Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eabdfb94-44da-37b2-8197-9839e295f327.roa
File:                     eabdfb94-44da-37b2-8197-9839e295f327.roa (raw, json)
Hash identifier:          FCX/irrs7Iqa/opaQBZjdZxKLAk9fh5/ArbnWdKm7bA=
Subject key identifier:   29:AF:26:4A:B5:60:0B:8C:87:0D:4B:15:28:7B:B8:14:1F:CE:DF:16
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF56971288CC840810B18C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eabdfb94-44da-37b2-8197-9839e295f327.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        132.226.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:69:71:28:8c:c8:40:81:0b:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=341d930c-4d90-4862-9c69-33abac694757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dc:d9:32:8a:79:7f:80:4d:91:f5:28:06:19:
                    f0:80:8a:87:ed:67:2d:be:eb:fd:00:dc:f9:1d:c4:
                    47:d8:81:24:7c:0a:70:bd:b0:fa:14:3b:b9:13:f2:
                    10:77:af:0d:75:75:ed:24:64:5c:e3:84:48:ee:d8:
                    27:4e:b0:72:9c:4f:25:be:f5:20:ae:8a:46:1b:3b:
                    d7:14:6b:90:0a:57:90:0d:1e:c4:35:4e:41:7b:36:
                    5b:cb:b9:e1:0a:ee:f7:ca:98:67:06:3b:bf:1a:ce:
                    58:62:e5:02:92:db:37:e5:51:1f:8f:27:cf:d0:7a:
                    e1:71:8a:83:4e:74:c7:66:16:48:72:4f:2d:ac:de:
                    6f:9e:af:41:a0:18:22:95:2b:a9:bf:79:60:9b:f2:
                    7b:27:bb:09:55:d6:31:5a:d5:e4:c8:19:d2:f4:1d:
                    e6:12:1d:31:fe:6c:f3:b9:1d:e3:67:98:ab:0e:e9:
                    97:af:fe:a1:d5:fd:c7:6a:b4:47:c6:9f:53:c5:f7:
                    55:fe:e1:18:60:b6:ed:01:77:24:47:a4:91:de:99:
                    a8:dd:09:34:c6:81:1f:ee:ca:db:23:b9:c3:95:47:
                    6d:61:41:95:49:18:14:53:38:23:f6:7e:46:67:1c:
                    3c:ab:7d:d8:16:fb:1c:d2:f0:53:69:57:9d:89:95:
                    cc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AF:26:4A:B5:60:0B:8C:87:0D:4B:15:28:7B:B8:14:1F:CE:DF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eabdfb94-44da-37b2-8197-9839e295f327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.226.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:99:02:ca:1a:60:33:4c:8c:72:be:81:7e:74:c4:3f:21:1c:
         7d:3d:8f:cc:e9:78:38:34:42:a4:02:7e:ed:12:4f:bd:e1:63:
         43:bd:48:3e:31:00:8e:b1:c5:21:02:5c:66:4e:94:b7:20:b6:
         79:44:12:d7:47:fd:f3:04:45:2a:f0:54:1e:85:57:d5:2e:99:
         7c:e5:19:ea:c3:c7:a6:b3:d6:9c:d7:66:33:86:48:89:fc:6c:
         8a:18:d2:82:ca:91:a8:b4:b9:85:78:cd:4c:e4:af:f5:6b:7a:
         cc:a4:6f:74:13:17:0f:31:58:c6:b2:10:fa:67:08:20:31:5a:
         51:19:1f:3d:7b:a8:98:8f:97:f5:22:ab:9f:84:92:bf:56:de:
         fc:24:08:41:4f:19:c8:66:7d:60:af:e5:ad:d5:b7:8f:d5:5a:
         b0:41:ce:66:db:88:68:df:a7:3b:0c:c6:ad:34:54:6c:8a:a3:
         89:a5:a8:6d:f0:49:38:56:62:06:4c:94:2c:77:28:c4:f3:99:
         1f:e4:0a:04:f7:9e:a9:92:a0:38:53:c7:69:d3:91:b5:1b:30:
         f7:78:aa:2d:ed:27:8d:6d:a5:e6:94:cf:9f:08:e0:25:df:d2:
         3c:78:bf:96:aa:a8:86:37:88:1a:00:74:87:a7:d9:de:69:34:
         c0:98:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:18 2026 by rpki-client