Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/474ee274-f0d4-3205-b325-48d3e5ec866e.roa
File:                     474ee274-f0d4-3205-b325-48d3e5ec866e.roa (raw, json)
Hash identifier:          fPg29YAOpsUJ+Xt8fa8foCDouynzyCAYESZSuux/jMU=
Subject key identifier:   96:ED:22:E5:BD:EB:4E:DC:5D:E6:50:11:45:8F:C1:53:5D:C6:F6:B6
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE5FB6C9E11FEC940C8EA5580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/474ee274-f0d4-3205-b325-48d3e5ec866e.roa
Signing time:             Wed 18 Feb 2026 00:21:20 +0000
ROA not before:           Wed 18 Feb 2026 00:21:20 +0000
ROA not after:            Mon 18 May 2026 23:21:20 +0000
asID:                     31898
IP address blocks:        2603:c001:5800::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:fb:6c:9e:11:fe:c9:40:c8:ea:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 18 00:21:20 2026 GMT
            Not After : May 18 23:21:20 2026 GMT
        Subject: CN=c1a29f4d-8570-4fa7-a704-5655b760d6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:55:34:4a:2e:37:d6:19:51:2a:de:f6:b9:
                    d0:4c:54:e3:dc:d1:be:0a:c2:b5:97:04:d4:69:d0:
                    06:5d:63:d9:ce:b6:59:27:6f:1d:69:6b:a2:58:ab:
                    79:df:8e:4b:6a:12:a3:7b:ff:9d:e1:8f:40:50:07:
                    0a:55:a3:79:64:79:c2:bd:6d:aa:3e:27:98:07:ea:
                    95:e8:02:1e:bf:e8:a2:4b:2d:38:aa:b7:7c:e5:25:
                    f2:47:a6:e6:b8:7d:90:52:a7:6e:94:a5:85:93:aa:
                    ff:db:94:57:b2:94:bb:17:3a:e0:9a:22:ce:fa:9c:
                    f7:f6:3d:32:ff:03:a3:e6:f3:ae:b7:cc:f0:d8:43:
                    cb:fb:dd:4e:8a:57:d8:8c:ac:e7:36:1e:e6:93:90:
                    c8:f2:1f:7e:49:4b:53:41:d7:cf:c7:1a:cd:db:7a:
                    1c:51:bc:b0:db:d3:50:f3:ab:8c:ea:e0:25:1f:f8:
                    52:42:af:0e:98:b9:bc:e2:9d:d5:6f:69:f1:a0:15:
                    11:3e:5b:0a:4f:af:b0:e0:05:8b:31:11:21:80:59:
                    ad:35:33:72:ec:ac:8e:82:c4:46:7c:5d:f8:cd:ab:
                    fc:80:a5:90:90:4e:a8:54:30:11:42:ae:57:a6:1e:
                    59:99:b9:98:a2:ed:36:02:de:6e:ca:27:78:d7:23:
                    42:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:ED:22:E5:BD:EB:4E:DC:5D:E6:50:11:45:8F:C1:53:5D:C6:F6:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/474ee274-f0d4-3205-b325-48d3e5ec866e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:5800::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1d:db:5a:a2:49:16:a4:0d:a6:10:b0:43:33:1b:88:f4:d8:
         e7:ed:48:b1:52:60:01:ee:ed:ba:e8:af:b8:cc:26:2a:82:be:
         29:2b:6a:1b:26:c4:fd:79:bf:75:f3:d3:23:8b:c0:40:39:e2:
         6d:b1:b1:c6:c6:28:e4:e3:a8:65:bd:9e:46:33:49:8b:c9:b5:
         db:11:5c:84:0b:00:21:f2:a4:61:28:b8:51:2b:6c:54:64:44:
         db:1d:65:48:3d:66:dc:07:f1:2b:18:5e:ae:85:a0:a4:94:e4:
         61:61:23:c1:c8:93:26:57:a9:e0:2f:17:6b:60:44:1b:03:97:
         e3:dd:2f:4b:a7:21:f3:e0:ea:f0:eb:25:1c:27:15:2b:76:e3:
         3a:86:d3:e8:f8:48:55:fe:2a:9e:b5:5f:c0:58:e2:21:31:c9:
         5b:72:7e:0c:0c:b5:45:56:39:76:01:47:28:c8:0d:38:0b:8e:
         28:77:6c:bf:14:9d:a6:f2:fa:e2:f6:48:6a:8c:6a:78:72:05:
         62:a4:9b:9d:82:f5:0b:6a:d4:24:bf:de:36:a9:31:35:80:0b:
         74:71:9c:8a:94:8a:52:e1:0e:95:e5:46:23:2f:1f:fb:d6:98:
         32:1c:12:e6:1a:c0:35:d0:b9:f1:69:0c:70:b2:c8:f1:0b:03:
         a9:13:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:25:50 2026 by rpki-client