Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01501f71-b377-378b-b0a2-7d61f5b73039.roa
File:                     01501f71-b377-378b-b0a2-7d61f5b73039.roa (raw, json)
Hash identifier:          e2lgIMckpqwXPUA0gZFLSEpLrAx6lqh53P6TdOsZIbs=
Subject key identifier:   FE:18:CB:D6:9D:F0:B5:5B:4E:F3:3B:D2:3A:B9:15:38:48:9E:09:24
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DC6CB12A8829593F0F1995980
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01501f71-b377-378b-b0a2-7d61f5b73039.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        194.195.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:12:a8:82:95:93:f0:f1:99:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=69d4dea9-fd4d-4240-937d-4526f4493d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:09:eb:f3:d3:6e:0b:4d:5e:ce:ce:f2:e9:3c:
                    a5:f1:88:6d:61:1a:c2:ef:8d:78:ea:2d:9d:ba:db:
                    8a:ff:cc:e1:b5:e0:64:f7:6f:92:74:f3:56:98:da:
                    7e:d3:53:4e:7c:d8:43:70:dc:99:d2:b9:c2:85:e3:
                    66:12:79:f8:b2:e4:26:49:d0:59:31:2d:a8:ec:60:
                    d6:76:ee:81:3e:08:66:bf:d9:22:ad:98:54:d4:2e:
                    74:37:e8:3a:2b:1d:c5:b4:25:0a:ed:c3:9e:28:06:
                    ac:28:01:93:77:3e:a8:f0:22:f6:d8:27:a7:48:2e:
                    6e:b2:3f:9b:12:2c:8c:11:0d:0b:99:4f:d5:86:94:
                    39:40:2b:34:93:af:56:fa:cb:38:05:ef:4d:33:e8:
                    6d:9c:55:96:6c:ab:dc:e4:8a:75:05:b0:e2:ed:eb:
                    90:5f:c3:a8:72:db:31:30:f6:0f:54:29:90:94:af:
                    c8:96:07:75:13:03:0a:81:59:d8:5e:75:46:c7:6d:
                    d1:66:87:b3:7d:70:2d:5d:7c:9b:dd:f0:f6:6e:b5:
                    6f:18:0c:83:68:24:93:ff:6c:20:dd:97:45:e8:0a:
                    0f:cb:89:5f:dc:74:fe:88:c4:5d:bb:b2:c2:18:a8:
                    84:4f:d1:98:a6:cd:11:5d:f7:3f:45:b6:72:64:b3:
                    1a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:18:CB:D6:9D:F0:B5:5B:4E:F3:3B:D2:3A:B9:15:38:48:9E:09:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01501f71-b377-378b-b0a2-7d61f5b73039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:26:7e:0b:de:38:52:f3:ce:83:2c:38:72:63:aa:54:a6:ed:
         17:ff:74:68:81:c4:d8:aa:3e:4c:bf:e7:9f:17:17:c8:87:4f:
         7f:a0:21:13:4b:4f:b2:b0:1c:fd:80:44:82:9d:f0:e3:09:00:
         75:a5:73:e0:f9:2a:ee:58:2d:9c:57:6e:37:33:4c:51:41:1c:
         22:19:2e:7a:72:ef:35:01:35:c8:fd:b8:c0:e6:07:62:04:8a:
         26:22:c8:20:05:ca:30:95:09:67:2b:29:f3:f9:35:15:a8:69:
         ac:05:a6:b2:de:d0:52:82:5e:f8:2e:53:03:f2:43:fe:8a:ad:
         57:b3:93:db:9e:42:76:5f:34:d4:d0:63:3e:a9:f4:0c:e5:73:
         0c:ee:2b:51:a5:c1:9c:b6:a8:61:a0:52:77:b2:bc:03:9e:b4:
         0f:19:68:a1:8c:30:c8:6c:ad:31:19:1b:55:5f:30:67:a0:fe:
         b7:dc:d6:0a:d0:f3:dc:17:6d:44:85:4e:27:49:b1:56:d0:1b:
         61:ac:c3:9d:b3:6e:0b:ba:68:ee:bc:e1:a4:38:be:a4:3d:30:
         a4:0f:14:99:f9:b7:2e:2e:45:0d:b1:ee:17:f9:ed:be:0c:16:
         86:21:e3:d8:9c:a7:8a:62:1d:90:bd:6c:86:43:13:60:e0:eb:
         53:9a:db:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GyxKogpWT8PGZWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk
NjlkNGRlYTktZmQ0ZC00MjQwLTkzN2QtNDUyNmY0NDkzZDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgnr89NuC01ezs7y6Tyl8YhtYRrC74146i2d
utuK/8zhteBk92+SdPNWmNp+01NOfNhDcNyZ0rnCheNmEnn4suQmSdBZMS2o7GDW
du6BPghmv9kirZhU1C50N+g6Kx3FtCUK7cOeKAasKAGTdz6o8CL22CenSC5usj+b
EiyMEQ0LmU/VhpQ5QCs0k69W+ss4Be9NM+htnFWWbKvc5Ip1BbDi7euQX8Ooctsx
MPYPVCmQlK/Ilgd1EwMKgVnYXnVGx23RZoezfXAtXXyb3fD2brVvGAyDaCST/2wg
3ZdF6AoPy4lf3HT+iMRdu7LCGKiET9GYps0RXfc/RbZyZLMatwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4Yy9ad8LVbTvM70jq5FThIngkkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDE1MDFmNzEtYjM3Ny0z
NzhiLWIwYTItN2Q2MWY1YjczMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwsPAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQmfgveOFLzzoMsOHJjqlSm7Rf/dGiBxNiqPky/558XF8iHT3+gIRNL
T7KwHP2ARIKd8OMJAHWlc+D5Ku5YLZxXbjczTFFBHCIZLnpy7zUBNcj9uMDmB2IE
iiYiyCAFyjCVCWcrKfP5NRWoaawFprLe0FKCXvguUwPyQ/6KrVezk9ueQnZfNNTQ
Yz6p9AzlcwzuK1GlwZy2qGGgUneyvAOetA8ZaKGMMMhsrTEZG1VfMGeg/rfc1grQ
89wXbUSFTidJsVbQG2Gsw52zbgu6aO684aQ4vqQ9MKQPFJn5ty4uRQ2x7hf57b4M
FoYh49icp4piHZC9bIZDE2Dg61Oa2+E=
-----END CERTIFICATE-----
Generated at Wed May 13 11:02:05 2026 by rpki-client