Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/513ccdf8-760b-39bc-a319-f0d261e9c5e0.roa
File:                     513ccdf8-760b-39bc-a319-f0d261e9c5e0.roa (raw, json)
Hash identifier:          i2PH0pp9VHrPtXQByKrI4Jj5tlcijtk6w2GN9yUrohs=
Subject key identifier:   22:23:72:8D:E0:A4:6E:3F:F9:13:77:09:71:47:5B:71:33:8F:57:80
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE5E1E684B27672AE0C0DD6D0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/513ccdf8-760b-39bc-a319-f0d261e9c5e0.roa
Signing time:             Tue 17 Feb 2026 23:29:55 +0000
ROA not before:           Tue 17 Feb 2026 23:29:55 +0000
ROA not after:            Mon 18 May 2026 22:29:55 +0000
asID:                     31898
IP address blocks:        2603:c002:3a00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:e1:e6:84:b2:76:72:ae:0c:0d:d6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 17 23:29:55 2026 GMT
            Not After : May 18 22:29:55 2026 GMT
        Subject: CN=758138c0-414c-4a41-80db-3fcbc9b48645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:06:70:91:42:e9:99:ae:17:64:71:23:25:
                    e8:f6:4d:8d:ca:68:4d:2b:f2:d7:4b:d3:48:7d:11:
                    0d:98:f5:6c:e0:04:e3:31:31:c3:f7:55:60:ea:b9:
                    2c:f2:0f:40:64:41:8d:ed:18:bd:80:47:44:7a:7b:
                    70:ee:5e:b5:9c:c5:be:28:bf:69:01:7b:54:96:ed:
                    5c:80:96:13:49:f0:35:0b:6f:5d:84:e3:96:b4:3e:
                    eb:72:ea:f6:72:d5:83:fc:77:a1:1b:93:7c:19:a3:
                    7b:1c:14:38:cf:a5:c9:99:0c:07:b4:c2:ef:39:38:
                    5f:e5:cf:34:c7:88:8e:2e:66:52:67:89:d9:86:8b:
                    d4:6b:7a:fe:ce:aa:46:8d:2b:15:6c:d6:ee:22:b0:
                    2d:9a:c7:cd:67:63:50:83:c8:d1:2e:14:57:79:7a:
                    4f:08:80:e8:54:1d:4b:15:c2:55:36:d5:c7:3e:df:
                    1d:9b:fc:92:cd:0d:c3:83:f8:48:81:8c:4f:1f:b1:
                    c8:fb:1e:df:7e:13:9f:75:77:9a:4b:d5:00:bb:ad:
                    2c:bc:03:2f:86:fb:e0:cb:15:be:89:10:96:c7:fd:
                    ec:4e:30:8e:a2:a9:71:4f:71:db:28:02:76:6c:7f:
                    0a:4a:a8:90:db:29:7c:e6:6e:81:ca:17:4a:db:b8:
                    01:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:23:72:8D:E0:A4:6E:3F:F9:13:77:09:71:47:5B:71:33:8F:57:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/513ccdf8-760b-39bc-a319-f0d261e9c5e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:3a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:0d:86:4b:fb:4b:5e:13:5c:3d:c5:09:97:0a:1b:93:70:a5:
         34:ad:e8:42:3e:f4:3e:17:6b:6e:92:82:cf:3a:f3:e6:20:16:
         c0:3d:28:f8:8a:a8:0f:86:ce:de:82:cd:fd:3d:74:9a:74:3a:
         a9:39:83:17:4f:f2:1c:2e:00:2a:6b:62:8f:24:87:aa:13:14:
         7d:f0:40:80:d6:f8:05:c6:f6:b5:41:52:4e:39:3c:a9:bb:0a:
         17:c6:c9:d3:e4:08:24:cc:09:88:65:08:8e:59:c9:80:5a:55:
         ec:52:54:2a:46:c2:c0:8f:ce:b9:8a:fd:6b:f9:19:7f:43:20:
         67:be:96:52:46:4c:da:82:38:f9:b5:01:e6:31:cf:52:1e:71:
         48:33:0b:a6:47:af:09:5f:ec:63:39:66:ec:74:ea:c1:81:bb:
         14:1b:d2:78:4f:fa:4b:33:be:8f:c1:9a:97:2f:39:e1:d0:bb:
         b8:5e:15:6d:33:ab:8e:a1:7b:27:27:2d:ac:3d:63:3c:aa:2c:
         30:73:81:c7:02:a1:fe:d0:54:75:46:0e:24:27:9e:66:a2:65:
         d5:76:7b:61:8a:1c:0d:a4:d4:88:22:72:5c:4b:6a:94:c5:9f:
         60:02:57:e9:8f:cc:41:bd:8a:57:dd:48:f9:29:29:53:8d:d8:
         84:86:56:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:25:47 2026 by rpki-client