Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbae2c6f-2ed6-3226-afda-39e3ff75af6b.roa
File:                     bbae2c6f-2ed6-3226-afda-39e3ff75af6b.roa (raw, json)
Hash identifier:          dMt8/RyBknx5TvHMyNit3tHCJ785rO1e2Yv7w5Xwobg=
Subject key identifier:   88:D7:1A:1B:E9:8C:BD:D5:10:F5:CA:DB:D2:0A:46:12:81:E0:4C:21
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CB981C53EB65AD6525B88ECA0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbae2c6f-2ed6-3226-afda-39e3ff75af6b.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        2603:c002:2100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:c5:3e:b6:5a:d6:52:5b:88:ec:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=d29bc58f-b1e7-44fe-a2d6-e46aaa6f7830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f0:c5:91:d5:da:1d:31:34:17:8e:e0:3b:2e:
                    74:c1:32:39:d9:ca:64:31:d7:26:65:eb:44:88:ec:
                    ca:55:ed:38:19:10:ec:25:c4:48:e6:8b:6e:c7:ea:
                    7a:3e:70:c3:cd:ea:da:6d:7a:0a:e8:9b:a6:63:7b:
                    f2:e2:09:39:3f:51:b2:fd:49:df:67:9b:96:44:a4:
                    3a:6d:53:67:68:c3:33:e4:52:29:25:60:a1:b1:86:
                    eb:50:f0:6c:4f:1f:d1:55:4a:67:12:b6:6d:cc:73:
                    22:79:fa:a3:e3:62:7d:2e:21:52:29:be:4c:d0:0d:
                    91:f1:ba:c6:66:7b:e0:c0:33:8c:dd:78:30:30:0b:
                    dc:fa:ce:a4:c8:e9:53:43:52:39:95:df:b8:5a:00:
                    1d:f0:9d:0b:96:01:ce:8c:b9:25:47:9c:5c:13:d7:
                    4e:f3:15:4c:b8:31:78:62:e2:9b:60:4c:50:9e:96:
                    90:6c:1a:28:f3:d7:de:d5:29:77:5f:7d:10:2b:49:
                    87:93:10:50:5e:a8:ab:d0:ab:65:a2:d4:1c:0a:f2:
                    ae:e8:8e:52:39:56:4b:2b:f1:e7:4a:0f:67:08:e6:
                    e3:4d:85:64:0a:64:77:35:8c:66:c0:61:11:64:fe:
                    58:df:be:a9:e8:57:5a:00:42:ac:fa:bb:21:f5:fc:
                    37:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D7:1A:1B:E9:8C:BD:D5:10:F5:CA:DB:D2:0A:46:12:81:E0:4C:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbae2c6f-2ed6-3226-afda-39e3ff75af6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:2100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f7:83:d0:ec:41:56:1d:4d:50:31:a7:d3:ee:8c:65:2e:be:
         b4:10:0c:a2:d1:c4:46:21:b1:e6:93:71:4b:1a:6c:e6:fc:bc:
         0a:81:1a:50:6c:e8:89:38:81:17:71:d8:54:3f:7d:0f:2d:c7:
         ad:d0:5c:c4:1c:aa:f2:ea:97:c0:65:2c:cc:32:6f:92:d1:30:
         ba:0d:cd:87:ce:50:4f:f4:fa:30:95:fd:5e:86:02:71:30:d2:
         c7:a6:30:40:55:ef:a6:10:17:0f:52:a3:89:84:d7:c9:ea:74:
         c9:77:7e:8c:9a:7f:ad:77:d5:b8:42:9d:c6:3f:da:e0:ae:e4:
         a5:f9:e1:89:a5:07:a2:e3:96:d9:6a:37:40:c1:69:81:ec:4e:
         6a:8c:1e:c0:50:43:d2:a0:96:89:ee:26:73:9f:c0:50:38:d1:
         36:d8:20:e6:32:2f:01:00:0f:54:41:16:b3:07:0e:7c:5b:58:
         80:df:26:07:b4:a3:ba:16:5f:75:9c:7a:59:1b:d2:2d:2f:16:
         d2:88:60:d7:f2:22:0a:98:97:d2:14:fd:b7:a6:a1:f4:ed:fa:
         9a:44:dc:74:60:28:1d:54:ea:83:7a:ae:84:7a:b1:54:5f:41:
         9b:47:1a:f5:35:34:3d:ef:a1:49:27:ae:53:fd:fe:85:cc:9e:
         42:1a:28:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:23 2026 by rpki-client