Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6406dade-3a7d-3b04-a02c-82ec79296373.roa
File:                     6406dade-3a7d-3b04-a02c-82ec79296373.roa (raw, json)
Hash identifier:          x3XaY/zGNOx/qtvq/fkV1I2ZCYmQk5C/suTYAgZ2Q9c=
Subject key identifier:   0E:F2:A4:5D:D3:D7:27:3B:F3:F4:C2:7F:A2:5F:C1:BB:0E:B8:E2:40
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DB4A5B508B67C941DC666A400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6406dade-3a7d-3b04-a02c-82ec79296373.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     31898
IP address blocks:        147.224.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:b5:08:b6:7c:94:1d:c6:66:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=d9ce6f6a-1532-4433-8bf5-ee151acd6011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:b4:5b:76:de:15:dc:29:e5:68:49:bd:49:
                    50:3a:8a:35:09:d0:21:c0:3a:43:6d:f4:b0:96:ff:
                    07:01:1b:22:1a:4c:37:cf:b8:b4:10:42:19:31:e9:
                    ec:a8:fa:2f:68:c2:5c:a9:78:e1:77:b7:44:ab:4b:
                    f4:cb:95:e5:10:60:f6:c6:d1:3a:6a:4b:96:c9:75:
                    6d:0b:44:fb:7a:33:0e:f1:f5:d2:c3:f4:5d:0f:65:
                    6e:92:c0:f6:50:96:5e:32:e0:94:24:9a:77:6f:e0:
                    2f:cf:36:82:63:6d:29:39:03:ca:78:e4:53:04:7e:
                    ba:84:84:d3:1e:2e:76:a7:b7:06:ce:30:20:47:ec:
                    97:ef:41:81:76:24:f6:4e:c6:a9:c0:e6:0c:3e:88:
                    a5:b7:db:93:03:40:ad:79:2b:32:f8:5f:f3:15:fe:
                    8c:8d:5d:c3:ae:b3:cc:e4:71:18:be:f0:0c:5b:0d:
                    e8:7d:0f:3b:ab:fe:7b:4a:bd:5b:91:33:5c:6f:a1:
                    e8:6f:92:7a:32:17:81:76:de:de:db:53:c7:84:ae:
                    e7:a4:3d:ad:c9:10:06:04:53:9a:b0:8d:c3:e3:00:
                    6d:33:10:3b:e5:84:1a:56:fc:8b:aa:ed:71:9e:f2:
                    94:49:90:c0:25:21:0d:bb:cc:27:d6:4c:32:3e:83:
                    86:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F2:A4:5D:D3:D7:27:3B:F3:F4:C2:7F:A2:5F:C1:BB:0E:B8:E2:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6406dade-3a7d-3b04-a02c-82ec79296373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.224.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a9:94:d8:e7:eb:fc:b1:b3:37:58:4b:d9:43:9a:0d:3c:86:
         3d:d3:4f:f0:fe:64:bb:d0:fc:7d:f5:56:58:28:e4:dd:07:51:
         62:b0:35:f3:bc:27:b9:7d:41:e0:0a:6c:da:5a:e0:f5:a9:a9:
         f7:04:cc:ea:9c:1e:f1:cf:45:d0:41:77:78:c3:39:7f:b7:a3:
         25:76:64:1a:c0:de:ca:f6:d8:b7:98:6b:42:d8:53:82:a8:2f:
         65:12:32:31:f5:e1:7c:5b:97:28:3d:70:35:38:62:ad:3c:cd:
         88:ba:24:fd:4f:fa:88:47:10:e4:dd:f8:46:8d:7b:fb:99:ab:
         f3:77:6c:fe:43:be:ba:5a:54:1a:07:33:4d:52:19:a5:58:fc:
         9f:fb:93:d5:1a:65:f6:74:9a:85:34:5b:ea:29:6e:62:c8:86:
         6c:fc:97:31:ac:40:99:7f:98:99:41:cc:b6:32:73:c6:13:78:
         e4:ae:d1:90:c6:18:26:fe:56:51:a6:e3:24:c2:c6:89:c5:e8:
         58:4e:bd:a2:92:d2:18:80:a9:3c:6f:2b:88:c9:1a:02:0f:b2:
         88:2b:b1:bc:f5:9d:ff:c7:bf:6c:af:91:30:2e:33:72:17:bc:
         e8:bc:7b:15:f7:ef:02:f6:25:c0:d6:6f:7d:fe:24:ca:a8:71:
         ac:46:81:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:47:50 2026 by rpki-client