Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e89aef26-d14a-3a88-9a13-31517d66936d.roa
File:                     e89aef26-d14a-3a88-9a13-31517d66936d.roa (raw, json)
Hash identifier:          UrZODURKCtV1nqING6LYx/07pHjVhjHaLeQ+2RUMqFk=
Subject key identifier:   B7:C1:41:41:86:EB:DC:B7:13:BE:95:4B:99:23:53:18:CE:38:AC:FB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF5505C040AE0CB70534780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e89aef26-d14a-3a88-9a13-31517d66936d.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        132.145.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:50:5c:04:0a:e0:cb:70:53:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=234c28ef-39b1-46af-b44a-9ce89b738c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:3d:b6:ea:0e:bc:ba:d6:c9:25:8d:4f:09:
                    19:bd:0d:fe:09:fa:b3:15:90:8d:df:bf:88:8e:5c:
                    60:99:8c:b1:23:fb:8b:fb:de:b7:61:ef:eb:ee:9c:
                    ab:8f:b4:09:58:28:7a:7f:fc:59:cb:d0:4a:23:30:
                    3f:ad:8f:fa:7f:0f:3f:da:17:42:18:a2:43:cf:ba:
                    24:eb:d8:90:d8:b2:47:62:8e:7f:10:75:4f:6b:f6:
                    fd:dd:e6:c1:80:a2:b6:31:ef:56:02:02:b9:99:f7:
                    81:25:5c:6b:b2:6e:27:c0:a4:2f:01:2d:47:86:ed:
                    b8:53:a6:cd:d0:18:b3:0a:17:33:4a:76:dd:d9:95:
                    0d:69:bf:c8:e0:bc:14:4e:4a:36:2a:ef:03:e3:32:
                    5b:12:73:b9:df:48:2f:7f:5d:cf:49:d9:7b:e0:d4:
                    3d:c1:4c:91:82:60:0e:74:4f:01:e9:40:fc:0f:c1:
                    69:c3:bb:21:66:19:36:76:31:4a:fb:95:72:51:e0:
                    cd:4c:42:c6:70:4c:8b:e7:49:bc:3d:3f:7d:55:78:
                    7e:6b:1f:e5:e5:c3:3a:16:7c:d7:09:82:23:4a:6b:
                    e1:c9:86:52:80:8c:c8:52:c9:e8:c9:6e:aa:aa:8a:
                    43:c7:84:36:c2:56:01:99:74:5c:c1:d8:10:5f:34:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C1:41:41:86:EB:DC:B7:13:BE:95:4B:99:23:53:18:CE:38:AC:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e89aef26-d14a-3a88-9a13-31517d66936d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.145.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c4:a8:a4:a6:3b:43:b4:90:42:bb:e8:a6:0b:9a:bd:83:19:
         fe:07:f9:9c:d0:04:ac:39:24:2c:31:74:d6:99:52:2c:f3:0a:
         25:27:a3:59:80:de:ec:fc:4e:44:b5:51:d6:80:e2:e4:bc:90:
         98:d7:a0:85:b1:63:a1:c3:6a:8d:40:07:0a:6b:42:89:9d:5e:
         f2:01:b1:61:a8:ab:57:15:7c:af:c8:1e:c6:f6:83:6e:5d:5f:
         3f:14:ac:c7:c7:12:ad:44:b2:47:a8:9a:fa:dc:20:25:2f:88:
         39:2f:56:59:82:7c:5b:cf:69:85:06:eb:73:2d:cd:29:e9:4a:
         59:8e:95:14:77:6f:cb:87:f5:35:df:34:8f:3c:05:23:03:95:
         e6:e8:b5:96:4d:9f:96:50:d6:2d:1f:fb:30:5c:48:de:02:22:
         25:a4:9d:ed:8a:f3:53:fb:67:16:c1:45:97:1f:30:74:4b:37:
         01:2b:5e:b4:02:b4:5c:44:0b:6a:9c:7c:7e:d3:70:41:cb:2f:
         bb:97:e4:bf:cd:06:0e:e0:cd:e7:7a:f9:b5:17:0b:93:89:55:
         fc:a7:ff:a1:b0:1c:81:18:21:05:4b:2a:4a:4b:16:df:9e:b4:
         29:44:62:7c:ae:29:1b:c4:17:08:91:e4:c0:4e:dc:89:1a:52:
         1b:64:75:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:02:43 2026 by rpki-client