Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75ccbcf3-4e23-35e5-bf39-07781ecddc2c.roa
File:                     75ccbcf3-4e23-35e5-bf39-07781ecddc2c.roa (raw, json)
Hash identifier:          gbp/43yJkhkQaiNOdXSEtHm+CdC3mGlzWmg7V+z0ZX8=
Subject key identifier:   73:0B:DC:16:9B:17:4D:1D:F3:13:6D:5B:9D:7B:9A:A5:13:3D:4C:C4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D9A2031BDDA53468EC69C5400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75ccbcf3-4e23-35e5-bf39-07781ecddc2c.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     31898
IP address blocks:        192.22.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:31:bd:da:53:46:8e:c6:9c:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=56cbb971-2d19-45be-afb2-3acdc9034540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:c4:09:55:a4:1a:2e:98:84:b4:35:3f:b8:
                    b4:ff:19:9e:99:b3:84:cc:5e:3e:2d:79:c1:b4:da:
                    49:40:19:3b:2f:09:6e:23:ad:5f:7e:73:5f:31:4b:
                    9c:e0:07:e2:05:a4:81:e0:e2:5c:93:d8:7d:8a:87:
                    0a:a5:dd:c0:c7:56:8f:49:f0:78:33:0e:3a:91:e8:
                    0a:cc:77:1c:63:01:bf:a0:ed:cd:c1:3b:f8:e9:41:
                    f7:13:f7:a8:74:b5:ab:40:a8:52:2c:12:d7:06:ee:
                    dd:f2:9e:fe:11:d1:ca:3c:68:70:fe:b4:83:f8:c9:
                    89:7f:d3:84:c6:c4:48:dc:86:56:8d:5a:c7:5f:0b:
                    e1:ee:26:68:56:f1:30:89:05:e9:85:d1:36:6e:78:
                    10:bb:12:e8:b3:f1:7c:27:c3:a1:10:e5:ef:8f:86:
                    02:d5:70:2c:8c:89:aa:45:b9:b7:7f:96:26:40:d5:
                    a4:7f:1e:df:2c:46:4c:6b:45:e0:5a:68:21:e6:b3:
                    95:d9:7d:61:06:54:6f:06:f4:f4:e5:d0:19:37:16:
                    65:1c:24:f9:2a:83:22:d7:6d:62:75:42:73:d5:21:
                    ee:8b:9c:60:7a:3d:ce:a3:aa:1e:c5:b6:46:e8:87:
                    06:fd:a6:90:3d:c3:73:07:8d:e3:e5:b9:e5:82:45:
                    88:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0B:DC:16:9B:17:4D:1D:F3:13:6D:5B:9D:7B:9A:A5:13:3D:4C:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75ccbcf3-4e23-35e5-bf39-07781ecddc2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.22.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:63:c7:38:c5:0a:e2:be:ee:69:68:9f:44:a2:d3:fb:c3:b5:
         cd:a8:71:af:53:ce:80:b2:d9:10:ed:8f:9a:3b:cf:91:79:8e:
         03:cb:09:89:1b:cc:ad:58:6a:67:2d:fb:fa:91:31:90:64:61:
         d2:14:58:23:0d:f1:88:f2:cd:e8:0a:db:ff:4e:5b:3d:88:81:
         07:60:d5:9d:30:94:e8:b6:1e:00:bd:3c:0c:3b:fe:83:6e:33:
         e7:03:16:a3:7c:d6:3e:03:9c:01:b1:e8:e5:30:a2:71:57:51:
         b8:23:fd:1d:32:50:a1:e9:c6:fa:b6:f5:ed:84:b9:a4:37:e8:
         c1:32:0d:9f:33:b6:fe:07:2e:3a:70:58:58:22:08:2d:d5:88:
         4b:69:c8:7e:02:b6:4b:55:11:a1:f1:0d:fd:6f:7a:ac:ad:42:
         bd:1c:06:5d:68:1d:9b:a8:ce:a0:a4:84:79:bb:31:e9:d3:fd:
         45:05:47:c6:b2:19:74:a1:25:1b:f0:56:ea:d2:9f:d5:8e:d9:
         1e:71:53:26:b1:9e:4f:17:fb:5a:ec:a2:7e:52:bf:3d:8c:28:
         b3:0a:9d:b2:64:dd:d1:38:d6:8e:a5:ad:08:2a:5b:6e:f5:28:
         4f:e0:9c:8e:0b:d3:ac:1b:92:1e:7b:3c:b8:fd:1e:a2:fc:27:
         5d:96:e4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:27 2026 by rpki-client