Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/91eb72de-a055-3c5a-8b92-71cfa5fdd45d.roa
File:                     91eb72de-a055-3c5a-8b92-71cfa5fdd45d.roa (raw, json)
Hash identifier:          Eh7o8GKPqNY+2nlEOVRpD/ZErw4xodIKZ5rJOpgV8I8=
Subject key identifier:   70:1F:36:3A:B5:28:00:A8:AC:72:6B:75:B3:99:2E:D0:EB:12:13:1A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAA273070411096FBAC679D40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/91eb72de-a055-3c5a-8b92-71cfa5fdd45d.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     31898
IP address blocks:        2603:c026:c000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:30:70:41:10:96:fb:ac:67:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=387ff278-21cb-4199-8d06-49026f8062fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:de:d2:c8:11:dc:9c:9a:19:2c:9f:e3:c0:10:
                    f5:99:8a:45:9c:cb:cd:f4:57:96:dc:52:29:ce:e8:
                    75:80:38:60:10:c3:7f:f7:67:9a:18:31:dd:9a:9b:
                    8c:22:e9:93:9a:25:a1:76:de:6f:f3:a7:3b:8b:f5:
                    a4:78:f7:7a:d5:e4:96:c5:1f:6c:b1:9d:c1:c4:e5:
                    d2:55:fb:f6:98:1c:11:dd:85:55:e7:bc:d6:9b:14:
                    14:f7:02:23:85:7c:c4:95:6d:ae:13:45:04:9b:97:
                    8d:c9:36:97:30:10:9c:fc:98:37:3d:49:80:1b:93:
                    53:e5:a4:08:1f:08:16:82:ec:22:7a:3a:b8:27:d7:
                    e5:88:5f:5d:72:4c:9a:33:9b:d5:81:3b:38:06:50:
                    8a:e6:d4:b4:66:2b:d5:17:14:86:1a:8f:8c:85:3f:
                    86:9e:66:46:5b:bc:b0:16:3e:6b:9f:cf:db:f2:20:
                    34:af:6f:77:fb:cf:30:99:83:eb:f3:d4:a9:8e:7e:
                    09:4d:5d:67:ec:4d:e1:b8:46:98:89:86:94:5d:bc:
                    75:98:e4:cf:af:6e:3f:20:76:86:f1:a9:30:a2:99:
                    69:b5:e4:34:f7:ce:9c:10:4c:b0:a5:28:c3:05:72:
                    20:a7:13:9e:b9:86:be:93:75:93:14:a0:b7:1d:25:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1F:36:3A:B5:28:00:A8:AC:72:6B:75:B3:99:2E:D0:EB:12:13:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/91eb72de-a055-3c5a-8b92-71cfa5fdd45d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c026:c000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:dd:ad:32:ac:27:ef:50:73:c0:d9:93:02:00:67:ad:61:a0:
         2a:07:42:21:fe:cc:a8:23:29:5c:fd:2e:69:1f:de:52:9c:17:
         94:8a:1e:fb:95:4a:b7:b7:4b:fd:16:e2:1c:97:25:fa:3c:9f:
         8e:ee:73:23:41:53:3c:18:b4:aa:7a:24:94:93:14:66:a4:59:
         74:59:0c:48:a4:24:fc:86:bd:fa:0a:2e:99:b8:ff:cd:59:ea:
         a5:15:08:95:e8:d1:30:7b:c6:2c:f3:61:48:1b:c2:60:df:c7:
         77:2c:31:c5:25:18:78:8b:95:56:75:79:7e:50:ff:12:4d:98:
         02:ab:5a:39:eb:03:fc:d9:0d:f0:10:d9:d4:9a:d5:3e:31:8d:
         9a:4f:6f:76:86:7f:51:5d:62:99:d2:de:17:0d:91:99:cf:0b:
         3e:58:96:63:06:6e:e0:f3:40:d4:99:a2:0b:a2:90:53:10:63:
         a0:99:ba:b0:49:c2:5f:a6:c8:8c:cf:81:48:1e:5d:11:af:ac:
         d3:bb:f2:fd:f5:96:9d:11:44:ba:5f:21:53:1f:62:2f:96:07:
         5e:72:55:6a:d0:56:c9:21:8b:34:27:1f:18:60:8e:c7:5b:1c:
         f6:5e:51:14:bc:3d:32:45:a1:51:13:3a:be:f8:93:b8:e2:10:
         79:63:a7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:50 2026 by rpki-client