Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa
File:                     ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa (raw, json)
Hash identifier:          bm5PvDBJG8W448XAuPxnCRg2Ur/cPWfV9wJBC2M+bAw=
Subject key identifier:   35:98:E7:9A:CE:7D:FF:0D:3C:52:EE:3D:47:04:E0:D8:F6:50:BB:BB
Certificate issuer:       /CN=be8c0be8-820f-49cc-b759-a1cd0b68028b
Certificate serial:       010D0C9F4328584D9A201A9E1B62F6FA569429C0
Authority key identifier: 21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     36786
IP address blocks:        132.203.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:1a:9e:1b:62:f6:fa:56:94:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be8c0be8-820f-49cc-b759-a1cd0b68028b
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=b75fda77-0f44-49be-ab31-f9b4b1cfe7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1b:db:0d:cc:a5:af:43:b8:cf:7f:86:cc:26:
                    9e:ad:f5:cb:62:dd:e1:48:cc:3b:95:2a:47:11:3c:
                    d7:39:be:0e:5d:66:40:d8:df:78:25:8e:e1:45:89:
                    ea:e8:13:fc:35:80:dd:5d:80:76:9d:cf:32:84:66:
                    18:51:b1:e2:31:8f:a1:b6:5e:ee:34:10:c6:0f:31:
                    31:45:a4:70:e5:a6:e5:84:02:d8:3e:67:50:8c:c5:
                    52:6f:7f:22:29:78:66:4a:6f:c6:b6:51:48:06:9c:
                    12:ff:9a:b1:57:29:53:15:24:67:6d:07:2d:f3:3b:
                    1e:b7:fb:6a:4a:0c:ae:e1:af:c7:0f:3f:3d:10:97:
                    e5:30:b8:e4:98:bf:19:6f:98:fc:0a:4c:37:3c:6c:
                    76:9a:13:cf:92:6a:d1:31:33:5f:74:64:f2:b1:10:
                    30:b8:74:07:15:bf:15:7f:2b:bc:3d:b9:5a:67:c2:
                    83:3f:cf:11:6d:f2:e8:9b:12:de:df:e2:1f:5a:ac:
                    ad:45:fb:59:86:38:83:8a:30:aa:02:3e:b4:ab:f7:
                    0e:16:df:5c:24:e0:9d:36:a8:75:bc:34:48:11:91:
                    d1:8a:e3:ec:78:b6:c8:3e:67:dc:67:fa:8c:75:65:
                    85:c3:1a:c3:ef:6d:b1:85:ef:01:e7:bb:9b:2e:f1:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:98:E7:9A:CE:7D:FF:0D:3C:52:EE:3D:47:04:E0:D8:F6:50:BB:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl

            X509v3 Authority Key Identifier:
                keyid:21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.203.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:5a:27:0c:1d:57:18:9f:c2:de:31:70:87:bc:4a:10:9f:04:
         9f:f4:c0:cc:43:4a:98:5b:b5:f4:ff:ac:ee:66:3f:99:6e:aa:
         99:05:29:5e:18:7f:37:d4:ac:be:7d:4a:3c:d9:24:27:ed:25:
         4b:b8:6f:29:54:45:b0:73:6c:85:c6:ba:d2:ab:2d:c0:6c:8e:
         b9:b3:b0:ea:49:58:84:8b:eb:36:cb:aa:7a:fe:30:c7:88:3d:
         76:59:92:ab:75:16:c5:d1:d7:41:f9:2b:db:80:46:b0:68:8d:
         0f:e3:14:2b:e1:a6:bd:18:6f:5f:a7:05:ac:a7:62:b7:3d:51:
         ff:f5:85:21:f9:b0:09:a6:81:d4:7d:ad:ec:41:0f:60:76:46:
         c9:76:7b:bb:3c:c9:e4:91:91:4b:e8:cb:27:c7:4c:93:73:9a:
         c7:b8:b1:e8:92:43:aa:d4:72:ab:72:cc:7c:d3:b7:98:3a:38:
         3a:be:77:13:a8:47:a0:8a:69:9c:1e:9d:2f:97:dc:47:1f:5f:
         fc:2c:b1:d3:c3:c7:72:60:24:21:ac:ba:c9:b4:32:1c:27:85:
         12:53:8e:29:73:7c:fc:0e:70:82:1f:50:9b:8f:b4:b2:7f:6f:
         70:9e:d2:77:7c:3a:36:7a:97:75:14:87:d4:ee:70:30:7e:76:
         56:7d:0f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:20:15 2026 by rpki-client