Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d221d0f6-47ca-37bc-b9a8-0df55662ee37.roa
File:                     d221d0f6-47ca-37bc-b9a8-0df55662ee37.roa (raw, json)
Hash identifier:          ZiIWgLUWbfGFGwr0H4LHDBIF6o5RVsB6l9soRj+qQmk=
Subject key identifier:   17:86:07:3A:D8:D5:AC:51:68:DC:97:D8:05:D6:1C:BE:7E:96:A6:75
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE5FDD3F59661CEE09C032580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d221d0f6-47ca-37bc-b9a8-0df55662ee37.roa
Signing time:             Wed 18 Feb 2026 00:26:11 +0000
ROA not before:           Wed 18 Feb 2026 00:26:11 +0000
ROA not after:            Mon 18 May 2026 23:26:11 +0000
asID:                     31898
IP address blocks:        2603:c002:3200::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:fd:d3:f5:96:61:ce:e0:9c:03:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 18 00:26:11 2026 GMT
            Not After : May 18 23:26:11 2026 GMT
        Subject: CN=828bb913-56b1-404b-a88c-5a74bac43622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:13:96:b4:cf:9b:8d:fa:bd:32:d5:ea:76:9d:
                    13:0e:db:f7:2a:3f:42:73:66:80:ab:97:03:ca:ae:
                    57:86:37:e9:0b:8f:8e:50:9d:47:4e:69:d5:b4:9c:
                    bd:4d:57:4f:11:52:df:a1:2d:3e:f9:52:e7:c5:59:
                    f0:88:1d:c1:31:06:5a:12:1d:cb:ca:df:7f:99:46:
                    f6:b8:c6:26:06:00:35:81:c3:91:b4:ad:10:85:a3:
                    dc:37:be:23:de:ae:6d:70:67:1e:f1:a6:0f:c0:99:
                    1b:36:b4:a3:f5:a1:3a:c9:fa:be:a3:d7:da:96:70:
                    43:b6:a5:83:b2:8f:d0:03:7f:b9:51:6c:90:ba:95:
                    9a:9c:39:38:de:93:56:2d:a1:81:f1:c5:38:ef:ec:
                    32:bf:2e:01:9a:61:cc:0a:d7:6a:99:0e:f0:2e:de:
                    6d:4b:17:53:38:5f:5e:5b:cc:ba:18:6e:42:cc:8b:
                    44:c1:db:cd:4f:15:76:01:43:86:74:92:e9:6d:fd:
                    4a:79:d9:e6:14:33:c6:94:7f:7a:76:66:e6:cd:5e:
                    5d:df:16:21:84:84:d5:df:71:b5:98:03:92:92:5a:
                    52:68:d9:f2:98:20:dc:96:65:94:74:b1:22:b8:d9:
                    eb:84:6b:3a:f3:8f:9c:1b:19:66:a6:a9:c5:d2:55:
                    26:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:86:07:3A:D8:D5:AC:51:68:DC:97:D8:05:D6:1C:BE:7E:96:A6:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d221d0f6-47ca-37bc-b9a8-0df55662ee37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:66:ef:76:a7:34:ff:50:68:30:1e:e9:f4:98:43:28:54:4d:
         c8:d4:cb:7c:6a:6e:90:b8:f6:10:45:57:5c:14:e1:cc:de:cc:
         66:4c:f3:d4:fd:37:ed:c4:0b:df:ae:c7:19:03:95:c4:70:9f:
         fa:9b:c8:21:93:c9:0d:07:b4:52:de:76:d4:42:11:ba:f7:22:
         d8:3b:35:1b:f3:e8:71:1c:4c:1a:43:16:42:32:f7:c9:93:a1:
         da:9b:0e:02:f8:de:c9:48:ec:5c:a2:84:d7:2b:dc:a4:6f:8b:
         2a:0f:e7:ea:1f:5d:f2:af:9e:bc:5c:04:53:fd:f9:3f:7c:5f:
         1b:29:40:14:93:a5:ce:d0:05:d2:bc:83:c6:4f:a8:25:2d:cd:
         17:21:3c:35:18:65:c3:85:b0:9b:80:89:fd:b9:93:8d:ff:df:
         be:04:a1:88:42:88:a5:e5:56:17:eb:26:57:cd:10:f2:62:bb:
         bf:e1:68:36:81:43:f7:b2:ea:34:d0:ce:28:b7:e4:9b:15:d7:
         ee:d8:a1:99:b1:5f:0d:03:ea:04:d8:ed:91:54:9b:a1:a0:83:
         9d:1a:04:7a:06:c0:cf:7e:b5:9a:19:9e:3f:40:04:68:65:7a:
         87:a6:53:a0:ed:fb:ec:a2:ef:c4:1e:d1:51:95:70:40:71:fa:
         a1:d3:cc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:25:55 2026 by rpki-client