Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbff2209-8589-36bc-a885-88ff31d5de58.roa
File:                     bbff2209-8589-36bc-a885-88ff31d5de58.roa (raw, json)
Hash identifier:          9X2qL3zMP7/V2KkFCXQVsdR4TNqDETrrFb1IVt3xN9M=
Subject key identifier:   05:66:A1:F6:48:77:C9:6C:4D:BC:0D:71:FF:79:E8:9F:F2:D8:BD:6A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF54F34049BBCE1D5CEBB80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbff2209-8589-36bc-a885-88ff31d5de58.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        146.235.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:4f:34:04:9b:bc:e1:d5:ce:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=818b51d7-cec4-49c4-8cb3-bc7088f9047e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:84:7a:63:d0:a9:6e:8c:13:89:80:6a:13:e4:
                    a1:52:e9:f4:af:dc:73:6e:22:79:8f:05:92:c8:3b:
                    78:72:71:93:8f:07:76:7a:d3:3f:50:67:ed:6e:32:
                    43:72:83:b1:c6:a2:f1:1e:f0:af:be:67:30:e4:69:
                    14:6f:5e:be:7a:eb:d4:71:47:2a:a7:3b:ec:10:c3:
                    95:ad:58:cb:e6:89:2d:52:48:f2:72:12:79:3d:d8:
                    81:3e:ae:5a:b9:91:30:e4:0e:27:03:28:cf:59:38:
                    c7:63:c1:56:e6:b2:d8:61:a6:9b:01:fc:d7:bd:f2:
                    5a:07:db:3e:ec:95:48:2e:d1:fa:e5:1b:4f:d6:93:
                    1f:22:69:80:e2:10:66:48:bd:5c:90:32:ba:7c:50:
                    b8:95:5f:a0:a5:86:48:a4:be:bf:b4:36:96:63:48:
                    5e:96:a0:fe:5e:2e:6f:2d:df:cb:a7:f6:17:07:da:
                    d8:3c:5a:19:62:15:77:61:b4:5a:29:0c:7f:93:90:
                    82:86:e8:c4:1d:c1:df:f8:9e:5e:76:d9:9d:d3:86:
                    9c:0c:45:23:8f:23:69:b5:64:91:23:fc:90:5f:2f:
                    41:f1:81:f2:e5:bf:b2:5a:d6:06:12:ef:3a:10:0d:
                    00:fe:2b:e6:e7:60:17:4c:8d:fd:b7:a5:5f:be:6f:
                    9b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:66:A1:F6:48:77:C9:6C:4D:BC:0D:71:FF:79:E8:9F:F2:D8:BD:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbff2209-8589-36bc-a885-88ff31d5de58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.235.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4b:22:5a:51:cc:fd:2d:6b:71:31:ab:c4:dc:6b:42:aa:17:
         31:26:e4:db:99:47:19:6e:0c:6d:14:39:5d:4a:af:ba:d2:41:
         30:b7:f5:6c:e8:4a:1d:32:b9:df:95:30:15:10:6e:74:85:eb:
         cb:b5:23:0b:c9:45:04:94:3e:96:dc:6d:33:10:86:16:e5:ca:
         2f:6d:89:4d:1a:56:1c:ab:51:c2:14:b7:95:4d:1c:32:80:90:
         2d:9f:c7:71:4f:ec:f6:3b:49:4f:41:f4:35:90:d2:76:72:af:
         9b:b5:fb:d0:5a:8a:e9:2e:04:ef:5e:15:63:41:d4:58:ba:c1:
         64:6e:44:23:ef:c2:5d:38:c9:15:10:5a:0e:df:b4:a3:50:e1:
         5e:e6:93:2c:00:28:fa:55:9c:1b:f7:68:60:4e:66:94:6c:ad:
         4f:c7:43:fb:25:14:b4:ae:1f:a1:22:d9:9f:bf:6a:f7:38:23:
         87:5a:c9:ae:6f:6d:f0:82:cc:6f:52:37:55:52:86:aa:4c:31:
         95:1b:21:8b:53:d8:a3:d1:36:45:20:3f:15:ac:75:71:c4:ba:
         45:1b:2d:f7:18:ee:17:ea:bf:20:03:58:5c:a5:20:75:19:f2:
         b0:28:b1:cc:27:3c:73:19:fb:c7:db:42:a5:76:b8:80:b8:35:
         ed:c0:96:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:55:08 2026 by rpki-client