Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/71adc334-b8e0-3cc4-984f-40714fe56c99.roa
File:                     71adc334-b8e0-3cc4-984f-40714fe56c99.roa (raw, json)
Hash identifier:          8dyIgNqSsizxsSK2GLhlhRzswyxHtu0VuNTsLvTbDIY=
Subject key identifier:   4F:17:07:55:71:7E:B1:26:82:70:45:CC:3A:22:7B:DD:5E:E0:33:15
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF99CBB3BF7A2BB8FBBA900
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/71adc334-b8e0-3cc4-984f-40714fe56c99.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        151.106.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:9c:bb:3b:f7:a2:bb:8f:bb:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=0691fc59-32ea-46f4-8ceb-ac8e4aaa1d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:73:ba:a3:33:23:2c:14:30:af:a1:68:94:
                    28:1d:85:ef:e7:67:68:b1:0a:48:f3:84:01:66:f9:
                    63:32:be:55:c4:83:03:22:64:f2:56:3b:3d:f1:1d:
                    41:b3:bf:03:76:60:bb:91:55:20:2a:61:f3:25:34:
                    49:70:33:fa:a4:2a:0f:a4:59:5f:15:18:d3:ca:50:
                    52:24:a5:25:fd:fe:d3:29:f4:14:ed:10:9c:16:76:
                    94:88:dc:ff:7b:ad:cd:bc:c3:44:7c:e7:d1:1e:63:
                    54:72:1a:30:30:ef:78:69:c3:3c:16:0b:64:56:be:
                    1f:e2:dd:b4:24:1c:d4:dc:80:21:83:bc:e4:83:38:
                    74:b5:ec:42:79:b6:f2:45:08:12:d0:9d:13:0b:df:
                    0a:70:4b:ab:b1:d7:b5:10:aa:40:a9:fd:36:ce:d5:
                    c2:d8:78:9d:9d:9c:a4:62:2d:31:c5:05:f4:45:4f:
                    78:a7:1a:1c:24:9c:33:a7:c3:e2:ec:de:aa:cb:47:
                    a5:fd:83:aa:00:36:60:b4:00:dc:4d:1f:51:0f:8e:
                    6c:0c:cd:5b:18:1d:e4:ca:d7:52:14:0f:89:fe:6a:
                    8a:4d:b3:25:b7:3e:03:e9:fd:20:74:9f:9e:a1:34:
                    db:f1:57:ca:d3:d9:6e:fb:ae:72:45:39:60:7a:1b:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:17:07:55:71:7E:B1:26:82:70:45:CC:3A:22:7B:DD:5E:E0:33:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/71adc334-b8e0-3cc4-984f-40714fe56c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.106.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9d:c2:6b:f5:e7:21:17:da:cb:72:e3:15:90:d1:4a:99:f4:
         15:da:14:42:4d:54:b6:b0:c1:96:c8:d7:3d:d3:91:e1:23:0d:
         77:89:4d:34:ea:4f:56:a4:c6:3b:68:16:fe:57:eb:7e:88:4c:
         51:93:c7:02:42:99:c2:3e:98:43:f8:f3:81:d5:88:e1:71:f2:
         1b:d1:e7:43:43:5c:4c:6e:32:87:e9:a3:0d:b8:d6:25:54:40:
         36:3d:39:8e:07:b7:d2:75:79:39:a8:08:60:8c:0e:a9:7c:c0:
         1d:31:b0:a8:bb:fb:b8:5e:8d:00:2e:97:ef:34:76:d1:6b:c5:
         cb:1f:64:ed:c1:18:66:4f:92:7e:bd:0f:a8:b9:21:41:22:6f:
         47:ec:93:3e:6e:a7:20:5b:c1:19:ec:62:81:bf:02:58:96:d5:
         b5:f4:98:1e:56:74:5a:36:59:58:0a:52:28:3e:e7:b4:a2:96:
         56:d9:e0:f8:82:23:ce:db:dc:14:1e:1e:69:62:2d:2b:e5:18:
         c2:b0:77:37:a9:7e:d3:5e:c7:04:b9:bd:c8:86:8f:58:80:e7:
         b1:3d:1f:bc:9f:cb:61:13:d7:95:fd:84:fe:25:05:9f:15:f4:
         4b:fa:b6:d1:6e:96:8b:74:33:9b:6a:fd:d9:67:69:2c:7d:ee:
         91:57:01:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:23 2026 by rpki-client