Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87a28bb3-ffd9-3b4f-9973-03157b2a4c4c.roa
File:                     87a28bb3-ffd9-3b4f-9973-03157b2a4c4c.roa (raw, json)
Hash identifier:          1HUtydK0hOVlC5BU50rhgbBUcsL1SFZRhHBPbvCIr5w=
Subject key identifier:   88:8B:C8:DB:85:64:34:8D:A9:0D:82:C0:F2:2E:D4:BA:D1:40:34:94
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8AC5551AC1CD40219E631400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87a28bb3-ffd9-3b4f-9973-03157b2a4c4c.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        140.91.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:55:1a:c1:cd:40:21:9e:63:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=b155c1e9-2313-48ae-9b15-c7f2c6b72ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:64:43:da:0e:f8:56:d9:c7:ef:b4:b8:61:1d:
                    3f:58:c6:86:08:1b:16:da:59:ae:c0:0a:e2:8a:b9:
                    45:d4:e3:bb:37:1a:91:b3:cd:a1:5e:0d:4b:bb:7b:
                    04:5d:65:5c:e8:60:4f:21:de:7c:5b:fb:3d:6b:75:
                    78:a8:2f:4b:ed:8d:68:c1:f3:6c:f2:8f:af:cb:12:
                    b7:71:f4:b8:05:4a:a4:44:67:f8:6a:f8:03:a9:ab:
                    d7:b2:f4:2c:e5:9e:85:8d:b0:71:37:57:36:07:2f:
                    66:dd:73:ee:1b:de:ba:17:7a:f2:47:5a:aa:6f:2f:
                    ea:bf:b3:47:f0:51:e2:4b:86:84:46:d8:b0:c0:16:
                    92:c0:30:38:cf:ef:ae:57:90:95:00:c8:b3:a9:6f:
                    58:ae:92:87:e1:e1:cd:16:5d:92:98:35:1e:5f:fb:
                    98:2c:ed:a8:7b:48:93:59:20:0e:93:a1:f0:23:3b:
                    94:04:43:8e:a1:ff:7c:ed:6e:46:76:89:bf:15:9e:
                    c4:f6:39:88:fd:5b:38:50:c1:ee:d7:45:92:80:2d:
                    48:7b:b7:bc:7a:4f:d3:ad:0a:32:d2:b7:95:af:ee:
                    88:fd:0c:56:98:bb:84:76:7d:73:5d:9f:d3:a2:d2:
                    87:c2:ee:da:82:31:57:63:d7:4b:7a:23:85:ef:81:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8B:C8:DB:85:64:34:8D:A9:0D:82:C0:F2:2E:D4:BA:D1:40:34:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87a28bb3-ffd9-3b4f-9973-03157b2a4c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:47:db:78:7b:f9:6a:3e:d0:cc:e8:af:f8:a0:44:f1:c3:1a:
         57:58:2d:1a:41:6b:ac:ad:cc:1e:09:78:2a:bd:43:59:6e:a0:
         5d:45:d1:6a:e5:7f:fc:c5:fb:ec:4f:bf:c7:59:36:55:23:a4:
         35:30:32:9f:7a:79:27:2f:15:35:b5:a7:81:45:b9:80:de:4b:
         b1:f8:2d:14:63:44:1c:a9:24:b6:d5:f9:39:98:d4:52:d1:28:
         05:dd:f5:6b:3b:55:10:63:6b:5e:c8:aa:b3:72:1e:7b:54:66:
         ae:0e:b7:38:c5:97:9f:fa:ac:4b:91:5e:8c:09:4c:f6:39:97:
         f4:1c:90:46:cd:fc:29:27:45:71:01:da:42:51:b1:1a:5e:f7:
         bc:0e:ca:2b:70:bb:42:cf:0e:89:c6:96:27:0c:db:3c:f2:9a:
         b5:a2:a6:11:18:07:95:78:d3:4e:b8:be:da:fb:d3:e7:bd:d3:
         ce:01:aa:49:dc:1b:69:58:fc:0c:fa:97:73:e8:74:4e:35:ce:
         af:f3:99:45:d1:88:81:f1:41:51:0c:b5:fe:2c:6a:94:2f:d4:
         1a:50:aa:cc:5b:1d:f9:86:4a:74:49:36:e6:ef:e0:fe:c3:fd:
         05:7d:0d:23:7f:cb:a4:1b:c2:bc:32:e4:f6:f4:36:b7:4a:11:
         ea:e9:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:22:05 2026 by rpki-client