Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/170d2dfb-994e-322a-91a2-e7e62ffe733f.roa
File:                     170d2dfb-994e-322a-91a2-e7e62ffe733f.roa (raw, json)
Hash identifier:          Eevnx8ltlOWYrJ+KPYL7+tlq1c01z42R85iV6Y3mq3Y=
Subject key identifier:   81:B3:BE:94:50:3F:A7:68:EB:8B:02:EB:82:D7:18:43:22:06:F3:E1
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D98BA9DA07285E384850DD640
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/170d2dfb-994e-322a-91a2-e7e62ffe733f.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        140.204.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:9d:a0:72:85:e3:84:85:0d:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=e6d220bc-73c2-4d72-b6a0-7b897e1a68ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:3f:66:90:1b:3c:92:25:dd:89:50:4c:5e:
                    c5:d3:f2:ae:8b:47:ea:9d:28:ac:ab:22:1e:0a:fe:
                    f2:da:cc:2a:1b:b4:e2:0d:a2:d4:65:03:e3:18:80:
                    4b:ad:6d:e2:51:91:6a:57:be:ad:60:73:1e:fe:b2:
                    24:2b:47:a2:85:62:70:6f:0e:cc:7f:b3:2b:7b:d3:
                    8b:78:3c:ca:4e:16:67:9c:9c:5f:fd:c1:df:34:5e:
                    27:67:92:22:85:15:a8:a2:88:e8:99:8e:e1:71:d6:
                    85:41:fa:4a:5f:f4:61:0f:3b:3e:2c:d2:b8:74:2b:
                    71:d1:ba:89:97:a5:da:e3:54:1b:73:00:f9:05:34:
                    02:6a:6a:61:80:43:53:b8:a7:2e:e2:a0:37:9d:e8:
                    74:1a:f7:30:1d:3b:5f:14:a8:fc:7d:aa:c7:84:a9:
                    40:51:0b:18:e9:23:8f:b5:f8:d9:af:40:f4:2d:89:
                    92:90:65:d3:83:e0:45:fe:a3:c1:9d:b5:19:1b:f4:
                    25:1b:58:67:a6:58:c3:6e:d4:91:39:30:54:2c:74:
                    e7:e8:58:c3:5b:03:80:1d:52:76:8f:42:97:b2:47:
                    05:76:91:5d:16:3a:36:e9:ad:f9:0b:81:46:ca:60:
                    83:97:d9:82:b2:fd:a6:68:76:4d:d6:e8:e4:11:0e:
                    c7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B3:BE:94:50:3F:A7:68:EB:8B:02:EB:82:D7:18:43:22:06:F3:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/170d2dfb-994e-322a-91a2-e7e62ffe733f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.204.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:bb:2e:51:94:6b:e8:cc:27:ca:96:a6:87:50:af:1e:66:77:
         40:a5:4c:e5:5a:9a:00:1f:5a:f2:44:d2:cb:57:51:42:3d:ad:
         56:65:94:6c:0a:e9:4a:84:c2:59:29:7a:6e:e9:4a:ce:32:4c:
         bb:ef:85:42:c0:52:5e:c3:ca:96:ef:07:aa:40:0f:c0:1e:60:
         c0:06:f5:b8:0d:66:b4:1e:4f:32:70:64:b8:e9:7d:7c:18:e4:
         d6:2c:36:68:3f:dd:71:07:cf:38:fe:76:46:15:a2:40:1c:86:
         34:80:ad:84:64:ab:fd:35:1d:d6:70:2a:71:f3:f6:0c:a8:c9:
         fd:62:39:ad:41:2f:41:3a:11:df:2b:25:cf:15:07:6c:b3:cf:
         79:ce:bd:76:2f:a2:40:32:1d:d1:39:ff:6b:08:55:fe:f8:43:
         c0:98:e5:61:79:81:d2:87:5d:f9:1b:86:d6:60:6e:12:66:e1:
         54:15:86:cf:59:c6:23:cb:b2:f3:e5:ae:0f:13:8a:90:e0:08:
         d4:57:84:49:ef:3d:9e:28:c7:bf:ae:b3:a3:18:ba:bd:a6:3d:
         cb:9c:bf:37:8a:67:c8:cd:ce:7a:49:db:f2:26:a0:58:17:a3:
         4a:61:16:bf:3b:99:fc:0c:bf:41:f4:f5:a6:ef:de:d3:4d:cd:
         f4:0a:f9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:18 2026 by rpki-client