Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f78cd877-283a-3f6f-a244-e7b636a0ed0e.roa
File:                     f78cd877-283a-3f6f-a244-e7b636a0ed0e.roa (raw, json)
Hash identifier:          9dT5KTBaghJHn6hoHeXHyRb+3n2/404ejcPcdAJTsCY=
Subject key identifier:   37:E8:5E:5B:FB:55:08:29:96:AF:68:97:0E:6D:A5:D5:B8:F7:FF:C2
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CACF1D464B752A86D83D13E80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f78cd877-283a-3f6f-a244-e7b636a0ed0e.roa
Signing time:             Wed 28 Jan 2026 14:00:36 +0000
ROA not before:           Wed 28 Jan 2026 14:00:36 +0000
ROA not after:            Tue 28 Apr 2026 13:00:36 +0000
asID:                     31898
IP address blocks:        2603:c002:8b00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ac:f1:d4:64:b7:52:a8:6d:83:d1:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 28 14:00:36 2026 GMT
            Not After : Apr 28 13:00:36 2026 GMT
        Subject: CN=02bbb932-983d-4003-8c75-f5a95b726a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7e:21:b0:29:f8:4a:59:1b:75:c3:9a:08:29:
                    db:23:58:6e:17:45:82:77:b1:d5:43:38:41:78:da:
                    09:32:48:68:10:f2:6a:8c:dd:e4:af:c1:d8:b9:1d:
                    4c:ab:72:41:93:3d:8d:d0:03:3b:7b:d9:2a:b9:42:
                    2e:a9:20:c3:4a:3f:bf:70:27:8b:83:28:7a:e9:98:
                    62:cf:94:d3:65:6a:6c:41:f4:9b:01:46:2e:18:08:
                    e1:18:15:5b:65:80:a2:52:6d:5b:45:c3:23:74:0c:
                    71:1a:5a:de:54:5e:36:0e:8b:d7:e2:04:3e:9b:15:
                    91:2a:d0:bd:c7:19:24:8b:e1:90:c1:05:c5:da:cd:
                    69:b6:68:86:6a:47:01:9e:9d:e6:8b:32:2e:fc:21:
                    3d:e5:a0:15:a3:15:3b:cd:77:9c:2b:c3:63:c7:17:
                    6e:0c:6d:81:e5:d6:ec:b9:bc:28:86:a3:14:e9:33:
                    f0:63:34:44:42:88:66:15:72:57:0d:2f:7d:e1:a6:
                    39:f6:68:19:9e:21:c5:72:b5:61:2b:f5:4f:73:0e:
                    34:0d:5b:cd:e9:48:38:2f:ee:6d:e9:ce:8b:a2:fe:
                    a9:07:e3:3f:3c:21:80:f0:5f:03:0a:9b:15:5c:da:
                    64:e3:68:58:06:c4:ac:c3:cc:e6:a1:9f:6b:09:f5:
                    05:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E8:5E:5B:FB:55:08:29:96:AF:68:97:0E:6D:A5:D5:B8:F7:FF:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f78cd877-283a-3f6f-a244-e7b636a0ed0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c002:8b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:dc:02:85:1c:96:5d:97:d4:47:9f:5d:0f:92:86:fc:d7:36:
         7a:9b:7a:6b:d3:ad:54:90:b4:0a:86:1d:ea:d9:c6:89:ee:79:
         30:98:ea:70:16:f9:78:31:6a:3e:85:a3:32:06:f9:51:b4:0a:
         c5:f0:95:e9:fe:46:06:46:09:48:95:7c:c3:0e:14:e2:d4:23:
         4a:b7:40:c4:86:01:24:63:6e:9e:10:4b:9d:bc:1c:64:bc:f7:
         f4:6b:bb:13:dd:ae:a9:e8:f3:6f:fa:fd:a2:fb:ba:ef:66:20:
         2c:60:ab:32:c3:96:a1:76:ad:61:b3:f2:4f:c2:1c:67:a5:70:
         97:3a:12:32:84:0e:6f:69:f4:46:2c:ec:45:7d:50:4f:cb:ae:
         4f:b9:ad:6a:8c:f8:32:54:4e:f6:22:2a:3c:20:28:47:db:03:
         f6:10:5d:d2:7b:f0:db:a9:22:8b:59:af:41:3d:7e:d1:dd:2a:
         cb:4b:f6:e3:b6:e4:0e:97:db:d8:de:e2:60:08:fb:c5:fb:ca:
         9f:53:60:97:9e:dc:46:a4:53:04:0c:98:dd:21:c7:fe:19:58:
         f5:a8:28:27:6f:39:3b:d7:13:f4:da:6a:ce:0b:7f:ac:df:21:
         f6:84:af:f0:3d:b0:70:0c:d9:0d:a0:e3:ec:55:ac:6f:32:7f:
         54:41:dd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:24 2026 by rpki-client