Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64aece37-0f65-3acf-a89c-08404c04574c.roa
File:                     64aece37-0f65-3acf-a89c-08404c04574c.roa (raw, json)
Hash identifier:          SDugrmChTRxnWJx0BnLuUIklX5Cx52fk1vaTVtD4poE=
Subject key identifier:   C7:B4:B9:47:78:A9:50:82:5E:47:43:DC:69:1E:77:5C:26:C1:96:98
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CA5F74C988393647109D25A80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64aece37-0f65-3acf-a89c-08404c04574c.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        2603:c027:8000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:4c:98:83:93:64:71:09:d2:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=20a3ae76-307d-46d8-9f93-1be62d33239b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ac:6d:48:32:bc:d6:1a:ae:e7:2c:c3:cc:2a:
                    cc:29:e6:f4:db:88:8e:15:55:d9:a5:ab:42:1b:c1:
                    42:77:ea:ad:fe:a8:eb:0f:a2:4a:ab:93:e6:ed:89:
                    97:90:03:82:ff:cd:2b:27:99:13:85:5e:e1:09:75:
                    56:89:79:2b:47:52:6c:04:96:a4:a9:92:c3:39:c9:
                    01:06:7b:04:8b:83:cd:0a:59:64:b5:e3:16:40:dd:
                    e7:ba:fb:24:d5:77:c8:73:53:6d:07:42:c1:63:42:
                    ea:69:fb:6a:fd:85:5a:0e:7e:18:d8:79:81:22:ad:
                    37:a3:b6:a9:4d:7f:5b:52:bb:a5:fc:bb:be:00:eb:
                    89:cb:aa:c6:c4:9d:46:fc:1a:5a:ec:79:da:07:b2:
                    ab:93:9f:40:e3:14:46:ef:b1:83:a8:56:f5:1f:aa:
                    ba:67:9b:57:d9:23:49:18:5c:59:4e:a7:9b:a8:5c:
                    82:e8:6b:03:a4:52:bf:34:6a:a0:3d:76:11:77:87:
                    b1:93:52:89:5f:60:f5:52:c4:d7:45:b4:09:3c:0c:
                    49:d5:f8:cc:bd:f6:6f:f8:7b:1a:86:95:99:bb:9f:
                    29:5a:cd:54:a1:85:ff:1c:69:90:f8:0a:04:8d:ba:
                    6f:79:cc:e8:eb:76:c7:75:07:5b:90:00:a4:88:51:
                    bd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B4:B9:47:78:A9:50:82:5E:47:43:DC:69:1E:77:5C:26:C1:96:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64aece37-0f65-3acf-a89c-08404c04574c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c027:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d4:4b:56:71:70:ae:7c:fe:d1:52:3e:0a:9b:3f:6b:e4:51:
         ab:3c:96:dc:65:ea:78:54:44:e6:81:8b:fd:a2:0a:82:68:48:
         8e:4b:b7:56:33:ad:8d:69:21:3a:bc:9d:1a:92:8b:34:36:d9:
         a9:8f:4a:6b:9e:23:16:80:d6:7a:42:e0:ef:94:26:2f:af:60:
         a9:b1:be:72:96:ec:11:f3:8d:42:16:c6:35:40:dd:10:01:c6:
         01:1b:d5:a4:a3:56:72:ea:25:55:ac:b6:29:87:21:2f:ef:02:
         3d:d7:e1:f2:6e:f6:96:ae:43:3c:76:81:f2:8c:4a:79:a8:ab:
         4a:23:04:03:3e:e6:36:73:5f:f7:d7:29:07:66:c8:39:b3:c3:
         a1:8e:c3:89:b0:d4:ba:c6:e0:77:0e:6c:20:9a:e0:4f:e1:0e:
         11:9c:21:e7:b7:13:75:cf:1a:97:53:ca:6a:3f:cc:06:de:e1:
         da:2f:aa:0b:ae:84:90:1b:fb:a1:fc:66:b2:ab:ec:2b:24:8d:
         1a:8f:15:70:8b:27:00:86:20:d9:02:f7:e7:d1:cb:13:05:a5:
         79:da:1e:78:69:11:de:75:d1:78:64:53:e7:5e:50:2c:09:ef:
         c0:17:dc:2f:1d:32:7b:4f:bb:7e:26:51:b9:a7:10:f2:c9:bd:
         17:1a:80:b6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyl90yYg5NkcQnSWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk
MjBhM2FlNzYtMzA3ZC00NmQ4LTlmOTMtMWJlNjJkMzMyMzliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKxtSDK81hqu5yzDzCrMKeb024iOFVXZpatC
G8FCd+qt/qjrD6JKq5Pm7YmXkAOC/80rJ5kThV7hCXVWiXkrR1JsBJakqZLDOckB
BnsEi4PNCllkteMWQN3nuvsk1XfIc1NtB0LBY0Lqaftq/YVaDn4Y2HmBIq03o7ap
TX9bUrul/Lu+AOuJy6rGxJ1G/Bpa7HnaB7Krk59A4xRG77GDqFb1H6q6Z5tX2SNJ
GFxZTqebqFyC6GsDpFK/NGqgPXYRd4exk1KJX2D1UsTXRbQJPAxJ1fjMvfZv+Hsa
hpWZu58pWs1UoYX/HGmQ+AoEjbpveczo63bHdQdbkACkiFG9tQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMe0uUd4qVCCXkdD3Gked1wmwZaYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjRhZWNlMzctMGY2NS0z
YWNmLWE4OWMtMDg0MDRjMDQ1NzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAJ4Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWtRLVnFwrnz+0VI+Cps/a+RRqzyW3GXqeFRE5oGL/aIKgmhIjku3
VjOtjWkhOrydGpKLNDbZqY9Ka54jFoDWekLg75QmL69gqbG+cpbsEfONQhbGNUDd
EAHGARvVpKNWcuolVay2KYchL+8CPdfh8m72lq5DPHaB8oxKeairSiMEAz7mNnNf
99cpB2bIObPDoY7DibDUusbgdw5sIJrgT+EOEZwh57cTdc8al1PKaj/MBt7h2i+q
C66EkBv7ofxmsqvsKySNGo8VcIsnAIYg2QL359HLEwWledoeeGkR3nXReGRT515Q
LAnvwBfcLx0ye0+7fiZRuacQ8sm9FxqAtg==
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:07 2026 by rpki-client