Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c402bec5-1976-385c-b40e-fe001e64520b.roa
File:                     c402bec5-1976-385c-b40e-fe001e64520b.roa (raw, json)
Hash identifier:          gOhmeQA2xpos7xL9MJot/Sby+nZm83qrhhd8USEN4HY=
Subject key identifier:   83:DA:E9:E3:94:53:23:5C:6E:32:09:2C:C0:3E:AA:EE:61:7A:FC:43
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBF172D1F2677D1965A2E45C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c402bec5-1976-385c-b40e-fe001e64520b.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     31898
IP address blocks:        2600:2000:2250::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:2d:1f:26:77:d1:96:5a:2e:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=3fecd2eb-763b-42dd-a95f-1c198930f240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:17:da:5f:19:1f:f0:da:19:47:32:31:38:d0:
                    27:11:fa:b6:42:1c:4c:c2:6a:76:6a:83:6c:e5:4e:
                    aa:a5:dc:8f:99:a4:15:47:71:4e:25:19:62:d1:23:
                    87:c0:b0:a9:e9:d0:2d:af:2e:c2:7e:33:be:87:d4:
                    0b:21:0c:8f:48:89:ab:3a:90:f2:1e:30:ff:30:6f:
                    2c:de:0c:b8:ac:17:7b:ce:eb:1a:16:58:8c:0d:d8:
                    8e:2a:f0:b1:9e:81:95:c3:0b:ac:ba:7d:89:f0:77:
                    b8:73:ba:03:82:a6:de:6e:97:fc:62:c9:91:58:c1:
                    b1:41:98:a5:29:90:fc:45:1d:d2:0b:13:82:74:0b:
                    4f:10:85:5b:89:f3:6d:ff:c3:e0:f9:09:8c:79:0e:
                    0c:85:d8:fa:4a:71:17:42:62:30:e6:68:0c:96:3e:
                    dc:fb:be:56:c3:ff:27:58:98:34:d5:85:17:4f:67:
                    55:f6:89:a3:5c:4d:0e:27:13:08:35:12:45:6e:34:
                    2c:75:63:d3:f3:cd:91:70:d5:dc:9c:d9:48:36:b0:
                    01:ff:d5:9c:f3:44:b6:0e:23:fd:07:b8:58:32:ee:
                    62:37:99:25:93:22:b1:bc:b9:a9:fb:d3:72:df:1e:
                    4f:11:d4:71:7f:59:de:5a:62:af:90:c3:68:b3:1f:
                    16:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DA:E9:E3:94:53:23:5C:6E:32:09:2C:C0:3E:AA:EE:61:7A:FC:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c402bec5-1976-385c-b40e-fe001e64520b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2000:2250::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4d:e0:53:ba:e5:7b:ed:a5:38:55:5c:ef:10:f2:0b:73:a7:
         e2:5f:4c:aa:d8:00:9c:a4:ca:01:d2:5f:ae:d4:bd:f1:8f:37:
         1f:24:16:fe:31:27:13:c1:b6:51:80:d0:bd:c8:ae:eb:6e:d7:
         f0:3c:8f:05:20:60:ff:49:03:d1:57:fe:ff:75:bb:5d:ee:46:
         1c:08:34:fe:b3:2a:1f:e3:44:22:99:60:38:be:66:aa:2d:6c:
         c5:57:a8:55:47:80:21:68:dd:cc:ae:5d:7b:83:b3:fa:45:dc:
         9f:45:5f:34:ee:ee:12:db:a4:f5:6c:d1:77:20:7f:3a:89:06:
         a0:43:6a:9d:70:e6:f4:35:6f:e3:bb:5d:c4:49:15:a1:cd:2f:
         21:24:8f:6f:92:58:db:c7:f3:c4:66:f0:ed:e9:db:cf:7f:d1:
         6c:c2:cb:d2:58:09:7f:5b:59:8d:9b:f5:ec:ea:7c:d9:b2:f5:
         c0:f5:c3:ea:d9:1e:e8:f7:6c:98:02:f3:2b:1d:24:36:e0:53:
         49:63:5b:9b:f7:57:7f:47:fa:3a:98:3c:e3:6d:a1:dc:6c:8c:
         5b:f5:3c:56:74:4c:30:8e:c6:f5:f1:ee:e8:69:46:ba:d4:57:
         b0:e9:e0:04:54:3b:25:f3:ac:a5:e0:4f:39:8a:e0:0d:e6:0b:
         38:1c:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 05:06:34 2026 by rpki-client