Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/127cd072-7bfc-37b0-9056-b94e5403a384.roa
File:                     127cd072-7bfc-37b0-9056-b94e5403a384.roa (raw, json)
Hash identifier:          19cAm5m+nNz7WkZUeYd267WSEftoDQ8CDNRuyy4o1EI=
Subject key identifier:   62:B5:78:92:99:D5:9B:FE:F2:91:0E:5B:54:A1:ED:2E:C1:D0:3C:5B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8AC55685F3E0543FBEA69008
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/127cd072-7bfc-37b0-9056-b94e5403a384.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        132.226.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:56:85:f3:e0:54:3f:be:a6:90:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=bd8b3638-240f-48bb-8159-227061aba47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:63:9d:9e:6c:32:ec:35:fc:85:69:7c:f4:51:
                    6b:a6:0a:9f:7b:5d:df:4b:bc:c2:37:d3:e9:78:b3:
                    69:49:26:47:2a:d6:85:bb:83:27:07:c3:45:60:7c:
                    ae:7a:5d:a0:52:5c:64:76:43:6e:4f:d1:fa:68:9e:
                    a5:69:fe:ca:16:15:5f:8b:e0:70:39:54:13:ea:c0:
                    a1:64:21:f3:01:43:32:2d:2a:f2:42:94:1a:33:08:
                    bc:9f:a8:e8:47:04:8d:31:d2:eb:22:79:dd:fa:7b:
                    d4:43:90:ec:22:5b:59:ab:ef:fa:e3:4e:61:df:ff:
                    e9:c2:0d:53:cc:d4:05:c2:2d:d9:e2:0d:4c:48:c9:
                    ee:3a:f9:75:e0:92:a0:40:64:58:44:66:c1:ed:19:
                    43:6d:ba:8a:fa:27:98:54:d0:a1:c2:15:7d:86:9e:
                    0b:12:3f:bf:00:44:cc:82:15:7e:79:a0:f3:f1:cd:
                    c8:25:f3:5f:a8:77:58:fa:22:69:72:41:73:dd:42:
                    57:13:ac:75:92:44:c8:16:3f:c0:62:06:f7:85:2a:
                    bd:1b:06:05:6d:a2:22:41:23:d2:f7:0d:a3:80:a8:
                    85:12:69:b5:b3:37:28:92:ba:e4:f6:8d:80:5e:34:
                    18:f1:44:47:c4:e9:44:66:5d:87:24:93:fe:ef:1b:
                    e8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B5:78:92:99:D5:9B:FE:F2:91:0E:5B:54:A1:ED:2E:C1:D0:3C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/127cd072-7bfc-37b0-9056-b94e5403a384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.226.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:a4:7e:a6:3f:19:38:1d:4c:7b:f5:5f:b4:b0:a0:a1:47:
         5b:81:f0:7e:0a:4b:b5:e8:ce:ba:12:84:19:25:fd:d3:4c:09:
         27:a7:f2:e1:6d:9f:20:b0:87:aa:9e:05:76:f9:c7:27:00:da:
         84:d0:0d:bd:13:3f:ff:bd:53:30:3e:5b:48:4c:64:2a:e2:0b:
         fe:a7:c6:31:5d:ab:e3:15:79:50:f9:eb:4b:de:ab:24:ef:4b:
         b0:fa:a1:5f:06:3a:c2:94:fb:f1:c5:27:2c:a4:bc:91:48:88:
         12:88:41:62:cc:e2:15:0d:b5:1a:5c:d6:bd:bd:95:7f:b5:96:
         d2:e6:23:61:d0:87:05:93:27:74:5e:1e:80:ab:ad:34:7f:3a:
         f2:d1:cf:87:75:3e:59:42:00:33:b3:80:1d:f9:0c:2c:89:0c:
         87:2b:53:4d:04:35:a8:0e:95:66:8f:1c:00:31:9e:aa:82:46:
         5f:96:b6:d4:73:bc:30:49:f6:db:bc:83:21:5a:26:d5:3d:95:
         4b:90:f8:42:c6:ab:1b:a2:a5:a5:58:00:cc:45:68:d7:d8:c4:
         34:f6:25:03:4f:10:15:2d:d1:7d:b6:34:86:ef:16:83:84:ff:
         a3:03:0d:34:98:c2:5b:a2:3d:1e:53:63:e7:da:cc:c4:47:42:
         e0:a4:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:43 2026 by rpki-client