Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa
File:                     c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa (raw, json)
Hash identifier:          qyMdYBOsdNPZp/63MGrUcLe5AY6cGTAYa+kDWlcIkAk=
Subject key identifier:   A0:0C:42:FD:AD:8F:98:57:DC:FD:4D:05:73:75:7B:0B:CA:35:16:D3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAE5E811CB773B3BB25DB3100
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        2603:c000:2300::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:81:1c:b7:73:b3:bb:25:db:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=d64d9355-29e5-4b2d-9300-8f0d8b4e37ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:60:69:00:fc:38:ae:59:a7:e1:bf:55:7e:
                    a9:63:24:d9:a2:8f:d0:31:6d:1c:33:35:11:66:f7:
                    00:9a:9f:4b:8c:2f:5c:77:31:94:f9:15:e8:5a:d4:
                    89:e8:fa:9b:ea:20:33:75:b1:a4:10:14:ff:26:c0:
                    a3:5a:40:1d:33:24:af:cc:74:76:1e:0b:de:4e:26:
                    c0:dc:40:95:33:7e:5a:1d:1d:d7:da:1d:7f:31:c0:
                    78:9f:31:d7:2c:fb:2f:16:e5:7c:d0:a7:00:ed:7b:
                    1b:a7:c9:28:03:ec:52:46:62:0c:90:13:c3:09:12:
                    8a:09:2b:ec:04:e6:81:72:ad:f5:de:f9:63:83:6c:
                    ab:42:2f:96:f2:49:ab:a0:11:68:72:e6:16:b2:03:
                    d1:3c:6b:be:1c:6d:50:5e:f0:80:cd:80:a0:45:e7:
                    66:a1:97:31:10:7a:ee:cd:9d:cc:8c:a6:6d:9e:10:
                    f5:91:2d:77:57:af:eb:7b:36:24:10:32:18:b2:4e:
                    55:bf:94:e1:f2:93:8b:01:5c:86:4f:79:53:80:7f:
                    5e:29:de:28:69:dd:ff:86:42:45:8f:8f:01:63:56:
                    ca:3f:26:84:1d:43:97:15:e0:c3:3a:08:69:57:ee:
                    79:41:1f:5c:9f:1f:5d:9a:0f:c7:22:55:c8:38:93:
                    ba:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0C:42:FD:AD:8F:98:57:DC:FD:4D:05:73:75:7B:0B:CA:35:16:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:2300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0d:21:e3:b8:92:1f:ac:e9:3d:aa:e0:5d:fd:29:7e:a6:05:
         fd:da:e6:80:b4:0c:d1:37:73:69:64:52:a1:00:0c:99:6a:1e:
         3d:f3:2a:a2:62:f6:fb:ab:e4:5c:1f:b2:56:dc:d9:24:9b:11:
         6e:e8:e4:c2:0b:55:3d:f4:7f:69:b6:38:43:24:4f:5d:38:04:
         ab:a0:0c:6c:c2:04:32:f4:18:8d:0a:4d:b2:17:91:e9:8f:15:
         5f:ba:2d:c5:9d:03:52:59:e7:9e:5f:2b:c6:d0:72:67:25:f0:
         d1:a0:71:a7:af:47:f5:de:ca:13:ce:eb:b4:18:4a:26:9c:8b:
         21:73:90:a1:b2:12:8f:95:3f:80:ec:22:11:65:20:fd:53:15:
         b2:7e:89:ff:84:5e:b4:e2:df:df:e8:ac:ef:42:08:71:38:17:
         b7:a9:12:44:e0:cb:c1:19:f8:b4:96:2d:b1:a6:32:46:ee:9d:
         9a:d8:2b:09:fd:1e:84:95:d2:a8:93:cb:62:fe:ba:3b:26:66:
         de:ac:01:5c:71:9c:c5:28:50:12:97:54:78:db:a4:c4:6f:95:
         81:5e:61:8f:fa:0d:4d:38:57:eb:71:09:92:fc:d0:5a:07:3a:
         1d:33:ee:f9:b5:54:f5:5b:52:de:26:2b:58:b8:23:f2:20:8e:
         c7:9c:ce:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:28:02 2026 by rpki-client