Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6455d2c0-9f8b-33be-8c30-64023177faf7.roa
File:                     6455d2c0-9f8b-33be-8c30-64023177faf7.roa (raw, json)
Hash identifier:          1uadQKpJA+reHndq3YGdf6EuF9fKOShhHxR9/yYZ1ck=
Subject key identifier:   26:67:2A:71:D0:D8:3E:FD:05:8B:99:EC:85:8F:EC:5E:2C:B2:29:E7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CA5F74672CC1E7DDA48D9BE00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6455d2c0-9f8b-33be-8c30-64023177faf7.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        2603:c01a::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:46:72:cc:1e:7d:da:48:d9:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=5e81b8e7-4e5d-4ec2-ab12-9713685150db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:c6:a8:fb:ef:2b:19:fb:f0:c6:b2:a2:bc:
                    cb:b5:6b:52:2c:7e:2a:94:47:57:a8:55:8b:14:e7:
                    ad:00:53:42:ff:23:4f:9f:3d:59:a8:a5:5c:7b:db:
                    58:48:72:0b:16:d3:da:bf:53:9e:45:88:c3:5a:fa:
                    70:11:c9:80:42:51:0d:c0:bd:9a:1b:fc:94:2e:e3:
                    c8:b7:c0:b0:a9:5a:93:00:1c:bb:af:d9:3d:ba:19:
                    b3:90:ba:ee:29:b9:54:68:d4:0c:52:e1:35:e4:0f:
                    b7:93:aa:2a:36:97:d1:09:16:20:c5:fc:d9:31:f0:
                    aa:6d:85:e1:ff:42:22:60:33:a7:ea:fe:62:56:d3:
                    7a:05:6f:d6:cd:46:8e:08:aa:64:6b:90:b3:02:e1:
                    c8:21:be:1c:4d:e9:d9:2a:d6:f2:59:8b:9f:fa:21:
                    9b:fd:43:11:b3:b7:bb:b8:f4:12:57:48:f2:93:5a:
                    4b:c5:10:51:be:37:ec:64:3a:33:29:b5:67:45:68:
                    66:47:17:56:a5:2b:e9:00:71:4d:0d:7a:06:98:40:
                    a3:7d:3d:1b:78:30:c9:b1:fe:e7:97:89:5e:4f:6d:
                    bf:29:80:8f:d4:2d:14:b1:4d:97:16:93:9a:8c:91:
                    94:13:f5:dc:83:e9:bc:72:93:28:46:e1:7e:e8:11:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:67:2A:71:D0:D8:3E:FD:05:8B:99:EC:85:8F:EC:5E:2C:B2:29:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6455d2c0-9f8b-33be-8c30-64023177faf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c01a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:10:06:dc:24:38:b9:0b:d4:9a:36:67:99:ff:e9:18:5c:94:
         d2:cd:7b:62:87:f6:e8:68:a8:89:7e:57:a4:19:48:68:cf:9d:
         a2:95:f4:d4:cb:1a:4f:2c:5f:7d:8e:73:e9:0e:c6:cc:b4:85:
         f8:f5:aa:e2:68:8c:88:c9:40:b6:7e:a1:e2:b9:26:81:d0:ff:
         07:88:25:a5:34:bc:48:3c:fc:ac:6c:20:07:a0:20:39:4b:f0:
         10:a0:93:5a:68:c7:11:33:c4:82:d2:67:ae:70:81:55:d0:78:
         54:84:37:c4:79:26:55:d5:92:01:81:6c:9b:00:af:26:a0:3a:
         85:1a:fd:e8:a0:71:fc:79:6b:fe:56:d3:27:31:49:b2:9e:50:
         f6:44:07:25:81:a5:ee:f4:b2:91:6e:0c:14:26:28:08:bd:2a:
         84:6b:4c:35:12:e5:63:59:c9:2c:bb:45:c2:42:88:92:52:7f:
         b5:5c:b5:0e:ca:69:e9:80:2a:06:72:7a:b1:f3:3e:6c:04:0d:
         09:56:ee:b9:74:a1:83:6b:da:e3:18:32:ae:56:d6:d2:e9:7a:
         f8:74:8a:d0:75:51:9d:31:fc:e7:cf:58:68:09:8f:2e:88:26:
         a2:ee:e9:dc:16:f3:02:75:f7:9b:d5:d6:f0:f4:58:9e:df:ca:
         18:19:bd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:31:51 2026 by rpki-client