Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b6fd459c-6aef-3d67-8f6a-90902133fb68.roa
File:                     b6fd459c-6aef-3d67-8f6a-90902133fb68.roa (raw, json)
Hash identifier:          s7TE1OhrQyyyQ+/HyhlaaKY/s/zQhybLFmyaoieh5Bg=
Subject key identifier:   6E:8E:5A:CB:08:5D:C9:B0:DF:1C:9B:A8:E5:09:68:EC:EE:60:D6:42
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CACF1D7CD7CAB36A34DC14800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b6fd459c-6aef-3d67-8f6a-90902133fb68.roa
Signing time:             Wed 28 Jan 2026 14:00:36 +0000
ROA not before:           Wed 28 Jan 2026 14:00:36 +0000
ROA not after:            Tue 28 Apr 2026 13:00:36 +0000
asID:                     31898
IP address blocks:        2603:c01a:a000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ac:f1:d7:cd:7c:ab:36:a3:4d:c1:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 28 14:00:36 2026 GMT
            Not After : Apr 28 13:00:36 2026 GMT
        Subject: CN=49cee1e7-933d-483a-ac84-9ac72ce8cedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:4a:16:9a:9f:ed:fd:85:88:db:ce:17:9c:
                    59:b3:fe:6d:b5:95:92:47:c0:65:c1:c8:a0:52:96:
                    b4:e6:e5:90:6c:c0:ac:b3:96:3a:b6:38:c7:94:5d:
                    b3:e9:76:29:12:24:ad:19:1d:3e:54:02:fb:65:7b:
                    a5:99:38:eb:db:6d:58:83:11:5c:78:3f:d4:1d:78:
                    ef:75:6e:56:80:db:c5:cf:0a:da:46:7b:28:17:48:
                    08:21:88:62:f3:4f:a2:16:21:24:43:e4:55:3e:ca:
                    d3:95:dd:30:14:6a:76:fc:b4:2f:00:17:9c:ad:26:
                    ad:5b:38:16:d1:e4:a9:dd:b7:1a:69:28:b3:8e:f2:
                    61:61:01:a1:52:b6:5c:0d:6f:f3:29:6b:29:51:70:
                    79:8e:aa:22:e8:55:e3:bc:89:73:89:0a:c0:37:21:
                    2f:e4:35:55:6e:cb:8c:f8:6a:6f:6a:49:de:ad:d0:
                    ed:54:db:22:f8:53:8d:cc:11:36:24:aa:7f:ad:41:
                    82:3a:22:77:b1:a1:0b:00:fb:a7:75:ce:f1:7b:11:
                    99:c7:00:ec:6e:b0:49:38:4e:cb:be:f4:21:9e:73:
                    c7:a9:05:b9:83:27:f4:3a:64:03:2e:1a:81:89:d7:
                    13:7a:ae:71:f5:d6:11:80:08:0e:9b:be:66:c1:18:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8E:5A:CB:08:5D:C9:B0:DF:1C:9B:A8:E5:09:68:EC:EE:60:D6:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b6fd459c-6aef-3d67-8f6a-90902133fb68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c01a:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:2a:cb:a7:17:c1:37:57:77:6f:ed:25:4d:b4:51:99:b5:eb:
         5d:bc:8a:71:f8:62:04:34:9e:a9:c0:59:8c:5f:98:0f:fb:d3:
         71:76:2c:87:ea:2f:f2:9f:5e:0e:97:34:5c:cd:da:92:bd:0b:
         13:f7:41:e1:dc:da:55:33:f5:64:56:1a:59:09:80:6a:09:57:
         b4:97:92:35:a2:91:7e:ab:ce:6c:34:e4:11:70:69:a0:91:aa:
         91:00:ea:30:66:9a:f1:89:8e:92:cf:32:11:99:b6:fe:ec:fb:
         15:5b:7b:6f:82:b8:31:48:fe:9f:32:5b:75:de:c8:a8:ab:0d:
         df:e2:70:b8:79:83:de:3c:1e:3c:aa:17:8b:f0:9b:8e:2c:c6:
         37:6e:6d:f7:78:40:0e:e9:22:42:b6:fc:bb:1f:37:be:5b:c4:
         84:90:1f:9f:fb:dd:20:b3:0b:49:30:09:9b:2a:39:aa:d0:dc:
         b0:50:66:f1:a4:11:c6:09:2a:35:59:29:8f:a3:e2:2d:26:64:
         66:15:4e:dc:2f:1b:0d:54:2f:8a:6b:31:ee:a3:0f:5d:b4:ae:
         4b:d0:6e:ad:46:6e:f7:a4:74:a1:14:2c:8e:bc:83:e6:01:e6:
         d0:b7:d1:7e:32:f4:63:9f:6d:a0:e5:53:84:46:54:8c:de:8c:
         c4:cf:03:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:40 2026 by rpki-client