Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc23209a-21d7-3663-a97d-82cac1f90a45.roa
File:                     bc23209a-21d7-3663-a97d-82cac1f90a45.roa (raw, json)
Hash identifier:          wI0T4wfX/o5Cm79HVrXyTj9i1PlIxyPZMjK/GcAjKU8=
Subject key identifier:   23:C2:48:A6:21:8A:B1:94:3F:53:CF:BE:F6:C4:3C:2C:A5:B0:C4:A5
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CACF1C4CE47039AA0ADBBDB60
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc23209a-21d7-3663-a97d-82cac1f90a45.roa
Signing time:             Wed 28 Jan 2026 14:00:36 +0000
ROA not before:           Wed 28 Jan 2026 14:00:36 +0000
ROA not after:            Tue 28 Apr 2026 13:00:36 +0000
asID:                     31898
IP address blocks:        2603:c002:b900::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ac:f1:c4:ce:47:03:9a:a0:ad:bb:db:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 28 14:00:36 2026 GMT
            Not After : Apr 28 13:00:36 2026 GMT
        Subject: CN=f7fdd820-96fb-4de7-b941-58dac54f9f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:fa:cf:96:ad:f1:3b:5f:16:20:e4:59:32:
                    6e:34:b5:e4:62:d7:a2:e1:e2:16:58:6d:1c:7f:6e:
                    25:78:15:77:49:7d:9b:77:46:84:b5:33:95:4c:72:
                    5c:b9:f0:42:37:aa:7a:67:07:92:58:55:35:ce:d3:
                    53:84:83:e9:81:a4:b1:e2:03:9b:4b:73:0e:fa:7c:
                    f0:fa:67:7d:93:f7:e1:4b:66:2b:8f:e7:68:fe:7b:
                    c7:2e:1b:0a:79:93:a0:5a:3a:b3:a4:0d:86:2f:b7:
                    4c:f6:76:aa:da:ca:9e:96:76:8d:19:08:2a:88:29:
                    b8:54:4a:d0:9f:d0:b5:b0:8c:5e:fe:07:b0:de:93:
                    46:a9:98:f1:04:d4:dd:ae:5d:7a:27:f6:10:5e:f2:
                    ea:7c:b2:d1:19:71:4a:31:2e:cf:3b:be:f4:80:0e:
                    24:3d:b6:73:21:0b:61:c2:f3:c5:47:20:e0:ff:08:
                    d5:51:ef:2a:e3:9a:cf:38:e2:6a:2e:75:6b:bc:52:
                    ef:04:eb:c7:04:d6:8f:e9:39:53:f4:9c:8c:ed:a1:
                    ca:72:7d:60:42:48:c9:0f:df:8c:79:0c:02:38:a0:
                    62:73:fa:72:48:a4:3c:2e:35:f2:74:fc:8c:1a:01:
                    5b:6f:70:92:07:2c:3b:0f:e6:a5:c0:9b:b4:50:a4:
                    a0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C2:48:A6:21:8A:B1:94:3F:53:CF:BE:F6:C4:3C:2C:A5:B0:C4:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc23209a-21d7-3663-a97d-82cac1f90a45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:b900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:67:ba:1d:32:35:55:a4:f9:cd:52:30:1e:8e:1d:67:d2:3e:
         4d:7d:70:bf:bb:a6:63:e3:b9:85:97:04:4c:61:05:3a:e2:23:
         ce:6d:22:7f:70:4e:96:94:c4:3c:75:a5:7d:99:34:c3:42:62:
         6e:de:e2:b5:6b:7c:fc:51:1d:26:e4:3e:52:12:fb:bc:c0:2a:
         a9:cb:14:52:f7:71:fd:a6:45:f7:c7:ae:ee:90:38:3d:aa:f1:
         99:67:cf:22:0a:f9:a6:33:02:9d:df:e0:6b:df:a6:59:cf:2e:
         51:2f:35:74:17:cd:a4:d6:7a:39:9b:6a:e3:ed:df:90:5e:1b:
         ee:7e:09:01:e7:c8:ff:b5:8b:d0:87:3e:e8:11:85:fb:2c:09:
         71:ac:ec:de:fa:1c:e8:f3:6e:0d:a2:ae:c4:e0:a3:ea:c6:8f:
         64:f4:38:a8:72:58:66:9c:0f:99:52:63:d8:10:28:94:a6:ca:
         55:7d:f8:9e:3d:c7:9a:13:40:38:16:c9:74:5b:fc:57:ea:32:
         d9:bf:7c:cd:8a:8d:7e:a9:ee:2c:5b:8d:52:fd:ed:26:23:9b:
         35:d3:f4:e5:c0:70:44:aa:43:54:86:b4:e9:52:78:09:23:24:
         c0:5a:64:b2:74:09:57:05:e4:26:cb:fb:94:3d:70:9f:69:6b:
         de:e2:a0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:23 2026 by rpki-client