Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/453480c7-1cb5-34ea-9b7f-d3804e7e9664.roa
File:                     453480c7-1cb5-34ea-9b7f-d3804e7e9664.roa (raw, json)
Hash identifier:          GS57af9DkSIxIauIkvG8WRxdMJjzrhc9LQDKmPFnMBk=
Subject key identifier:   2B:1D:C1:BF:6F:62:EA:2A:CB:D8:39:E7:94:4B:B2:63:12:27:BA:79
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBDB1EA8930B10A7309FF3F60
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/453480c7-1cb5-34ea-9b7f-d3804e7e9664.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        2603:c002:a300::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:ea:89:30:b1:0a:73:09:ff:3f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=8042736a-2639-4726-99f7-744ce370b171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:a8:cc:ab:e9:55:95:24:48:6a:d7:f8:3f:
                    7e:9a:6b:42:f3:25:6e:ea:3d:e3:ea:c7:13:00:29:
                    54:0c:19:9e:9e:50:92:00:58:84:4e:c3:aa:4d:ab:
                    5e:42:59:63:d0:c2:49:3e:94:de:4e:97:71:b6:d5:
                    f7:fd:9c:63:e8:21:80:d1:0d:02:46:e3:39:20:ae:
                    c9:5a:77:8d:1f:e3:27:04:5f:5c:df:e7:72:20:b2:
                    5c:e4:25:09:fd:35:e3:f9:9f:1c:22:a3:b2:c2:5a:
                    ab:28:1f:f9:ef:ea:90:5b:f4:4c:e0:85:c4:93:6f:
                    d2:ad:fa:8d:e6:17:40:91:7a:3b:2a:ab:46:fd:31:
                    3c:98:c3:40:c5:f3:97:09:d0:da:b3:4a:b1:9f:af:
                    f8:01:83:4b:75:9b:be:e5:62:c1:9a:6e:dd:01:9b:
                    38:8e:24:39:51:39:b8:55:94:08:1f:16:bc:33:01:
                    8c:0b:8e:c5:56:f1:fc:ab:ce:4e:2b:f6:71:7c:e1:
                    64:d7:dc:fc:80:c7:da:32:2c:4c:93:e6:ac:c6:75:
                    3a:58:e3:22:0c:fb:53:cb:5a:ff:22:2f:4d:92:ab:
                    e4:5a:59:e1:84:6f:15:7b:5c:22:60:03:06:aa:3c:
                    65:b6:8c:14:64:6b:2c:9f:5d:69:92:de:a7:25:be:
                    69:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1D:C1:BF:6F:62:EA:2A:CB:D8:39:E7:94:4B:B2:63:12:27:BA:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/453480c7-1cb5-34ea-9b7f-d3804e7e9664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:a300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:77:a5:d4:b1:c0:97:b5:46:1f:fc:f7:04:57:2e:7f:f3:80:
         d1:35:c4:c7:28:36:45:12:57:9c:9e:a6:24:0d:c8:b6:3b:b3:
         2c:58:ff:4b:e4:c5:99:f0:61:b8:48:f7:14:92:bf:c1:ab:37:
         97:94:f0:00:c0:5e:40:cf:d5:69:c2:92:a7:00:5c:85:c0:1c:
         f2:5d:df:44:87:41:de:cf:a1:fa:77:15:eb:ea:03:1c:46:42:
         96:4f:f6:c2:31:96:0e:97:1c:c2:3a:e2:b0:a2:45:3e:7e:71:
         5f:6c:d4:52:4d:ac:ae:2f:b0:23:9d:59:96:f4:13:c2:c2:f1:
         e2:3a:9d:d4:f2:70:c1:2e:3d:cf:bb:92:73:20:c0:1a:2d:b3:
         d3:48:f3:06:98:40:f3:df:10:48:8a:45:1e:56:42:7f:9f:2e:
         56:b8:a7:79:60:d9:6a:58:69:52:81:1a:ea:b3:95:2b:51:80:
         62:67:71:14:a4:68:4a:67:b0:2c:54:29:76:5f:d0:a5:23:76:
         46:59:02:a9:f5:f3:e2:64:80:fc:40:60:20:88:24:4c:14:24:
         81:08:95:bd:df:e5:df:51:7a:c4:ba:8f:72:18:1d:df:cf:22:
         5c:06:b6:6f:a7:99:0d:7d:dd:b8:57:8d:db:ad:f2:9a:01:6c:
         85:c5:f7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:21 2026 by rpki-client