Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e453ac9f-d408-3f1a-b7d9-fd50037bf2f7.roa
File:                     e453ac9f-d408-3f1a-b7d9-fd50037bf2f7.roa (raw, json)
Hash identifier:          RoB9uu0X7ZCjLmKL4tgLE/xi9jDIlKY4k+Bt6SgiskM=
Subject key identifier:   77:95:94:04:14:95:41:B1:49:36:7F:C7:D7:70:91:A9:27:3B:AD:93
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8D8FFB9E144D8ACD6F58E580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e453ac9f-d408-3f1a-b7d9-fd50037bf2f7.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     31898
IP address blocks:        193.123.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:fb:9e:14:4d:8a:cd:6f:58:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=4e15722b-207f-471c-94f0-6fb3b421817b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9a:25:3c:da:02:52:d1:ca:9e:c7:1f:43:58:
                    d7:cf:0e:f4:a9:00:8d:0c:4e:7f:80:2d:fb:66:ba:
                    af:66:5c:5c:a9:48:cc:7d:7c:c6:96:93:bf:2a:32:
                    88:0f:b8:6a:95:4d:e8:8b:17:d4:a5:21:5e:62:e5:
                    2e:01:c1:43:7c:33:6b:86:f3:d7:a9:ee:d6:70:e9:
                    d2:6e:ac:64:76:f8:b9:3a:d7:94:58:b3:d0:ed:08:
                    1a:92:cc:76:da:74:7a:44:10:d0:80:85:68:cc:6f:
                    d8:27:04:d4:e2:6b:b0:92:30:4e:7b:8e:69:94:95:
                    df:d3:03:54:c8:59:fc:b5:38:bb:d8:23:12:b3:ae:
                    7b:49:27:59:11:6b:04:a7:d7:83:44:a4:45:7a:c8:
                    28:18:c2:2e:a5:80:de:c3:4e:5a:39:bb:89:1e:04:
                    b5:28:7e:5e:81:d0:f0:ae:12:ae:70:58:fd:57:d2:
                    81:88:64:e4:88:cd:54:d8:4e:09:b9:e1:bf:06:ff:
                    63:49:42:59:5b:8e:7a:d6:db:b3:8b:e0:57:9b:91:
                    0f:70:a2:e6:5d:6b:0b:ee:6d:3a:15:af:5c:0f:cc:
                    2c:62:b0:54:47:53:17:d3:7d:87:e8:0a:9c:82:8b:
                    cc:1f:bc:f6:08:b9:a8:a1:ca:bd:6e:32:7b:21:55:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:95:94:04:14:95:41:B1:49:36:7F:C7:D7:70:91:A9:27:3B:AD:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e453ac9f-d408-3f1a-b7d9-fd50037bf2f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.123.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:b6:06:de:16:e3:7c:97:4d:dc:97:aa:70:ea:f8:a2:1b:4c:
         82:01:22:38:73:89:db:26:59:38:ea:95:7a:54:9b:b7:54:9e:
         e0:b2:c2:07:ee:73:68:e7:53:63:68:17:da:f6:92:de:d9:32:
         ba:29:82:e5:73:4d:3a:aa:1d:96:b7:33:b1:83:d1:9f:03:ed:
         ee:86:c4:b3:6c:42:a5:14:eb:3e:0e:f5:37:67:45:d2:ac:44:
         40:45:9c:93:bd:31:00:ba:32:6d:af:1d:98:9b:98:c5:fe:52:
         ef:44:c6:40:71:36:20:b1:d7:08:f6:e9:78:23:23:6f:c8:7e:
         a3:12:ea:3c:0e:7c:64:a9:8d:38:1e:0d:c3:5a:b2:6e:a0:9a:
         61:ce:bd:1a:e9:40:5f:2a:e7:1e:18:e8:7b:2f:f9:66:ff:09:
         a6:35:01:58:69:fb:a3:c8:f8:d0:3c:e4:df:a2:50:97:f4:a0:
         67:4d:d2:4c:53:3d:10:31:80:a7:fa:90:f9:28:aa:99:6d:dd:
         5e:b8:b5:62:1f:53:34:a5:7c:ee:b5:1b:fd:0f:bb:46:cb:7f:
         5d:8f:0c:a3:f9:61:6a:19:fc:dc:1c:ed:8d:d1:30:01:a3:7d:
         d7:4c:13:61:1c:b0:96:13:63:3c:2b:a1:2d:98:20:15:64:04:
         3a:15:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:10 2026 by rpki-client