Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a54a7ce-3650-371a-9885-b9cbe7f4994d.roa
File:                     9a54a7ce-3650-371a-9885-b9cbe7f4994d.roa (raw, json)
Hash identifier:          5fyxVGvdbon2SXgNzcT/27SN968GoHu+Y7eF169CtTc=
Subject key identifier:   DE:18:9E:AA:08:10:80:74:29:14:E0:02:BA:66:4A:29:A1:32:2C:D2
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBDB1DB368A4AC3F4B95253D0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a54a7ce-3650-371a-9885-b9cbe7f4994d.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        2603:c002:a910::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:db:36:8a:4a:c3:f4:b9:52:53:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=ebbcecbf-93f2-4c01-a95c-f08716e29800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:c0:3c:2d:cf:99:ab:73:af:8c:df:b4:bd:
                    9e:fd:98:aa:21:14:77:df:a0:77:ea:40:2a:36:b5:
                    eb:c3:8f:b9:0d:f5:3e:4b:1a:2a:ca:08:9a:dc:a8:
                    bc:d9:62:a4:5d:65:61:7a:2b:c3:ea:f6:83:83:ce:
                    b1:9d:e2:1f:9e:47:4c:69:76:e4:80:ca:61:05:0f:
                    1d:34:db:83:c8:9c:c9:35:cf:f1:a8:e9:60:84:24:
                    6a:20:17:90:7f:5a:3c:74:65:4d:1c:dd:c0:f6:5c:
                    07:ed:6c:0e:1b:cc:43:be:86:2b:4f:6b:ec:9d:49:
                    d2:31:95:ba:7f:52:52:8a:d7:97:e8:fc:b8:bf:90:
                    59:2f:d9:84:aa:08:14:5c:36:61:58:4a:b6:37:64:
                    2c:89:fc:8d:2b:f3:a9:fc:4c:1f:26:5b:e2:d3:7a:
                    88:12:2f:89:57:ef:70:31:77:38:22:9c:5f:7b:ee:
                    eb:d8:7e:8d:d9:d0:45:c7:b6:37:08:aa:6a:8f:9c:
                    54:ac:10:1a:d1:e6:97:37:22:f1:d3:e1:7c:5d:f0:
                    7b:e9:bb:1b:1c:8e:de:ac:49:b5:ac:a6:81:4d:33:
                    3d:27:fd:86:83:77:d0:61:b7:18:b1:43:86:e5:d3:
                    55:87:d4:d9:d9:89:9a:40:c4:fc:72:8c:12:e4:24:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:18:9E:AA:08:10:80:74:29:14:E0:02:BA:66:4A:29:A1:32:2C:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a54a7ce-3650-371a-9885-b9cbe7f4994d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:a910::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e1:f5:a4:f6:08:65:c7:4a:66:26:42:dc:0c:f6:b0:67:80:
         55:15:13:df:44:08:e5:6d:16:d2:35:15:bb:d8:5b:73:4f:46:
         0b:fd:de:fa:a9:ff:ab:a9:93:44:7c:04:83:28:73:99:1e:dc:
         52:a3:bc:75:13:22:9e:1c:22:46:1c:d1:76:e4:1c:59:d1:dc:
         d6:64:78:01:24:e9:68:38:b2:21:82:a1:70:72:75:d8:63:28:
         20:70:e9:ec:bd:67:fc:a5:34:5e:55:09:40:9f:7a:a2:64:5f:
         de:48:c8:8f:6d:ae:00:30:33:54:34:3e:9e:41:e1:b3:de:3b:
         4a:e0:23:c9:83:bf:9a:72:e8:ef:4d:05:15:d5:69:a1:19:c6:
         c2:e8:22:d4:68:98:71:84:7e:7c:dc:d8:26:f9:9f:d0:5d:bb:
         27:60:01:24:f1:9a:67:cf:76:a8:4a:72:c4:5b:57:8e:cf:6d:
         a2:95:a5:aa:91:ce:11:46:00:5b:a9:09:df:54:60:49:8e:cf:
         c5:c0:86:d1:dd:f6:cf:27:2b:7a:7f:00:6f:0c:8b:b9:40:1e:
         c6:66:d2:79:35:cf:72:a5:0b:26:3c:a4:f9:2e:4c:45:98:4c:
         72:3a:ec:92:a4:d4:3d:ba:91:3a:ad:ba:ed:ba:65:1c:6a:9d:
         4e:9b:f3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:46 2026 by rpki-client