Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c9bc0a8-2cbf-3693-811a-67896dbd8814.roa
File:                     7c9bc0a8-2cbf-3693-811a-67896dbd8814.roa (raw, json)
Hash identifier:          hWoZP8PzrgFfz87bhb9GmHC9mbHVIkG4vp1fKoloZbg=
Subject key identifier:   A5:70:0D:E4:F0:CD:59:FD:27:89:76:09:53:DE:22:6B:AD:B1:C5:15
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8D8FF40A6E5AD245A87CE600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c9bc0a8-2cbf-3693-811a-67896dbd8814.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     31898
IP address blocks:        134.185.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:f4:0a:6e:5a:d2:45:a8:7c:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=ecd52b0b-c63e-47f4-8b92-b14182b9946f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:b1:f8:0d:d9:2d:ff:cd:12:5a:e5:19:f4:
                    1e:47:46:b5:dc:a4:60:5b:95:6a:98:7d:ca:d9:d5:
                    06:b3:bb:b8:9a:fe:33:79:32:4e:d7:e2:06:ee:b3:
                    ba:e4:2d:46:7e:64:67:de:d6:58:90:f0:ce:ff:39:
                    65:f3:7d:0c:21:e7:01:c5:c3:ab:db:9d:d9:5a:7b:
                    1e:2e:a4:8a:79:9d:d2:26:20:c8:29:c6:22:21:4f:
                    fd:23:ff:a5:93:18:86:b2:28:94:41:6f:17:55:66:
                    e8:9d:90:bd:b6:bf:e9:57:f5:f7:27:c2:60:3f:40:
                    85:c4:fa:f7:ef:d8:a7:ff:2d:e9:8a:1f:6a:f5:7a:
                    ac:78:cd:9b:ac:10:b3:2a:15:90:23:2b:db:f7:bd:
                    26:0c:be:0c:55:a9:f7:3c:ce:1c:41:ec:a0:73:5a:
                    c3:c3:db:7f:6f:e0:78:83:a6:01:98:f7:9a:85:1c:
                    3f:39:56:c9:a3:a6:3d:77:94:03:79:77:b5:19:e7:
                    cb:e2:93:87:2d:37:a0:92:f3:5d:b1:99:3b:4c:f4:
                    e7:22:61:0f:00:96:ec:3e:75:3e:e6:30:a7:9c:af:
                    ab:7c:32:b2:d2:4f:8c:0d:c3:7c:4f:29:e0:97:01:
                    36:3e:72:55:15:75:88:d0:2d:a7:39:b5:cb:61:00:
                    85:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:70:0D:E4:F0:CD:59:FD:27:89:76:09:53:DE:22:6B:AD:B1:C5:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c9bc0a8-2cbf-3693-811a-67896dbd8814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.185.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:18:1b:30:04:b1:cb:c1:d0:c3:0c:b6:b1:7b:57:eb:90:cc:
         a1:9a:78:ff:92:74:b4:6e:21:8d:cc:d7:db:29:59:76:c1:c4:
         f6:b3:34:47:8a:4d:c6:5c:9d:5c:3f:c8:14:03:08:eb:ab:cd:
         ef:29:e4:7b:ef:ca:16:1d:79:80:ad:61:0f:b8:2e:0f:a5:24:
         a5:10:e1:92:e9:f2:f5:9d:83:10:f1:fb:7f:c2:6c:4b:55:a2:
         e9:74:eb:60:07:1b:ae:e6:2a:b5:36:d7:45:ce:3a:23:30:9d:
         e0:ad:4d:e5:72:fb:db:f2:db:3b:89:94:f0:d8:0b:e6:62:e9:
         30:54:01:ca:0d:3f:56:2b:9e:0a:91:b5:c9:e5:70:2f:f1:c7:
         b8:a9:9b:fc:47:c6:0d:ac:8f:1f:11:6f:15:e7:b6:7a:98:2d:
         bd:68:fa:8e:4e:b7:2e:a0:4e:cf:0c:36:23:9f:86:80:c1:50:
         18:55:09:38:b1:52:4f:53:8e:f3:2f:a3:bb:9a:6e:33:e2:a9:
         a1:49:e2:76:f4:45:86:de:7d:e7:a3:d1:7f:fe:7b:6d:97:5d:
         e7:21:5b:ee:59:22:38:97:02:96:04:50:ce:d1:cf:e4:6d:11:
         73:a9:ed:c8:96:55:97:0d:60:fa:fd:e7:ce:de:c7:95:3d:ec:
         0f:e8:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:07 2026 by rpki-client