Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3501fbf-a56f-3983-b1aa-f3df76607870.roa
File:                     f3501fbf-a56f-3983-b1aa-f3df76607870.roa (raw, json)
Hash identifier:          4zcuWqkbk3e8ac7jqC0HEPItSAKKZ7pRvlz/xM5D3LI=
Subject key identifier:   BA:19:70:29:00:3C:BA:C2:AB:26:49:67:F2:70:9F:07:92:9D:FE:47
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBDB1EC6867234F4D636BC600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3501fbf-a56f-3983-b1aa-f3df76607870.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        2603:c002:b010::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:ec:68:67:23:4f:4d:63:6b:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=c47afd45-a71c-478c-8cad-f9201e36971a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:c5:be:8f:4d:8e:6f:68:37:c3:8f:ce:84:
                    33:df:9e:ea:18:28:6c:c3:9b:d5:34:c6:8b:4f:05:
                    b7:09:fb:7c:26:45:e8:0e:7d:0e:9a:b5:2e:85:cf:
                    55:8c:aa:e0:0f:79:cd:8c:8e:2d:6b:53:af:be:eb:
                    4b:87:b0:53:a0:d4:bc:e1:13:74:ea:59:33:df:82:
                    73:87:98:9a:c5:c4:23:4f:99:62:71:b5:85:f4:c5:
                    4f:2f:ff:1c:89:74:32:66:d7:3a:11:e3:85:11:2b:
                    41:a1:1d:6a:c1:68:24:83:55:01:62:36:0e:66:13:
                    b3:a4:47:e8:06:35:67:9e:aa:42:d7:e2:3d:d4:3a:
                    ef:cc:57:1c:36:06:8a:23:e5:b5:d4:12:b8:e9:ae:
                    20:3b:f3:54:6a:42:63:7f:c3:88:0f:97:ce:bf:fa:
                    cc:43:e4:56:08:bd:24:95:86:1b:6d:5e:c2:87:fd:
                    db:ce:da:7e:82:fe:32:0a:76:8e:27:01:29:f4:bc:
                    2e:7f:90:93:dc:6a:6d:4b:27:6b:4e:99:85:4d:3f:
                    ca:16:55:0a:00:99:25:97:a6:9e:75:c5:f8:9c:37:
                    76:69:49:80:a2:93:d6:1c:43:3d:ce:40:a6:6b:24:
                    b2:a1:b6:09:78:cd:9c:3d:ec:26:63:bf:4a:39:68:
                    e5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:19:70:29:00:3C:BA:C2:AB:26:49:67:F2:70:9F:07:92:9D:FE:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3501fbf-a56f-3983-b1aa-f3df76607870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:db:14:b0:4e:98:6b:c9:d8:6d:49:21:c0:22:6c:87:e2:f8:
         1c:17:ca:64:41:ad:54:4f:3f:67:fc:de:a2:d2:14:65:a4:03:
         73:40:d3:da:d1:97:b1:c8:ed:b1:ae:54:b4:6b:23:d4:5d:af:
         23:b4:54:50:83:43:f8:77:b9:c4:42:37:3d:95:76:97:51:5c:
         8b:29:1a:9a:00:98:ba:70:61:54:de:aa:b1:6b:fe:95:cb:99:
         9a:a3:4d:c3:36:5b:9f:00:9e:98:5e:6a:79:b5:bd:9f:7b:22:
         b5:0f:51:c4:1e:cb:cd:03:37:2c:e4:be:10:07:81:39:c9:30:
         40:48:b2:dc:b0:56:c6:02:db:2d:d7:76:f7:c6:b3:b5:af:aa:
         75:90:b6:ec:03:47:92:ca:c5:8b:87:c8:f2:95:5c:e5:4f:11:
         25:9f:0c:a4:10:d2:43:d7:84:29:9e:03:25:84:75:05:45:d0:
         f1:ce:12:b7:5c:21:3c:ec:d2:04:c8:a0:e1:66:3d:3a:6a:65:
         ea:5b:db:e3:7a:f2:f9:d3:e0:6c:e0:8e:a5:12:58:76:e6:91:
         4a:fe:e0:05:db:3b:de:24:bb:f8:7c:24:69:7a:e0:db:28:9c:
         ce:30:c5:c0:2c:64:c0:9c:de:b4:34:7f:fb:00:ff:52:ad:91:
         3e:a8:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:31:47 2026 by rpki-client