Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8100fa0-014c-3d50-8a79-bb06f6b36d37.roa
File:                     c8100fa0-014c-3d50-8a79-bb06f6b36d37.roa (raw, json)
Hash identifier:          iF+Jt9CUJBMsgNkahnqTcPn4cW94KzbXivydACHTmfo=
Subject key identifier:   52:65:F6:6F:05:E7:C2:94:17:06:33:E6:1E:03:4F:40:3F:3E:28:A4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8D8FEC330D275F7B94E5B100
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8100fa0-014c-3d50-8a79-bb06f6b36d37.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     31898
IP address blocks:        134.65.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:ec:33:0d:27:5f:7b:94:e5:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=175524c1-b283-4b44-9c4c-02640b151824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:9c:20:7c:80:7e:02:10:c7:18:a7:21:55:
                    c8:c0:45:f2:ee:bd:36:07:48:91:61:9f:7b:79:03:
                    31:9c:4e:f9:0e:0b:ce:95:78:1c:e6:ba:6d:70:68:
                    8e:de:bd:2f:9c:fc:64:81:05:5c:6e:7c:4d:ea:ed:
                    a1:31:33:a6:04:66:fe:1e:42:6f:e2:88:8f:f2:51:
                    9b:e5:78:1f:4d:eb:a1:3c:04:af:44:36:89:30:36:
                    f6:ca:c4:4f:64:5b:9d:e2:e4:46:b4:f8:cb:78:59:
                    76:42:36:81:a3:d5:40:c7:f9:69:cb:00:2c:5a:df:
                    37:11:a3:e0:04:9d:2a:db:38:e7:51:9d:57:41:10:
                    bb:23:15:f0:7b:e7:09:e4:4b:2e:4c:3a:62:15:8c:
                    f2:12:88:6c:0a:9b:0f:8b:13:5b:ee:0d:d3:5c:14:
                    dd:2b:27:0c:de:de:28:17:c0:74:54:5c:c7:0f:c2:
                    34:51:be:68:81:3e:f8:3e:05:99:bd:a6:23:5c:f2:
                    0f:d2:6e:10:64:11:28:2d:4c:47:0c:a7:24:13:eb:
                    34:aa:aa:95:3c:2c:10:26:40:c0:5e:b5:af:77:a8:
                    6f:ec:b4:6d:13:1a:46:71:2e:23:07:8b:dc:b3:77:
                    84:08:eb:26:c6:15:db:3e:87:2c:82:8c:40:25:bc:
                    dd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:65:F6:6F:05:E7:C2:94:17:06:33:E6:1E:03:4F:40:3F:3E:28:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8100fa0-014c-3d50-8a79-bb06f6b36d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:4f:aa:97:5a:d6:12:2e:d3:33:74:40:01:a5:a9:61:32:5b:
         e0:e1:13:7d:13:58:38:04:c3:64:fd:63:03:c6:ab:54:74:e6:
         f7:b9:94:5e:21:6a:34:3f:60:5e:a3:64:44:cb:27:69:2d:81:
         fc:5b:79:ef:c9:9a:0a:e4:83:12:6f:2a:d0:26:69:fb:86:a1:
         0a:28:7d:ae:84:03:8c:96:c5:63:73:c2:b3:b2:85:d0:60:b0:
         ce:c9:bb:c5:fe:32:48:ab:ca:e2:d6:ea:ed:d9:67:64:5b:0b:
         a4:fe:c3:d0:18:b4:88:87:b3:33:e4:3c:84:47:99:7c:74:74:
         64:7c:32:78:a2:4c:70:b6:bb:92:a2:d7:a6:9c:8c:32:0d:b5:
         e4:26:69:47:86:13:90:db:1c:a8:41:88:09:00:86:b6:ff:94:
         f9:23:60:5c:ad:a9:f5:ce:9c:0a:77:2b:70:95:9e:c9:42:1c:
         c0:d1:80:50:07:09:1f:4b:ac:6b:a7:8d:35:a7:95:5a:67:3e:
         1b:69:78:e3:f6:17:f7:4b:88:7b:3f:40:a1:da:bb:85:8b:d6:
         cc:13:aa:5d:cd:e3:95:63:24:cc:cf:3a:4a:90:88:b1:fa:46:
         65:1d:57:56:01:d7:22:73:f3:f3:8d:3f:40:26:76:58:9e:5c:
         98:ef:df:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:21 2026 by rpki-client