Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c214daa5-dac2-3547-abbf-3770a7fade8a.roa
File:                     c214daa5-dac2-3547-abbf-3770a7fade8a.roa (raw, json)
Hash identifier:          x2fxS4jCM/deMHcAGkMxD1F9lfwqZ6u85xG/Q3iME3I=
Subject key identifier:   6D:1D:C6:1F:51:0A:59:55:21:DC:94:07:9D:DF:60:F1:99:1A:B8:45
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E84DB927F303E5C4143C90300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c214daa5-dac2-3547-abbf-3770a7fade8a.roa
Signing time:             Thu 16 Jul 2026 14:57:38 +0000
ROA not before:           Thu 16 Jul 2026 14:57:38 +0000
ROA not after:            Wed 14 Oct 2026 14:57:38 +0000
asID:                     31898
IP address blocks:        160.34.112.0/24 maxlen: 24
                          160.34.114.0/24 maxlen: 24
                          160.34.116.0/24 maxlen: 24
                          160.34.117.0/24 maxlen: 24
                          160.34.118.0/24 maxlen: 24
                          160.34.119.0/24 maxlen: 24
                          160.34.120.0/24 maxlen: 24
                          160.34.122.0/24 maxlen: 24
                          160.34.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:db:92:7f:30:3e:5c:41:43:c9:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 16 14:57:38 2026 GMT
            Not After : Oct 14 14:57:38 2026 GMT
        Subject: CN=07f6deca-a095-4299-96e3-aab97e85c626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:a1:62:01:b4:96:03:ad:9b:bc:ca:82:77:
                    1f:18:aa:82:72:b4:74:c5:45:da:bf:9e:0e:82:d6:
                    3d:43:a6:76:db:5b:7b:af:a6:79:b6:43:58:27:3b:
                    23:b6:52:0f:62:98:65:81:4a:a8:2c:ca:25:c6:41:
                    21:4c:1f:60:2d:99:1f:c6:19:be:05:4d:2c:f8:d3:
                    d2:b6:0a:64:d9:73:d2:b6:4b:4f:de:72:d9:58:ad:
                    19:2a:19:3c:24:ff:60:c8:7c:dd:ad:67:ca:2c:26:
                    06:c1:3a:b5:9c:9f:b6:8f:52:01:48:21:24:6d:66:
                    f4:1f:47:f3:f8:e1:ee:3c:42:c5:22:af:d2:16:78:
                    73:2b:25:ca:30:44:d3:37:e0:d5:7f:e3:10:f0:68:
                    b5:7b:cb:f9:3e:cd:2c:86:bf:b5:13:0e:67:69:0d:
                    d8:b7:dd:57:14:21:5e:d2:f7:6a:ac:ab:e1:a2:9f:
                    3b:71:2d:d8:bf:c2:0c:b4:2a:e4:cf:5d:de:0c:b7:
                    f4:3d:37:91:62:0f:fa:bb:24:a3:70:95:a5:b8:27:
                    66:24:9d:db:4e:4e:b6:51:6c:34:04:fc:7f:11:1f:
                    0f:7b:4b:5c:b0:55:30:63:16:67:ed:a8:0d:8d:37:
                    b9:b9:df:a8:da:b4:2f:2a:70:59:1c:5d:25:85:16:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1D:C6:1F:51:0A:59:55:21:DC:94:07:9D:DF:60:F1:99:1A:B8:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c214daa5-dac2-3547-abbf-3770a7fade8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.34.112.0/24
                  160.34.114.0/24
                  160.34.116.0-160.34.120.255
                  160.34.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:bf:a1:96:27:ed:be:ff:39:1d:9e:d7:5d:5a:c0:6d:fa:1f:
         85:35:4b:e1:e2:96:a7:3d:b4:d5:d5:e0:48:38:32:93:85:b5:
         3f:ef:43:fd:aa:c5:15:a7:bd:c1:78:62:6e:c1:2f:99:f5:74:
         10:0a:c2:20:ce:a3:7d:62:4a:08:51:c6:64:1c:09:28:74:ff:
         b4:44:2e:ee:2a:d5:3c:52:c0:07:25:53:c6:4a:5c:9a:28:76:
         61:e8:39:21:0b:36:27:c3:6c:0e:b4:32:cf:70:a7:46:b1:c6:
         97:a2:28:bb:1b:d9:19:c5:ea:a3:65:87:03:a7:73:29:99:31:
         a0:b3:38:ff:0d:d0:ef:1f:b5:b0:36:0c:b6:11:11:e4:a0:de:
         5a:2f:fc:44:b6:36:da:ee:f9:07:c3:e6:f3:59:9b:a8:b7:8a:
         55:b4:eb:9c:f9:96:a4:d0:22:9a:a3:40:25:f2:81:5d:11:63:
         ff:52:da:05:37:2c:67:63:c0:09:4f:e2:15:13:5e:ae:7f:a4:
         ff:60:4c:b2:96:d7:d5:6b:9d:f1:8f:0f:80:8d:58:ce:f7:2f:
         00:5e:72:a1:8a:a7:13:a4:1a:15:fc:c0:cf:33:12:63:0b:10:
         a3:f6:3f:bf:4c:05:45:b2:a2:56:97:37:32:43:67:14:b6:75:
         1a:1c:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:21 2026 by rpki-client