Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc695724-630a-3465-b181-4ada53f919d8.roa
File:                     cc695724-630a-3465-b181-4ada53f919d8.roa (raw, json)
Hash identifier:          OSXOx1FCXbFXW5KqltyBwtSJlzg+fhy3AozmuxqFXw0=
Subject key identifier:   6E:6D:44:4C:4A:48:8F:C5:F3:9B:8B:2C:24:E7:C1:D1:E4:08:CA:41
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CA5F74CAA658D34AC579AE780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc695724-630a-3465-b181-4ada53f919d8.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        2603:c002:1f00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:4c:aa:65:8d:34:ac:57:9a:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=1987e703-ad3d-4b27-87f0-3845bbc6248d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:d5:cd:e0:6f:a9:1a:40:4f:96:74:c8:c6:
                    49:b2:55:2e:35:d0:1c:bb:45:95:92:28:76:cc:54:
                    d9:ef:81:96:e7:17:d3:8f:d6:81:d2:0d:d7:0f:ed:
                    3b:45:50:a9:b8:76:89:af:fa:32:5f:89:99:4d:08:
                    59:f9:9d:20:52:cb:27:90:9b:83:90:f7:38:d3:c7:
                    2e:30:ed:5e:cf:4a:65:b7:40:44:58:03:bb:97:db:
                    8e:a4:b6:ab:be:83:35:f2:4b:1e:66:29:cf:ea:e9:
                    83:55:f4:58:6a:1b:4d:f6:02:f7:db:21:a5:f8:63:
                    eb:8c:78:0f:fd:5e:e5:47:d9:7b:6c:aa:c0:13:70:
                    a5:24:ce:45:7d:4d:d3:41:12:c0:f2:1d:77:88:f9:
                    ef:d8:0a:ff:db:76:89:05:fc:d0:04:77:aa:fd:68:
                    e0:b0:41:48:49:0b:d8:e5:c6:c5:b8:bd:70:59:eb:
                    d0:f0:ba:46:c9:ca:42:23:5c:b1:78:8e:c3:cf:20:
                    65:84:7e:cd:27:2b:0a:29:19:a7:d7:e6:82:55:6f:
                    cd:5b:91:39:ce:3d:9f:6e:05:47:b2:0f:70:ac:73:
                    5c:52:9c:8b:ce:d0:7d:d6:b6:48:57:d6:07:d6:8b:
                    f1:bc:ec:5c:80:b6:2d:6c:fa:ad:cf:25:2f:e2:64:
                    f7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6D:44:4C:4A:48:8F:C5:F3:9B:8B:2C:24:E7:C1:D1:E4:08:CA:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc695724-630a-3465-b181-4ada53f919d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:1f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:31:3f:b9:d1:dc:97:95:01:74:0c:49:2f:45:7a:4c:6b:e4:
         7e:98:09:fb:15:92:11:a3:54:9f:9c:dc:56:9e:f6:b8:95:6b:
         5b:51:71:a6:57:f8:7d:65:80:98:38:31:19:32:4d:19:d5:27:
         bb:7c:e1:aa:0e:d1:02:60:f4:6b:ed:ce:62:a0:13:5e:5e:63:
         e5:26:86:d6:41:68:5a:c4:35:b0:8f:04:6e:72:cf:d4:a4:4b:
         88:13:a2:ba:ad:06:70:e9:b8:46:a8:2f:95:44:e2:cc:02:e9:
         11:e1:57:a0:6a:60:8f:d8:7b:e9:0c:31:70:52:62:51:90:0f:
         e9:b1:ec:28:16:a9:47:28:98:f8:ae:46:6e:29:79:85:23:6c:
         2c:50:08:52:3f:74:d7:cd:32:0f:b9:0b:b5:9c:cf:3a:9a:66:
         60:fa:36:89:23:ba:e1:bf:39:74:a0:de:c1:cd:e6:c3:f4:13:
         67:8d:9a:42:74:82:1d:6b:2d:7b:f8:40:f9:69:28:06:2f:0a:
         8f:00:21:dd:f9:55:25:b0:23:b8:71:c0:59:ca:cf:fe:6f:3c:
         77:e7:9d:26:d1:d5:9a:52:eb:8d:4f:d6:09:b6:14:64:59:b7:
         b4:77:30:0a:17:61:cb:13:dc:22:67:1b:13:94:70:ce:4e:1b:
         ef:2f:7c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:31:59 2026 by rpki-client