Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0f635a83-0180-33fc-a597-7b0a9d216655.roa
File:                     0f635a83-0180-33fc-a597-7b0a9d216655.roa (raw, json)
Hash identifier:          DdeEva6eYoBUfcPt8RLwIs4lAryGNC5izUuHgJumcY8=
Subject key identifier:   0D:A8:4A:20:8B:32:08:EA:B9:46:E2:BD:5C:BC:3E:89:17:FF:C4:BA
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DC6CB0FF32179BD31B8744360
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0f635a83-0180-33fc-a597-7b0a9d216655.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        151.104.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:0f:f3:21:79:bd:31:b8:74:43:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=79671fb4-947f-4f92-a9aa-c214aff2c836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:76:e6:fb:25:c2:d3:42:32:3c:95:35:53:
                    7f:41:c1:4f:b7:b7:e1:f9:8e:37:50:ca:11:2d:07:
                    00:0b:71:0a:f1:82:f8:4c:f7:91:b3:c7:fd:c5:7b:
                    38:56:aa:1b:5b:ab:cf:0f:b9:14:f2:52:de:4d:37:
                    49:f9:9e:f2:e6:c2:a5:b0:3d:63:c9:bc:0f:01:f1:
                    61:4d:2e:ae:44:1b:04:fc:95:f9:05:09:6c:f8:1e:
                    e0:5e:f0:35:68:aa:19:d2:73:9e:0e:f0:26:5b:61:
                    fb:f3:fb:3a:dc:2b:7e:18:cc:b9:40:c3:c7:d5:f1:
                    01:09:aa:61:fd:a9:ea:2d:5e:b6:06:a6:46:a6:b5:
                    67:f9:63:60:2d:8a:2c:c7:a3:aa:5b:b1:50:64:31:
                    04:d7:26:42:68:b8:16:be:9d:3d:41:cc:42:b3:1d:
                    e8:5d:f2:4a:f9:dd:57:7a:57:b6:ca:74:59:f2:15:
                    f5:19:d1:43:06:c0:73:2d:d6:6b:46:3f:c9:0e:e4:
                    de:8a:5a:e8:d1:b4:5e:0c:f2:cb:9d:fc:24:fe:8f:
                    83:ce:9d:63:95:94:a7:d3:af:f0:3a:ad:08:91:94:
                    db:5a:d1:b1:25:2a:63:bb:6a:d4:1a:4f:d6:b1:4d:
                    ee:d6:40:a1:ea:09:33:a8:69:f7:ed:8c:71:e2:40:
                    0e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A8:4A:20:8B:32:08:EA:B9:46:E2:BD:5C:BC:3E:89:17:FF:C4:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0f635a83-0180-33fc-a597-7b0a9d216655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.104.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d2:04:f1:1f:6d:08:1e:94:91:e3:02:b5:66:de:eb:72:cd:
         99:1d:d0:cf:71:66:5f:29:71:4f:0b:05:c3:6a:6c:11:db:c7:
         c8:e0:e6:19:8e:47:3f:eb:71:fc:50:1d:2a:cf:73:98:e5:dd:
         14:5f:c5:32:e4:12:10:c4:83:56:12:90:c0:c8:0c:68:5e:ff:
         56:0a:c1:6e:10:ba:60:1a:74:5a:e5:3d:85:4c:9f:b9:a2:66:
         95:92:d6:25:a3:47:2c:2d:69:37:f3:fc:64:92:b7:2a:d2:14:
         4e:16:93:1f:6c:0c:4c:61:dc:d6:05:df:f3:8e:f2:9b:c0:a4:
         9f:19:4f:cc:88:06:4f:40:54:86:a3:ea:b9:c1:97:36:43:0e:
         ab:cd:81:14:b1:31:a8:26:97:f2:4a:d5:b2:d7:bd:1a:73:1f:
         af:87:99:56:70:b6:87:83:b7:5e:59:3e:86:61:de:3d:39:3e:
         79:ef:f3:71:a4:75:ed:0a:1d:e7:f6:3b:98:9d:45:0e:69:e8:
         3b:b9:1d:9a:57:ae:8f:d3:cd:b1:75:b7:08:59:43:6b:6d:8a:
         44:88:2a:cc:5e:c9:a4:67:f8:3c:39:67:d5:16:7b:92:57:79:
         29:79:36:96:41:a0:6d:f6:7d:23:1d:41:9f:a0:fd:83:03:14:
         9e:7e:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:37:01 2026 by rpki-client