99:fc:85:85:32:07:ca:4f:d5:c1:f4:1c:
         28:6c:f0:28:89:2e:0c:d2:4d:56:ee:5b:4f:19:df:64:37:3b:
         fd:1c:59:e2:53:ad:fe:56:d6:c2:a8:49:a6:d7:00:74:90:a7:
         18:00:b6:4e:fc:15:c4:a1:d0:2e:0c:8b:87:ac:7b:1e:5d:1f:
         1d:a5:29:f7:91:00:f0:dc:ff:e0:86:5d:26:e3:d6:24:4c:53:
         c8:c4:08:a0:d7:86:ab:7e:4b:da:5a:f9:dd:71:a7:83:15:3c:
         5d:8c:82:54:0f:b9:e6:5f:7c:c8:5a:46:d4:a3:19:7d:4f:9e:
         cc:12:26:48:87:14:fb:7b:1c:ed:42:2d:c5:ef:31:ca:33:26:
         e4:6e:d9:c2:8b:f4:e4:11:21:ac:2f:f9:96:3a:9c:6c:1c:ee:
         04:73:23:dc:6e:e4:3f:1c:86:73:31:e2:c7:b6:a8:5e:d3:7b:
         89:27:05:73:c1:69:63:1a:69:27:a7:6c:31:de:80:c4:74:51:
         d4:c4:42:e2:e4:b0:bf:19:b8:be:a1:ba:65:52:de:85:44:e5:
         dc:99:f5:38:04:e0:0e:68:f7:44:a0:80:46:87:ff:6f:22:a2:
         45:9c:ed:f9:e1:8a:0f:78:f6:f0:d1:a2:04:16:bc:d4:8d:31:
         d5:8b:e3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:49:41 2026 by rpki-client