Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7e981cce-ee03-3015-a8e5-e885cfa8c71e.roa
File:                     7e981cce-ee03-3015-a8e5-e885cfa8c71e.roa (raw, json)
Hash identifier:          SZxIVClTcGFwXAxYmL8ddFB+A7WmQ1xCchlhgEao+fM=
Subject key identifier:   B4:99:5E:9E:FA:A3:D1:EC:E4:36:7E:3A:94:AE:1B:EE:1E:26:B6:6C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DC6CB02DBE2650E5FCAD3B600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7e981cce-ee03-3015-a8e5-e885cfa8c71e.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        204.216.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:02:db:e2:65:0e:5f:ca:d3:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=77e216f3-a064-49d9-a903-b04883e1dee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ab:96:0b:95:ec:4b:db:42:66:b9:d3:06:07:
                    fb:81:a7:32:4e:9c:29:39:e9:19:1d:12:01:32:e4:
                    89:f6:c9:14:13:74:0e:fd:47:18:35:39:d9:9f:ea:
                    9f:de:3c:1f:83:50:c0:23:2a:0f:3b:64:06:53:1e:
                    ec:34:d7:3a:84:d7:6a:3d:83:65:9f:75:54:90:40:
                    d2:04:51:f9:ca:53:be:31:ca:40:a0:31:fb:a9:65:
                    6a:f7:ab:37:62:49:62:b2:94:67:aa:dd:05:b2:03:
                    90:a1:62:2f:ac:90:e3:5d:12:0b:71:90:3a:77:c7:
                    c2:d0:68:96:18:57:60:37:24:0b:44:fe:37:90:29:
                    d8:a2:02:f1:40:47:92:41:d3:f0:1d:53:10:e5:cc:
                    e6:b6:ed:49:cf:a2:a5:ca:28:50:09:00:70:e0:e5:
                    c0:ce:6e:31:fe:07:88:20:79:a6:82:ab:85:83:07:
                    a1:26:be:31:76:ae:59:a9:37:ec:b6:e1:dc:53:c5:
                    56:c3:01:35:8c:dc:cb:25:d5:8c:66:02:ce:c8:ae:
                    e6:42:62:35:3e:ab:e6:94:57:da:1c:3f:70:d8:6e:
                    83:e1:27:32:e7:11:14:7d:20:e2:5c:6b:83:52:45:
                    53:f2:d5:f1:2c:57:9c:2b:41:f0:ad:94:62:3a:75:
                    f4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:99:5E:9E:FA:A3:D1:EC:E4:36:7E:3A:94:AE:1B:EE:1E:26:B6:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7e981cce-ee03-3015-a8e5-e885cfa8c71e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.216.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:cb:09:9f:d3:88:1f:2a:c6:ab:51:5c:1a:ff:2b:ec:c4:
         bc:9b:23:04:24:c3:5f:9a:d3:ae:07:96:18:da:47:a6:0d:ec:
         ea:af:85:59:5e:b8:4e:6d:d0:ae:6f:af:38:45:a3:14:1e:03:
         81:fa:2e:4d:b5:82:41:27:77:0d:ed:c2:78:64:38:1e:06:53:
         dd:d0:02:29:73:96:78:ec:42:a5:c3:4c:e5:d2:36:6d:e8:79:
         ca:de:dd:d1:09:28:f1:da:44:04:7d:b0:b4:46:0a:8b:f8:7a:
         f9:33:aa:cf:ff:6f:9a:b0:dd:0d:1b:38:59:e1:18:c5:0f:b4:
         27:58:94:32:ff:44:87:38:f5:79:84:ca:41:1f:52:b1:d2:c6:
         46:f7:af:40:44:3a:5d:12:79:7f:6f:5a:0e:1b:71:8b:29:55:
         76:30:a0:35:2a:9f:52:04:7b:43:7e:2d:fe:07:4b:9a:7c:a0:
         da:6a:a1:f2:f6:13:75:69:56:20:73:fb:10:50:23:e5:8b:3a:
         49:25:95:4b:b6:ec:b0:ae:1d:cb:9e:4e:9c:3e:95:87:a2:a7:
         39:cc:bf:c3:3d:1e:6d:b0:82:db:e2:99:35:64:d2:39:69:56:
         ef:9d:2e:47:98:d5:b6:3f:3c:e1:b1:66:4a:1e:f0:47:f6:bc:
         fd:ac:45:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:35 2026 by rpki-client