Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/421cc3c0-f28f-35bb-a9ec-9956d4e7729d.roa
File:                     421cc3c0-f28f-35bb-a9ec-9956d4e7729d.roa (raw, json)
Hash identifier:          dugK2K58yW8Ybe17aQiQE4nHPsp7pX5CTlGbDr2SPN0=
Subject key identifier:   20:F3:23:08:34:44:5C:F3:13:01:63:1D:28:F9:C2:35:B4:31:67:63
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF56D50B186410425E76F00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/421cc3c0-f28f-35bb-a9ec-9956d4e7729d.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        129.156.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:6d:50:b1:86:41:04:25:e7:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=6798c4d3-9105-47be-a668-f06bd599abec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:71:19:eb:e8:00:5e:81:2b:db:d4:27:c1:
                    5c:43:1e:df:cd:b7:cf:f9:41:a2:19:e3:f3:31:55:
                    d1:0c:bb:c2:39:d5:75:8c:d8:10:c2:33:e6:1f:3a:
                    8d:a2:5e:08:b0:47:c0:75:57:a3:86:16:9f:81:94:
                    c3:0c:9e:a3:c0:2a:ee:df:a0:c3:01:16:6b:34:8d:
                    d5:bd:69:6c:de:05:2e:93:86:b0:cd:f7:fa:35:f0:
                    45:5e:c0:bd:7f:67:42:9c:45:d1:b0:19:36:76:72:
                    ce:6e:cf:d8:ad:06:50:62:a8:ad:74:9e:a8:1d:3c:
                    a7:c5:cf:a6:01:4e:e2:00:d1:1e:0f:26:b5:4d:4c:
                    69:c1:ab:78:59:69:11:a7:82:da:6e:c4:ee:12:de:
                    be:f4:53:f2:0e:65:ac:93:0c:49:ef:ec:a5:97:16:
                    29:be:4a:2e:42:07:3f:d1:29:42:14:9e:cd:17:50:
                    0e:fd:34:3b:10:c1:d9:0c:e4:71:28:56:c4:45:c7:
                    9c:9a:47:6b:ab:cf:b2:a5:ee:23:f8:42:bf:28:82:
                    8c:b2:b2:b3:76:b8:68:78:b7:dd:96:96:af:bd:47:
                    da:47:97:1a:66:7d:8e:27:d0:ac:2b:10:af:e3:30:
                    a0:e2:86:8e:09:d1:20:98:f2:f7:a9:13:37:43:15:
                    72:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F3:23:08:34:44:5C:F3:13:01:63:1D:28:F9:C2:35:B4:31:67:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/421cc3c0-f28f-35bb-a9ec-9956d4e7729d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.156.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:59:71:99:87:bc:02:8b:4b:ee:0b:3b:42:a7:91:f0:8b:1e:
         03:10:68:59:6b:21:d9:45:9b:99:e5:05:2a:96:82:c7:8e:09:
         77:5a:a5:e8:c6:70:4b:de:00:df:bb:64:11:23:c5:ad:de:3b:
         4a:f7:46:20:cb:ae:a0:50:c7:7f:62:cd:38:fa:d1:94:89:cc:
         f0:bc:17:89:3a:05:3f:39:25:7c:e3:b3:e6:c2:98:5e:6b:eb:
         b2:77:29:8b:b2:a9:91:42:de:1c:ae:86:fc:7b:f9:db:2a:ca:
         3e:fd:8e:95:44:8f:53:79:dd:ff:73:5c:35:71:fa:d8:cd:76:
         15:b4:36:28:7b:fb:ff:4d:41:e8:ab:98:fe:b3:b8:04:13:95:
         e2:0b:47:2f:e8:25:17:9b:1f:d8:f9:40:88:14:49:5b:8d:c9:
         e8:2d:a9:2e:ac:a7:bd:e1:46:bb:fb:2c:2e:45:a4:13:27:9a:
         d1:13:57:a0:79:53:50:4a:a9:0b:24:7d:cf:f7:a5:b0:8a:82:
         8b:e6:c7:1c:0a:48:c7:89:0e:85:c3:72:de:2e:a8:e1:48:e1:
         cf:c1:10:a2:5b:c0:42:66:88:be:1f:47:c8:74:f6:ff:18:f8:
         a8:32:72:d0:c9:c6:c3:b4:96:3a:20:30:1d:c7:d7:a8:8a:40:
         8d:bb:0c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:45:45 2026 by rpki-client