Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/569123cf-c049-320f-b73b-099ca86ce74e.roa
File:                     569123cf-c049-320f-b73b-099ca86ce74e.roa (raw, json)
Hash identifier:          dLqu+M0lESzM16k21bdske7ML43myF8AfNiJXQwxEyg=
Subject key identifier:   39:A8:31:0A:E3:E2:C3:19:57:69:58:6A:DC:18:56:7D:43:2A:11:70
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D9E5029D39348B9EC2DF64680
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/569123cf-c049-320f-b73b-099ca86ce74e.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        144.33.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:29:d3:93:48:b9:ec:2d:f6:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=298e3a0e-3e6d-47ba-a65e-703c43828086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:c7:07:11:4c:cc:22:83:dc:75:33:83:4d:
                    02:06:39:39:72:e6:6c:2d:35:19:ee:f6:0f:51:52:
                    2d:3e:c5:f7:18:ca:1f:a1:05:96:45:eb:db:62:ae:
                    ef:38:73:1e:ec:8d:8f:c9:b7:a9:32:ba:25:9f:4c:
                    fc:3c:c7:ad:08:a1:39:72:ee:cf:c7:23:21:01:c4:
                    68:65:47:55:32:43:f5:ab:19:27:63:bf:aa:9a:0d:
                    17:53:f5:dc:87:df:97:99:a3:74:19:32:29:3d:3f:
                    71:7c:e4:46:61:7a:fc:a9:c9:22:e3:8c:17:0c:d2:
                    19:f3:f2:76:e6:e6:02:04:ea:d9:e9:86:ff:7d:4f:
                    59:84:e1:f0:62:2c:af:37:35:7a:05:38:e5:e5:a1:
                    da:a5:0c:72:a2:e6:89:1a:9f:de:32:00:ca:8a:e0:
                    0b:ac:44:9d:69:26:0d:02:7c:1d:a3:29:63:c5:e0:
                    ee:68:1c:30:02:c4:63:57:fa:d8:cf:c5:c9:48:23:
                    1e:94:9d:9c:35:a9:75:0e:0c:22:7a:7a:c5:0f:aa:
                    09:fe:8f:76:d2:62:85:c5:50:c3:af:80:6e:34:48:
                    84:24:b0:08:35:9f:45:12:91:be:1d:f9:ba:c2:68:
                    9d:1f:ee:f6:91:e4:11:b3:16:77:50:42:3d:5f:ff:
                    eb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A8:31:0A:E3:E2:C3:19:57:69:58:6A:DC:18:56:7D:43:2A:11:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/569123cf-c049-320f-b73b-099ca86ce74e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.33.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:d1:bf:dd:b5:db:1d:e8:d0:ff:1b:16:bc:82:ad:99:a3:30:
         80:f4:c1:b4:7a:86:2e:b2:ab:a7:b3:16:cd:61:5e:2f:87:11:
         c5:5b:31:15:70:26:f4:7a:6f:d1:9f:39:b6:e5:65:1a:73:d4:
         4f:c3:5d:c3:d6:2a:92:99:00:20:27:cd:9a:a6:31:2d:2b:59:
         18:bd:4b:32:af:d4:fe:72:a4:9e:bc:c0:24:b5:84:a3:49:b2:
         8d:2a:d0:de:80:6a:5e:5c:27:94:f8:96:5d:d4:8a:f4:2a:23:
         9c:15:6c:ca:2e:b2:56:b7:18:92:e7:15:de:43:5f:24:2c:50:
         1a:b8:77:ad:43:80:d9:77:e7:cf:0d:7d:e3:55:b4:e3:ff:9e:
         14:4e:06:f9:dd:a7:64:6c:02:69:91:5c:4c:b6:e1:e0:f5:05:
         1a:ff:ad:81:5f:61:0e:0e:d5:65:0e:ae:42:c9:18:48:d8:fb:
         c8:51:b7:21:c0:ac:06:a3:e3:e3:db:b8:b0:17:4f:5e:39:9d:
         e5:80:25:9f:76:4b:00:89:a8:1a:ef:91:fd:55:79:3f:fc:46:
         e2:de:05:60:87:4a:25:9d:51:01:a7:c3:e4:43:2b:c9:dd:8e:
         14:57:1a:1b:7d:52:f2:f1:2f:82:0e:af:bd:b0:f7:ab:a2:0f:
         89:bb:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:56 2026 by rpki-client