Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7155f05c-26ec-31f4-a427-473151b0689d.roa
File:                     7155f05c-26ec-31f4-a427-473151b0689d.roa (raw, json)
Hash identifier:          TyTl5PcfOXYIOD3XF9e/Efda75vUAg6ugbNisNjFLv8=
Subject key identifier:   00:D2:18:20:3E:BE:B8:6E:0B:EE:72:05:CA:74:8C:E9:8D:D0:D9:E7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8AC53F6C315DCD14D1F02D00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7155f05c-26ec-31f4-a427-473151b0689d.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        132.226.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:3f:6c:31:5d:cd:14:d1:f0:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=987b8f0b-1b15-47fa-ae81-9a7086357543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:29:8f:e5:bf:0f:39:42:ed:b5:37:0d:9d:27:
                    47:98:13:3b:19:dc:5b:79:05:ed:97:1c:c4:4e:b5:
                    59:e0:a0:22:af:de:ef:9d:3a:92:6a:d2:63:29:de:
                    0a:98:76:b8:6b:16:bf:3c:b4:c2:cd:0f:64:e8:18:
                    86:34:43:46:18:a7:33:39:ca:f6:ee:40:20:a6:3c:
                    28:df:57:65:6d:aa:34:b2:31:c9:3c:d7:9f:32:20:
                    c2:1f:0f:5e:bf:aa:93:be:c1:d7:d3:31:a1:20:6c:
                    b7:78:ad:e6:01:84:7b:7c:28:cb:59:b2:cc:0e:71:
                    78:ea:86:56:69:cb:bb:3e:af:ce:53:1d:69:9f:ae:
                    d8:90:03:71:a9:f0:eb:d0:4c:bd:c2:c8:a8:52:e4:
                    2b:4c:5a:b4:06:01:cf:f9:82:2f:e0:91:54:78:b8:
                    03:f8:d2:a5:28:88:f7:37:3f:64:cf:08:82:0c:de:
                    98:d1:08:a9:ea:fe:1d:7e:90:84:3c:5f:3a:c6:b5:
                    55:e2:56:e1:54:cc:1f:d5:fd:0f:8c:54:92:3a:09:
                    75:f3:ed:f0:26:ea:a3:ed:e4:18:5e:37:c2:1f:07:
                    04:ad:dd:9b:e6:ff:96:91:af:33:5e:3d:50:4e:8c:
                    a3:d8:10:ae:47:2b:9b:07:04:c8:37:36:28:df:49:
                    5f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D2:18:20:3E:BE:B8:6E:0B:EE:72:05:CA:74:8C:E9:8D:D0:D9:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7155f05c-26ec-31f4-a427-473151b0689d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.226.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ab:03:04:38:1e:dd:62:95:c1:ce:8c:11:14:61:ee:b8:2a:
         d5:7d:f8:8d:d4:72:02:f3:f2:3f:27:88:26:47:9e:fd:a4:b7:
         8f:61:a6:52:aa:2f:02:f9:1f:b0:d9:8b:34:d1:60:d5:1f:6e:
         1b:0c:08:a9:22:63:c2:b1:b3:00:00:a9:18:5c:aa:09:b0:b8:
         e2:27:26:1a:5a:99:4c:a9:d3:2a:7f:f2:9d:76:95:6d:ae:0a:
         8e:36:10:d7:94:c2:77:7d:12:db:4a:46:fc:74:eb:1b:7b:c4:
         c5:0f:99:ac:10:89:70:d7:b1:67:b6:bc:a9:81:ea:58:df:d4:
         87:98:f1:24:3f:c4:34:e8:14:f3:ad:39:95:5c:a1:39:2e:f7:
         ed:fd:cf:83:4f:85:61:f6:a7:42:8f:cb:9e:c9:23:cc:72:d2:
         ff:f4:72:77:b8:93:64:32:b8:ce:f0:30:90:61:b1:4f:35:5c:
         13:19:f8:47:d3:fc:bc:7c:dd:de:a6:67:36:40:b0:7c:59:74:
         49:1b:f9:42:9c:51:3f:4b:12:00:c6:d5:75:00:71:de:85:aa:
         04:a2:56:d9:56:91:df:7a:8d:3b:1c:a4:86:02:5a:be:28:63:
         90:9c:16:4e:86:3e:3c:74:43:46:d3:fb:e9:70:24:4e:62:79:
         bb:84:52:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:29:21 2026 by rpki-client