Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ac460419-87f3-31b4-a3c7-936ecac49b46.roa
File:                     ac460419-87f3-31b4-a3c7-936ecac49b46.roa (raw, json)
Hash identifier:          E8pq9Yr4Cdb6xrQpIkIA1VV15GzBN2qXZRdfl1sbaXw=
Subject key identifier:   65:2D:7B:C8:1A:C2:53:A1:DE:4F:B7:7D:E2:0E:E8:A8:11:B9:1C:27
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBDB1EBDF4495F5D9D001E500
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ac460419-87f3-31b4-a3c7-936ecac49b46.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        2603:c019:8000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:eb:df:44:95:f5:d9:d0:01:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=913bdb60-87aa-4b2b-be03-a43147b54bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:27:48:0f:c5:1f:18:84:d8:d6:bd:39:75:2c:
                    a3:ae:9a:bc:c3:26:64:58:f3:88:15:46:55:9f:f8:
                    71:4b:5f:69:17:bf:21:b4:59:c5:79:fd:44:df:37:
                    ff:04:89:41:b9:78:44:10:51:72:bd:48:d4:24:db:
                    00:47:b8:ab:de:63:16:fe:33:e3:29:f9:40:a4:de:
                    3e:86:52:3a:68:8a:de:83:7d:8a:ca:4e:7e:5f:fa:
                    e7:1a:6c:ac:00:df:22:41:3e:f4:ff:29:b0:d4:ed:
                    a4:03:9b:73:d5:85:a6:5d:30:32:44:77:18:c9:ac:
                    ec:df:ee:69:38:cc:47:6b:f7:d7:3b:48:28:b7:2b:
                    e6:b6:91:e5:1f:0e:16:4f:3a:5b:b2:15:3d:dc:33:
                    aa:91:c1:a6:1c:41:b4:90:ee:d4:3a:79:e1:65:4e:
                    19:51:ad:18:2e:e4:bc:d7:aa:12:34:1b:a3:6a:cf:
                    58:7a:8b:9f:52:da:e2:1b:d1:a6:09:94:81:e2:de:
                    13:a6:5b:7a:a6:e6:36:1e:92:37:9c:73:7e:93:9c:
                    be:e6:e8:37:19:67:ef:dd:8d:e2:3b:70:fd:68:1a:
                    76:2e:26:15:fa:51:5b:65:ca:f7:55:75:75:c5:96:
                    2f:69:d1:4e:68:61:5b:39:65:db:ab:7f:8b:88:df:
                    5e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2D:7B:C8:1A:C2:53:A1:DE:4F:B7:7D:E2:0E:E8:A8:11:B9:1C:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ac460419-87f3-31b4-a3c7-936ecac49b46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c019:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:5f:4a:60:54:29:96:16:93:22:ff:ea:93:69:db:bd:54:f0:
         9d:66:6d:68:1e:62:77:3e:7a:e8:69:c6:72:dd:a1:b7:e9:e9:
         1c:e4:b7:18:30:b4:b9:3b:d7:fe:3f:09:96:cc:ea:12:31:db:
         32:90:0a:2e:c3:bd:69:17:f1:79:19:fb:f0:d6:78:13:cb:20:
         fd:28:50:e2:f4:12:1e:8a:a1:b9:2b:40:77:25:3f:96:19:e9:
         5c:82:17:60:48:e8:07:d6:87:6a:32:91:55:5a:8c:1a:f6:90:
         f4:86:12:c3:da:98:e8:8e:30:63:5b:93:cd:07:71:68:17:d5:
         80:0a:9b:89:dd:ec:77:2e:f0:e6:a5:b7:8f:6f:50:ab:96:c4:
         5d:5a:f9:e8:ea:91:63:c1:0f:1d:4a:42:e8:a8:54:bc:55:09:
         81:8d:60:c1:e1:2c:ab:e4:da:3d:82:aa:a1:a1:d1:a0:1f:df:
         a0:fc:0d:65:1a:48:9c:d4:c3:2c:dd:52:eb:93:a4:bd:12:d8:
         4c:f9:1a:4a:ed:16:53:01:c6:5b:18:4b:ad:8e:ea:ba:9b:dd:
         5c:a8:c1:48:5c:9e:c0:ab:18:ce:fe:f4:05:2d:49:af:ed:cf:
         f5:a2:52:6a:e3:ce:65:de:b1:73:d1:d9:62:50:83:bd:06:d6:
         cc:b6:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:21 2026 by rpki-client