Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce0f1b42-1e58-3092-a373-eba23cae1659.roa
File:                     ce0f1b42-1e58-3092-a373-eba23cae1659.roa (raw, json)
Hash identifier:          WLfADqFZZXRh9lVDqkDiQ/psjqcbFHSsdSJ0JE4gCrM=
Subject key identifier:   F6:E6:B4:6C:C9:4C:8D:B2:2F:F7:87:03:99:84:2A:30:AB:6F:28:A7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAE5E800B7B190E5FD9AD9830
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce0f1b42-1e58-3092-a373-eba23cae1659.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        2603:c001:600::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:80:0b:7b:19:0e:5f:d9:ad:98:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=3ca00eac-79f9-406a-9259-e841a90d446f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:82:5e:41:c5:9f:d8:54:a6:fc:5d:26:e3:8d:
                    a9:6b:d2:39:4c:21:dd:dd:69:34:bd:f0:30:fb:c3:
                    5e:0b:d8:73:3f:f6:bf:4d:2d:54:be:06:c0:61:e9:
                    dd:ff:05:f8:f5:7a:30:0a:59:d3:a8:12:e2:14:6b:
                    33:c2:74:a0:dc:b7:97:6d:f5:e5:6e:ed:94:6d:2f:
                    aa:e9:b2:a2:4f:9d:56:96:21:07:3a:63:f4:ef:df:
                    34:88:85:b7:01:47:1c:4a:0b:60:13:fc:5b:46:f6:
                    de:da:5d:48:a5:4f:ba:96:68:43:92:4e:a4:94:b9:
                    78:c0:43:97:5a:dc:fe:a8:9f:28:c2:5d:aa:3e:ef:
                    19:59:92:c3:79:34:6a:24:22:b1:94:8b:0b:21:8d:
                    a2:cf:8d:48:e3:fe:15:2e:6d:c5:84:88:3f:ab:6e:
                    88:56:ba:5a:fb:ad:d0:bb:a6:db:cf:c1:a5:0f:3a:
                    ac:4d:8f:a5:b1:50:ba:89:6e:c8:55:82:7d:eb:63:
                    1b:8a:4f:2e:0f:67:5f:d0:e3:b9:08:67:c5:e1:92:
                    5b:24:5e:8c:0f:9c:1c:ce:0f:5e:14:b9:9c:f1:37:
                    8f:02:fc:74:42:24:df:21:4d:3c:8b:73:93:65:17:
                    5b:a6:a8:07:73:c0:6c:ea:ce:b5:89:0a:35:b8:f8:
                    7a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E6:B4:6C:C9:4C:8D:B2:2F:F7:87:03:99:84:2A:30:AB:6F:28:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce0f1b42-1e58-3092-a373-eba23cae1659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c001:600::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:85:0e:18:93:1c:cb:74:19:32:a1:24:fe:58:26:20:42:1f:
         6f:89:6d:37:37:26:54:a6:14:a9:08:5f:9a:c4:5b:d3:35:41:
         53:a9:f8:b5:d6:d0:39:3b:0f:fc:56:6a:71:be:c9:5f:a0:37:
         63:bb:f5:bc:e5:1a:ef:b4:5d:9a:c5:74:69:9c:c3:1d:81:69:
         65:31:23:e9:4f:8b:6d:0f:3d:40:70:ee:33:8c:7c:f9:d7:ea:
         6e:f7:7e:15:70:2c:3b:3e:73:54:1d:75:ab:f6:d2:b7:e5:d0:
         7b:6f:9b:a3:68:aa:c9:b0:02:05:0b:21:fc:d0:ca:b5:d5:64:
         23:65:c1:e0:62:fd:71:1f:bd:19:8c:b9:55:e0:8b:b7:66:ee:
         77:67:ab:b6:22:60:33:3c:15:c4:2b:bf:2c:38:b2:40:51:1b:
         e5:da:43:d4:78:be:e7:b5:31:f1:44:70:79:42:08:8d:10:58:
         7e:bc:77:c4:aa:c1:00:6f:60:7f:e9:83:77:91:b0:ab:e4:90:
         9c:08:1b:aa:6c:e1:4e:9e:03:64:ae:bd:d3:a9:12:05:5f:6e:
         02:e6:e4:f8:1d:70:32:34:fd:4e:15:6b:f9:eb:d3:95:c4:3c:
         40:5e:5e:4d:4a:a7:10:89:d8:88:55:9a:31:32:44:95:73:b5:
         6f:52:22:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:32 2026 by rpki-client