Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c1e8c2d2-160f-3990-a9c7-d89f744505a3.roa
File:                     c1e8c2d2-160f-3990-a9c7-d89f744505a3.roa (raw, json)
Hash identifier:          8tlCk+L2J6FMceLAqUaZ88bEX0GbMK3tiX9R4GTzPZk=
Subject key identifier:   EF:F8:F9:61:5B:72:B8:92:09:36:24:BC:81:5A:E1:1E:72:0C:F5:40
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D143D4CE2DFD4330A6FA69A00
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c1e8c2d2-160f-3990-a9c7-d89f744505a3.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     19886
IP address blocks:        171.162.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:4c:e2:df:d4:33:0a:6f:a6:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=1ae3f7d7-2fc3-4af5-994f-7912ea065079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0c:b6:bc:0b:ed:63:99:40:4e:1c:3b:d4:70:
                    4e:cb:d8:dd:e8:b9:b6:27:72:1f:15:f0:a2:af:f5:
                    a1:04:e8:ce:a2:1a:79:dd:c4:79:ba:b0:a3:e9:59:
                    3a:8d:3b:66:30:22:d5:13:d9:51:ba:bb:95:0f:ed:
                    1c:e8:c1:c3:fd:4b:1b:dd:4f:fc:e4:1b:4a:03:92:
                    a6:70:28:4a:dc:71:fc:91:2e:23:71:a7:b4:b0:17:
                    f9:96:95:09:0e:e3:2d:aa:d3:eb:c2:0f:8f:6f:99:
                    9d:ee:c2:71:5f:09:ac:bd:df:80:33:18:36:52:d9:
                    58:78:ce:e8:b7:e9:2f:c3:4b:30:4c:f6:fb:20:e4:
                    a0:00:fa:c5:ec:77:19:27:8d:0e:af:e0:d6:16:3a:
                    1c:c5:20:fb:d0:eb:44:99:31:df:ba:c0:c3:ce:9a:
                    b4:1b:3c:f9:b8:2a:42:15:3c:cb:29:4b:4f:48:a9:
                    2f:6c:26:71:cb:fc:5a:98:f4:c0:79:8d:23:1e:f0:
                    9f:5f:cf:c5:11:45:6d:b0:59:4a:73:4c:3b:fd:c5:
                    a1:e4:0b:90:0b:05:01:f3:83:8d:57:ed:52:95:78:
                    36:48:1b:7b:5f:23:9b:d3:21:dd:ca:d3:c6:c2:a7:
                    ad:3d:53:d2:e7:9c:7f:2f:52:2f:52:db:75:fe:15:
                    d1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F8:F9:61:5B:72:B8:92:09:36:24:BC:81:5A:E1:1E:72:0C:F5:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c1e8c2d2-160f-3990-a9c7-d89f744505a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:90:1f:2a:25:ef:3c:9a:06:e9:d7:87:76:31:66:e8:65:75:
         e7:bc:9e:08:a2:68:e0:81:48:9c:30:ba:60:aa:9f:ea:1e:e7:
         db:e9:c5:d6:11:2f:90:9a:a7:7b:2f:3c:2a:27:9b:82:6d:1f:
         7c:97:6e:a2:c7:84:39:3e:15:8b:66:a1:a5:a8:9f:15:02:50:
         22:7b:9f:71:54:2a:45:76:07:96:e3:dd:86:80:00:d3:9e:33:
         4b:da:32:5c:67:67:ab:90:66:d2:80:92:a7:9a:0c:ec:19:e8:
         9d:0e:ea:7e:43:37:cc:0d:55:45:ba:1a:7b:0f:f9:4c:8c:f6:
         20:af:f9:91:3f:3e:d6:d0:bd:8e:82:ea:56:d1:33:57:58:f7:
         cb:ce:a0:fa:1f:52:fb:13:06:b0:e0:65:2c:bb:a7:0f:82:1c:
         42:71:73:b0:59:e1:86:0d:83:dd:86:97:8c:e4:72:f0:54:b9:
         aa:2b:ad:d5:69:a9:d1:6e:d5:47:28:24:76:03:28:6a:42:0d:
         b3:12:96:04:2c:ec:c0:ef:1b:e0:a6:76:1a:b1:eb:62:e8:8d:
         c2:7c:b6:a2:5f:5b:e2:82:11:20:e6:dc:de:7d:12:50:d6:af:
         0c:3f:c4:5f:44:d3:c9:3b:a3:a8:ca:fd:83:d7:29:f6:47:1b:
         59:c3:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:36 2026 by rpki-client