Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9cbce8ad-3b2e-3ac3-be1a-fd3bb2a0a766.roa
File:                     9cbce8ad-3b2e-3ac3-be1a-fd3bb2a0a766.roa (raw, json)
Hash identifier:          wvcBC42gHtKaFpFIiMeowg8QG8b6ffajcPF/NM/px4s=
Subject key identifier:   2E:B1:75:63:D1:F1:8E:16:E9:A4:66:33:7A:5C:37:69:E7:5F:C8:E7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D9E50275D0EE2A5C8E8D4025E
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9cbce8ad-3b2e-3ac3-be1a-fd3bb2a0a766.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        64.181.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:27:5d:0e:e2:a5:c8:e8:d4:02:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=a8724998-25f6-4e8a-a8a6-2144d383af64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:77:a6:1e:3b:2e:61:f0:90:fe:e5:92:04:69:
                    27:d2:54:cd:28:16:0f:79:c0:67:a9:03:6d:39:01:
                    c6:4d:ac:97:66:71:49:6c:21:28:df:42:fe:80:6c:
                    58:da:3a:eb:38:ba:a9:26:b8:c1:b5:83:f5:ea:77:
                    e4:1c:2a:48:83:d8:13:fd:5b:a2:59:d9:f3:13:9c:
                    e0:98:04:e7:24:8d:7c:c9:bd:40:4c:03:d0:7f:7d:
                    bc:ca:1e:be:9f:57:eb:bc:1c:ea:79:32:54:80:97:
                    cd:ea:6c:6d:de:84:3f:60:12:92:95:61:77:68:6a:
                    9f:1c:8d:48:b1:1d:5e:13:d3:41:ed:bc:94:3f:2f:
                    b6:d8:34:5c:ca:a1:bd:53:d6:9c:0f:90:28:1f:32:
                    c7:ba:04:9e:d1:45:23:0d:af:e8:97:ca:80:4c:bd:
                    55:3b:a7:15:89:fb:7a:8c:df:e2:83:85:cc:38:55:
                    09:22:79:ea:4f:d0:06:a3:a0:4c:ac:b6:bd:85:23:
                    ef:10:fe:2c:47:25:99:e0:06:91:ac:37:67:86:48:
                    11:93:3b:48:55:2f:96:89:d0:cf:c1:24:70:ad:46:
                    57:b4:94:94:5d:15:7f:9d:3d:cf:c6:83:e4:48:e8:
                    3f:38:78:b7:a1:dd:b4:6a:7f:e3:39:9c:a1:9e:35:
                    dc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B1:75:63:D1:F1:8E:16:E9:A4:66:33:7A:5C:37:69:E7:5F:C8:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9cbce8ad-3b2e-3ac3-be1a-fd3bb2a0a766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.181.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0f:33:fe:42:a5:bb:3c:1a:72:e1:a2:b4:58:56:84:5a:b1:
         1d:67:35:97:bd:e6:83:b9:d6:2a:ba:f5:09:ea:76:c5:26:e5:
         06:25:6f:1b:88:f6:ef:f0:03:27:33:c1:27:6a:3e:b9:27:3a:
         6e:d8:82:15:88:54:30:6d:58:4b:29:8a:d1:73:de:62:ba:5b:
         72:b5:12:32:55:af:db:96:85:b3:27:80:69:6c:08:19:37:ef:
         78:5e:b3:9e:a4:19:22:4c:50:db:1e:50:b1:08:dd:ba:f9:c7:
         97:b2:3d:ef:e1:b2:8f:13:13:0c:ac:aa:ef:0d:f1:70:53:5b:
         2b:e6:49:86:90:62:30:0c:4b:17:d2:c0:42:61:ca:c9:7f:62:
         1d:ef:5f:d8:3f:e0:dd:e2:0c:a4:8a:bd:dc:b8:f2:ea:30:7c:
         25:53:41:13:db:c1:48:69:84:fb:1e:21:5d:33:a1:1a:40:f4:
         b7:65:8e:a3:fb:7c:7b:cd:a8:71:7a:95:3c:f0:eb:1f:7a:1e:
         6d:b1:2e:1d:e9:e3:19:0e:e2:46:89:8e:e0:42:ef:92:0c:89:
         66:ee:9e:c2:76:19:13:bc:bf:cd:61:09:fb:ba:d1:56:a9:96:
         f3:36:9f:36:d0:f4:71:c4:4d:be:5f:74:a8:d8:f0:16:b1:9a:
         54:bd:03:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:25 2026 by rpki-client