Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0781b187-dfbf-3afd-8f19-126bfee8bd0c.roa
File:                     0781b187-dfbf-3afd-8f19-126bfee8bd0c.roa (raw, json)
Hash identifier:          lv1fUCmEm+C5jexMl1dZIHvkM0O43rK1tcJVWEaHtJM=
Subject key identifier:   F7:33:08:4D:FD:C0:AB:5E:6A:41:FB:E7:CB:0B:91:91:85:E8:64:FF
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8AC53478FD41026326B02D00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0781b187-dfbf-3afd-8f19-126bfee8bd0c.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        160.34.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:34:78:fd:41:02:63:26:b0:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=8db87d6b-4089-42f1-b404-d68e833fef62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:a7:18:49:8a:30:47:ea:a0:3a:3b:71:24:
                    ae:95:c8:24:d5:b7:6d:5d:ef:dc:a7:65:d2:40:bf:
                    03:1f:ee:d2:74:fa:21:a8:d0:c0:e2:ed:11:9b:66:
                    f7:c2:17:8b:9e:03:b4:a6:fc:9e:39:c2:d4:89:86:
                    b7:8a:84:07:36:2c:c9:a0:91:6a:59:a9:01:0a:72:
                    8d:4c:fd:93:12:c5:25:3c:8a:f2:25:71:d0:bb:0b:
                    df:6c:7b:93:27:53:e7:4c:fd:6c:d1:ac:ec:c3:05:
                    0b:30:f9:e7:40:df:97:aa:52:b7:33:5a:6c:1d:f0:
                    06:a1:89:70:a5:0f:2c:15:ed:ae:0b:3b:28:57:91:
                    c0:dc:29:5c:5d:2f:da:0d:11:7b:39:70:8c:4c:07:
                    ac:af:f8:df:3c:49:85:ad:1b:06:8c:f9:99:8c:a9:
                    71:8c:4a:29:ea:2c:79:44:04:04:ba:ef:a6:64:df:
                    73:6f:4f:25:cb:ab:8f:f5:8e:db:5a:83:0a:63:4a:
                    02:c3:95:88:b7:fd:81:8f:7c:50:a6:d7:66:6c:61:
                    04:80:01:52:ae:8f:ad:8f:d8:f9:c4:a7:78:b8:20:
                    94:ff:f8:24:21:a6:d5:23:ab:a1:69:bc:64:83:17:
                    c3:89:0c:08:23:45:5e:82:d9:b9:d7:bc:bf:04:0c:
                    42:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:33:08:4D:FD:C0:AB:5E:6A:41:FB:E7:CB:0B:91:91:85:E8:64:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0781b187-dfbf-3afd-8f19-126bfee8bd0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.34.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:78:d8:75:75:d6:28:ec:5c:0f:ca:46:33:a8:6d:54:d9:42:
         53:01:dd:d1:94:ae:34:07:2b:06:25:1f:53:26:a4:8e:f0:4c:
         f7:fc:74:0d:c0:27:e9:4e:80:96:f5:f8:8d:09:be:38:e7:1d:
         d3:72:4d:7a:80:4d:26:5a:3b:c0:dd:06:e9:89:76:9f:99:88:
         24:86:0d:eb:ac:74:5f:4e:09:40:64:3f:fb:97:6f:00:68:c8:
         a9:ed:1b:2d:54:1b:f3:a9:30:d5:3e:4a:02:2f:be:cb:f6:7d:
         3d:51:81:29:8a:33:08:20:e8:c4:1c:a3:64:e6:69:cf:6f:84:
         89:b5:d6:8c:5b:e3:d9:49:bf:03:fd:49:7b:e7:a0:55:0f:e4:
         48:1b:a5:35:99:95:e8:a7:15:91:02:32:4d:09:83:48:e7:b3:
         b3:9a:c8:04:fc:67:5c:b4:a9:cc:b5:ea:50:38:63:1d:af:aa:
         9b:ca:5e:8e:68:f2:60:81:8a:c9:0d:a0:c5:eb:2c:d6:be:1e:
         ab:a9:66:7e:77:5f:c6:32:0d:6d:e4:ec:6c:44:30:39:f5:62:
         de:21:96:6b:01:76:81:c1:81:6c:91:37:9c:4a:86:9e:fc:c6:
         60:2c:49:08:4b:d9:05:86:44:cc:84:c7:11:3e:59:8a:fb:84:
         06:d5:01:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTR4/UECYyawLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk
OGRiODdkNmItNDA4OS00MmYxLWI0MDQtZDY4ZTgzM2ZlZjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAKnGEmKMEfqoDo7cSSulcgk1bdtXe/cp2XS
QL8DH+7SdPohqNDA4u0Rm2b3wheLngO0pvyeOcLUiYa3ioQHNizJoJFqWakBCnKN
TP2TEsUlPIryJXHQuwvfbHuTJ1PnTP1s0azswwULMPnnQN+XqlK3M1psHfAGoYlw
pQ8sFe2uCzsoV5HA3ClcXS/aDRF7OXCMTAesr/jfPEmFrRsGjPmZjKlxjEop6ix5
RAQEuu+mZN9zb08ly6uP9Y7bWoMKY0oCw5WIt/2Bj3xQptdmbGEEgAFSro+tj9j5
xKd4uCCU//gkIabVI6uhabxkgxfDiQwII0Vegtm517y/BAxC2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPczCE39wKteakH758sLkZGF6GT/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDc4MWIxODctZGZiZi0z
YWZkLThmMTktMTI2YmZlZThiZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoCLQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJ42HV11ijsXA/KRjOobVTZQlMB3dGUrjQHKwYlH1MmpI7wTPf8dA3A
J+lOgJb1+I0JvjjnHdNyTXqATSZaO8DdBumJdp+ZiCSGDeusdF9OCUBkP/uXbwBo
yKntGy1UG/OpMNU+SgIvvsv2fT1RgSmKMwgg6MQco2Tmac9vhIm11oxb49lJvwP9
SXvnoFUP5EgbpTWZleinFZECMk0Jg0jns7OayAT8Z1y0qcy16lA4Yx2vqpvKXo5o
8mCBiskNoMXrLNa+HqupZn53X8YyDW3k7GxEMDn1Yt4hlmsBdoHBgWyRN5xKhp78
xmAsSQhL2QWGRMyExxE+WYr7hAbVAbU=
-----END CERTIFICATE-----
Generated at Wed May 13 06:32:38 2026 by rpki-client