Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4d557ef7-ae71-32d4-8f06-b24f378d62ad.roa
File:                     4d557ef7-ae71-32d4-8f06-b24f378d62ad.roa (raw, json)
Hash identifier:          qcbpkGOwW1EKnOJBOddogk247NmaE1O0du46Df9lDf4=
Subject key identifier:   CD:18:91:33:FA:90:D1:BC:0C:59:E8:8B:FF:4F:E2:7A:B3:01:98:2A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAB8C60866543F3E1A4B5E030
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4d557ef7-ae71-32d4-8f06-b24f378d62ad.roa
Signing time:             Wed 28 Jan 2026 02:00:29 +0000
ROA not before:           Wed 28 Jan 2026 02:00:29 +0000
ROA not after:            Tue 28 Apr 2026 01:00:29 +0000
asID:                     31898
IP address blocks:        2603:c02e:8000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ab:8c:60:86:65:43:f3:e1:a4:b5:e0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 28 02:00:29 2026 GMT
            Not After : Apr 28 01:00:29 2026 GMT
        Subject: CN=319fd97b-08f3-4289-a698-50c263c37155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:be:17:5c:1d:2b:83:e6:22:d4:a9:b2:92:
                    fa:3f:35:8f:e2:fc:c6:d0:1f:a4:fb:4e:f8:63:21:
                    aa:16:14:2b:1d:b9:6f:49:a9:52:33:fb:fd:69:11:
                    ac:78:96:cf:f3:75:8e:88:4a:f5:5c:0c:4e:e0:4a:
                    2a:e9:78:10:ad:40:6c:2c:a6:fe:fd:df:37:8d:53:
                    aa:10:83:0d:78:a5:8f:ef:04:e8:06:4e:9c:96:93:
                    74:58:36:42:5c:76:e4:a7:c8:c6:5f:40:1a:d3:78:
                    d6:df:04:f8:c4:2b:da:2e:28:f8:e0:16:a4:c7:f4:
                    75:7c:80:0a:fb:8d:46:d5:08:f7:91:f0:db:29:0b:
                    3c:6e:73:dd:ba:88:e7:6c:fb:ef:84:b2:91:c4:02:
                    67:b0:44:f2:88:d7:c0:ff:2d:8f:c0:2b:ee:b3:02:
                    1f:af:1e:bf:70:2a:15:99:d5:18:db:58:e9:5b:20:
                    49:b7:ba:53:72:a5:03:c8:59:ce:87:4a:29:66:96:
                    11:c8:4e:73:fe:75:88:69:6b:17:cb:d0:d6:10:1a:
                    40:d6:27:68:c2:6f:32:c3:51:84:b9:55:51:e0:a0:
                    ad:00:6b:06:34:65:54:b8:f6:82:f5:be:6c:f8:33:
                    57:45:41:9a:99:cb:33:9f:c0:5b:a2:f6:86:11:2c:
                    44:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:18:91:33:FA:90:D1:BC:0C:59:E8:8B:FF:4F:E2:7A:B3:01:98:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4d557ef7-ae71-32d4-8f06-b24f378d62ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c02e:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d1:17:8d:d8:b3:a9:8f:54:dd:f6:f0:3f:b3:c9:21:83:ea:
         fa:4b:c5:bf:72:34:bd:c5:78:5a:b4:15:7c:86:b3:f0:bb:10:
         5b:5b:e8:21:23:cd:a9:e0:38:37:ea:40:3e:c7:c8:68:f7:a2:
         77:2d:86:59:b9:a0:e0:87:06:2a:1a:ff:ca:21:70:87:f3:1a:
         ed:5c:a0:3d:88:63:8f:b6:40:f0:3a:9e:9f:30:d7:06:67:03:
         25:7d:f8:33:24:e7:21:2e:5a:2b:9a:d0:14:41:13:08:f3:e0:
         04:e2:79:3a:94:95:0b:24:9b:1b:5b:c7:a9:93:fb:c3:b2:69:
         66:73:93:8f:91:36:a2:ae:7f:70:de:0b:5c:e8:44:c6:c8:4b:
         b9:cd:d0:82:fc:59:21:71:78:58:8a:bf:91:61:6f:f7:e4:c8:
         83:7f:60:b9:77:45:45:b2:b5:18:72:cf:02:f5:f8:bb:02:44:
         5d:f9:f9:da:80:c4:33:b0:13:3d:c4:e0:1d:65:1a:76:6f:ae:
         8d:f2:a7:f1:50:b4:08:d6:4c:87:f2:be:76:01:de:48:ac:6b:
         83:89:01:1a:5e:09:6d:3b:f9:72:c4:06:fc:d7:14:07:02:c5:
         ee:73:dd:ba:63:dc:28:a5:39:55:ba:28:6f:9c:75:ec:ea:a2:
         ff:92:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:21 2026 by rpki-client