Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/13a0ec93-acc4-35e1-a40a-f11f034b25f4.roa
File:                     13a0ec93-acc4-35e1-a40a-f11f034b25f4.roa (raw, json)
Hash identifier:          +HLEdSgm7vYvCxjIWTbv6NI1ea4p8m1X2c96SM09eFk=
Subject key identifier:   A6:60:46:CC:26:5F:AD:A0:B4:98:92:0D:75:CC:BF:EA:EF:54:78:AA
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D9A20010DE0B0A6D1D5634A00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/13a0ec93-acc4-35e1-a40a-f11f034b25f4.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     31898
IP address blocks:        194.195.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:01:0d:e0:b0:a6:d1:d5:63:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=5c39630c-58f1-4f59-a04f-6b5d476f7cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:56:22:8d:6e:f6:d7:44:7b:6c:d2:63:36:3d:
                    f0:6b:32:5f:91:77:b0:9d:05:04:75:41:f4:ed:00:
                    ad:fa:7c:69:8e:c1:9b:fa:d7:8e:6a:84:1f:9c:7d:
                    e6:87:55:cc:1d:0e:a4:01:3a:ff:fa:b6:cd:0f:88:
                    2d:b9:f4:17:80:3c:6a:d1:52:8f:f2:92:81:75:32:
                    42:ba:b2:36:35:f9:3a:0c:fa:ae:60:ea:6d:11:0c:
                    e5:f4:30:87:d8:99:fd:a5:21:6e:ed:bb:be:68:21:
                    e0:a2:87:b2:7e:a4:72:ed:06:b5:ab:f3:85:2a:c9:
                    3c:ca:70:bf:67:69:3f:3e:9c:a2:53:39:55:1f:50:
                    3a:07:bb:12:f3:31:d4:df:de:98:23:af:b4:71:ae:
                    6e:0f:06:b9:05:3e:ed:55:e0:29:f7:32:a2:e9:ef:
                    ed:ac:6a:95:6e:15:0a:8e:90:fb:e0:92:4d:30:d3:
                    00:84:2e:78:c6:53:07:17:dc:d0:c7:ea:eb:74:27:
                    53:2f:ce:1a:ae:00:58:43:08:31:25:32:f7:fd:92:
                    d0:24:c3:29:29:d7:2a:96:e1:4c:65:55:38:e6:8e:
                    d9:df:90:77:34:1d:5c:69:3e:7c:a3:20:10:71:44:
                    90:74:88:ff:b1:b7:ba:4b:b7:24:e6:f7:c6:79:e9:
                    1c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:60:46:CC:26:5F:AD:A0:B4:98:92:0D:75:CC:BF:EA:EF:54:78:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/13a0ec93-acc4-35e1-a40a-f11f034b25f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c4:e7:e5:23:fa:6b:4e:d3:52:44:a4:8e:79:1c:14:b2:8c:
         86:08:e9:da:b6:d4:92:3f:33:a3:de:8f:52:02:99:04:74:a5:
         fe:4a:1b:a4:af:55:8a:71:84:47:49:fa:60:49:05:22:65:68:
         94:44:ca:27:4e:6c:58:6c:47:d2:29:52:48:77:1a:3f:bf:e0:
         f0:1d:b9:8e:59:9d:70:80:3b:0c:eb:27:24:41:98:c3:6c:c6:
         45:80:e2:c7:5b:47:10:25:63:ea:a3:9b:af:99:e0:5b:99:a0:
         73:56:6e:c7:1a:e8:6c:96:aa:6c:b2:b6:9e:b8:5f:11:70:c0:
         ed:41:b5:43:8d:a9:20:34:fa:d0:11:d3:3e:58:77:cd:c7:29:
         41:10:03:69:38:dd:dc:83:57:6b:96:65:82:9e:a6:22:b5:42:
         a7:0b:7a:0d:30:28:a0:3e:ea:89:80:7c:01:41:41:9f:3d:a0:
         02:24:88:ea:5e:0f:15:3a:12:91:cd:1d:28:3c:18:1c:79:de:
         45:57:e8:61:35:67:fe:0e:b1:5f:0a:00:fe:ff:e6:65:0d:45:
         20:45:56:04:c6:ef:f9:d0:6a:7d:1d:b5:f7:bc:15:ce:a1:1e:
         b8:db:b7:ad:29:5c:a3:4f:17:30:2f:cb:7d:8c:49:01:ae:d0:
         d9:dd:bf:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIAEN4LCm0dVjSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
NWMzOTYzMGMtNThmMS00ZjU5LWEwNGYtNmI1ZDQ3NmY3Y2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVYijW7210R7bNJjNj3wazJfkXewnQUEdUH0
7QCt+nxpjsGb+teOaoQfnH3mh1XMHQ6kATr/+rbND4gtufQXgDxq0VKP8pKBdTJC
urI2Nfk6DPquYOptEQzl9DCH2Jn9pSFu7bu+aCHgooeyfqRy7Qa1q/OFKsk8ynC/
Z2k/PpyiUzlVH1A6B7sS8zHU396YI6+0ca5uDwa5BT7tVeAp9zKi6e/trGqVbhUK
jpD74JJNMNMAhC54xlMHF9zQx+rrdCdTL84argBYQwgxJTL3/ZLQJMMpKdcqluFM
ZVU45o7Z35B3NB1caT58oyAQcUSQdIj/sbe6S7ck5vfGeekcXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKZgRswmX62gtJiSDXXMv+rvVHiqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTNhMGVjOTMtYWNjNC0z
NWUxLWE0MGEtZjExZjAzNGIyNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwsPCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKzE5+Uj+mtO01JEpI55HBSyjIYI6dq21JI/M6Pej1ICmQR0pf5KG6Sv
VYpxhEdJ+mBJBSJlaJREyidObFhsR9IpUkh3Gj+/4PAduY5ZnXCAOwzrJyRBmMNs
xkWA4sdbRxAlY+qjm6+Z4FuZoHNWbsca6GyWqmyytp64XxFwwO1BtUONqSA0+tAR
0z5Yd83HKUEQA2k43dyDV2uWZYKepiK1QqcLeg0wKKA+6omAfAFBQZ89oAIkiOpe
DxU6EpHNHSg8GBx53kVX6GE1Z/4OsV8KAP7/5mUNRSBFVgTG7/nQan0dtfe8Fc6h
Hrjbt60pXKNPFzAvy32MSQGu0Nndvy8=
-----END CERTIFICATE-----
Generated at Wed May 13 12:27:44 2026 by rpki-client