Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/c5647d32-2348-3ec2-87b8-71c2703da1ff.roa
File:                     c5647d32-2348-3ec2-87b8-71c2703da1ff.roa (raw, json)
Hash identifier:          xo6KB0HK3+LliPldIOFJuBc7r3OKwJizrVgbeXuvVW8=
Subject key identifier:   31:DB:68:46:C9:75:7D:15:16:2A:E9:A2:54:1F:EE:35:B9:59:B0:75
Certificate issuer:       /CN=6c1cacf6-731e-4845-81a0-0e28071dbc9b
Certificate serial:       010D0C9F4328584DB1A37F0A4801E00AFDDF5700
Authority key identifier: 31:E2:4A:2D:9F:C8:7B:E0:6C:C0:F5:21:F4:67:40:69:72:09:DD:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/c5647d32-2348-3ec2-87b8-71c2703da1ff.roa
Signing time:             Fri 01 May 2026 23:09:05 +0000
ROA not before:           Fri 01 May 2026 23:09:05 +0000
ROA not after:            Thu 30 Jul 2026 23:09:05 +0000
asID:                     32270
IP address blocks:        208.65.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/6c1cacf6-731e-4845-81a0-0e28071dbc9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/6c1cacf6-731e-4845-81a0-0e28071dbc9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:a3:7f:0a:48:01:e0:0a:fd:df:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1cacf6-731e-4845-81a0-0e28071dbc9b
        Validity
            Not Before: May  1 23:09:05 2026 GMT
            Not After : Jul 30 23:09:05 2026 GMT
        Subject: CN=5619705c-6076-41be-b2d3-12abd3af2ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fc:d4:d6:4b:f3:bd:13:95:d4:c4:21:47:cb:
                    59:52:a8:1f:56:52:3c:5d:9d:9b:b2:71:f2:ba:38:
                    95:ad:bd:f4:b4:b4:00:c0:d3:1d:f7:80:30:d3:a8:
                    da:61:9a:9a:31:dc:e4:d0:2b:ce:c2:ca:d3:db:d6:
                    13:8c:05:a2:0a:d6:6a:d8:ec:b9:78:f0:83:ae:aa:
                    ce:9c:8c:68:01:b4:e7:3e:05:cb:25:ad:93:e2:db:
                    70:05:49:28:e9:2a:36:d1:7c:da:19:74:a2:54:27:
                    bb:70:53:dc:69:42:46:65:1a:8a:8a:6e:c5:19:40:
                    14:00:33:b7:e0:0c:62:13:17:01:ba:c3:37:88:a8:
                    e2:21:9f:c8:28:ea:66:8b:48:fb:89:a9:fc:ad:73:
                    d6:72:aa:cf:a2:0c:01:79:76:f9:d8:35:fc:02:3d:
                    ec:af:3c:d4:91:bf:8f:ed:1d:35:31:5c:31:eb:49:
                    31:f5:9e:a8:a9:98:0a:cd:6c:74:f8:86:de:d0:bf:
                    59:bd:23:d6:8c:e7:0d:96:5b:4b:52:6e:e5:30:e8:
                    f3:60:98:ee:5f:86:8c:7c:2c:5d:2e:da:49:ed:1e:
                    c2:e9:ba:69:03:4e:8b:20:0e:61:61:c1:96:bb:e5:
                    b3:68:92:ae:91:60:bb:81:b6:23:87:93:85:32:35:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DB:68:46:C9:75:7D:15:16:2A:E9:A2:54:1F:EE:35:B9:59:B0:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/c5647d32-2348-3ec2-87b8-71c2703da1ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/6c1cacf6-731e-4845-81a0-0e28071dbc9b.crl

            X509v3 Authority Key Identifier:
                keyid:31:E2:4A:2D:9F:C8:7B:E0:6C:C0:F5:21:F4:67:40:69:72:09:DD:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f0:1a:a7:da:7a:c9:d0:62:6f:78:06:5a:26:4f:44:6f:d9:
         ec:15:4a:35:4e:dc:e9:66:3f:fa:36:48:cc:58:59:1e:82:45:
         e9:c0:9e:fb:34:4b:33:2e:4e:9f:2e:87:a6:12:14:46:ea:db:
         f7:35:a4:02:57:14:05:16:6f:53:2e:8d:2e:4b:30:8b:bb:0a:
         ad:7e:81:93:55:0e:60:5a:a2:94:f9:63:a9:48:a8:a6:ca:17:
         52:aa:37:dd:35:40:01:da:47:ff:22:37:4a:7f:69:e3:a8:2b:
         7d:54:37:ce:a7:36:95:ea:2a:3c:b5:b9:26:83:11:b6:83:51:
         0a:74:48:79:ac:c6:fd:ec:cc:df:e1:c2:8f:05:84:e2:85:a1:
         1d:43:fc:5e:2f:ba:1a:60:e5:ba:17:e4:23:5d:97:77:fb:98:
         5f:64:96:e9:d6:84:4e:ad:d5:cc:0f:f7:2d:30:6e:75:c4:c8:
         88:60:75:d5:ab:51:ca:c7:6e:56:13:31:5d:82:ad:cd:3b:24:
         9a:a1:eb:f2:d4:a5:32:1d:f3:d6:3a:cb:5d:9f:12:60:87:c2:
         db:1c:1c:a1:73:f3:99:33:e1:6b:7c:92:d1:cb:d9:69:51:67:
         0b:1a:82:75:e5:2e:26:c8:37:fd:e4:24:09:62:54:9e:80:ca:
         38:d4:3c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:05 2026 by rpki-client