Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e170d1c-6b37-3ccf-ac1c-0e482dd1479a.roa
File:                     5e170d1c-6b37-3ccf-ac1c-0e482dd1479a.roa (raw, json)
Hash identifier:          yWTrrJ7fHtcNRHNaGb1WBlkpDanugE8F/Gp7qiAE7gM=
Subject key identifier:   3E:44:F2:3C:34:64:21:70:75:E8:83:B0:1C:40:16:02:B9:D1:09:5E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CA5F74F84137C2B7500F78400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e170d1c-6b37-3ccf-ac1c-0e482dd1479a.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        2603:c000:600::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:4f:84:13:7c:2b:75:00:f7:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=37d21ac4-83cd-48ac-8b4e-310028a2b32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d9:6b:52:86:a1:50:2c:74:99:de:4d:2a:a4:
                    2b:6a:59:5a:db:0d:7b:65:c3:1e:eb:94:19:90:fb:
                    b6:7a:dc:4b:e5:55:29:51:48:fb:3f:4a:76:7d:dc:
                    c4:c7:c1:7d:6d:35:53:7f:99:51:99:bd:1f:a6:04:
                    69:89:87:5a:1d:1a:ba:3b:72:8b:bd:62:99:71:86:
                    17:dd:ca:48:65:f9:1a:0c:7b:cf:16:ae:00:89:2a:
                    97:79:85:11:5e:29:92:73:84:27:b4:23:1d:9b:2f:
                    c2:b1:fa:23:48:15:19:4e:69:13:a8:b7:4a:0f:aa:
                    83:f2:08:c8:0c:ee:ab:45:ca:6f:92:b7:fd:e1:4a:
                    7c:d9:17:5e:a4:76:bc:d1:c9:af:0a:dd:8d:52:e2:
                    4b:76:0e:64:15:fa:c0:70:10:d0:48:1f:5c:c1:bd:
                    24:4a:8c:80:fe:8b:c1:80:0f:b9:41:4b:db:4d:db:
                    0b:af:26:ab:a9:19:78:ca:a5:98:10:10:4d:e1:99:
                    68:50:c6:8f:0f:21:f2:c6:65:db:3f:91:66:c3:c5:
                    42:37:de:84:79:b0:44:b3:10:e5:9b:78:99:d6:65:
                    f6:49:3f:95:e8:2f:b8:d7:1a:9f:9c:44:c1:ed:25:
                    d2:bc:0b:4d:b3:5c:e8:5b:1f:94:17:6b:22:f3:3e:
                    f0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:44:F2:3C:34:64:21:70:75:E8:83:B0:1C:40:16:02:B9:D1:09:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e170d1c-6b37-3ccf-ac1c-0e482dd1479a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c1:d3:07:3d:30:cd:33:83:62:17:58:dc:42:80:99:44:72:
         eb:a7:57:9a:92:7e:2c:87:68:11:f5:32:2a:fc:29:fc:ed:1e:
         f2:79:02:cc:83:3c:03:0a:0e:db:60:d0:af:8a:8f:81:4f:18:
         b3:e9:5e:61:1f:6e:dc:6b:ab:41:8f:ec:a6:0a:f4:67:e3:b8:
         36:bd:9a:34:37:91:72:04:a2:a7:9f:72:40:5a:31:15:dc:c1:
         5d:06:c3:c4:1c:da:0e:d4:16:a0:3c:fc:09:53:e0:13:bf:61:
         48:cf:24:3f:ce:a9:58:91:06:9c:0e:7b:b5:0c:43:f6:2e:12:
         0c:09:2a:62:7d:3c:3b:b9:71:0b:45:d0:c9:f0:3f:16:dd:ee:
         29:e2:c2:9b:27:fe:e2:90:41:0c:50:bd:64:e6:5e:13:43:d4:
         b4:6e:2e:c0:47:54:96:bf:bf:e7:20:48:af:9a:40:82:ce:5a:
         97:42:16:77:81:e4:55:b1:5c:46:c2:ae:ca:76:74:4d:dd:79:
         c7:26:10:70:6e:42:6b:7c:f5:77:19:d4:5c:af:c8:9e:40:e1:
         5f:4f:6a:32:b9:21:01:40:32:f1:d1:4c:c7:cb:44:d3:0e:00:
         4a:78:d9:1d:a8:16:64:04:f2:02:fa:e6:5f:00:dc:f3:58:fc:
         db:2f:82:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:07 2026 by rpki-client