Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ea5235-8f2a-3f42-9519-2c9a34ff6168.roa
File:                     f2ea5235-8f2a-3f42-9519-2c9a34ff6168.roa (raw, json)
Hash identifier:          WgZHUX6BAoX/Cd+oKXOuorNknoN2575r7g48O3TBgLU=
Subject key identifier:   D8:DB:9E:82:11:0E:BA:BA:D6:4E:5C:AA:F5:AF:21:32:4C:9E:4E:41
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D905A96B42BB09F2AF079FB80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ea5235-8f2a-3f42-9519-2c9a34ff6168.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        207.135.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:96:b4:2b:b0:9f:2a:f0:79:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=9b6c1aa2-0cd5-417c-98a9-a5cdf190a050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:fb:bd:96:7c:3d:0f:84:df:58:b8:c1:a0:
                    5b:10:ce:d9:50:26:f6:9e:94:68:6d:53:40:18:ca:
                    b0:3e:d2:8e:b3:a1:45:d6:e4:8b:1a:04:77:d0:35:
                    b7:99:1a:81:e8:ec:ab:ce:ca:c8:79:a6:0f:25:18:
                    33:49:c4:41:50:3c:08:60:da:09:26:40:89:fc:3a:
                    28:a1:76:ff:21:a9:7e:67:ce:8b:d8:4c:b7:60:28:
                    dd:d5:cb:43:5c:e9:f6:91:5b:f3:b6:1f:3b:d5:9b:
                    98:d3:70:3d:d4:b8:36:68:c4:9d:6a:78:58:39:39:
                    3e:c8:0c:b2:b5:36:a3:51:c4:53:26:27:fe:f5:ae:
                    69:8b:9d:5a:16:65:ae:19:a1:89:c3:39:47:b4:70:
                    02:c5:98:1f:73:35:a3:7e:54:55:7b:d9:81:86:2c:
                    05:fd:94:4b:69:0c:98:03:c1:78:03:a6:2e:8e:4e:
                    29:dc:59:40:41:e6:c2:25:a1:8b:94:88:f3:86:13:
                    54:e9:2d:59:ce:5d:ac:68:c2:2f:4d:6c:dd:c7:73:
                    00:b6:cf:b6:7e:f1:84:d2:57:89:ed:27:5a:f1:0b:
                    d7:dd:00:2c:00:1a:0c:e1:ed:ca:01:bd:85:8b:58:
                    ef:37:65:b5:21:c6:20:04:f8:d2:6a:0c:0f:87:2d:
                    e9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DB:9E:82:11:0E:BA:BA:D6:4E:5C:AA:F5:AF:21:32:4C:9E:4E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ea5235-8f2a-3f42-9519-2c9a34ff6168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.135.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:19:87:84:db:d5:a1:7e:0b:6c:79:90:ec:68:c5:33:bd:e1:
         0c:c2:68:62:cf:ca:87:40:b3:24:b6:58:7d:c6:22:27:53:ca:
         f5:cb:94:b2:bf:16:0f:0c:46:b9:95:d7:06:22:6d:b2:cb:b1:
         d7:d6:fa:65:39:ba:15:68:07:42:a4:d2:a2:9c:d8:cf:50:bd:
         34:01:e1:05:e0:88:41:e4:ef:e0:f2:af:6b:c7:56:c7:31:2d:
         ad:8d:58:3d:e3:bf:e1:5d:42:25:00:22:b7:75:bb:7d:c2:24:
         ae:a8:54:92:a5:29:88:5d:6d:d2:b8:37:c0:b0:71:72:4e:2b:
         8f:6c:ca:20:35:b5:d1:16:ea:95:0d:80:4c:8f:ca:68:3e:d6:
         1f:bc:fc:90:10:bd:61:59:6f:d6:b1:b0:10:0c:52:ab:58:bf:
         84:3c:0c:c6:f5:f9:fe:f0:bc:52:64:81:e0:76:2f:b2:ef:33:
         8d:48:a2:10:65:e4:b1:d1:20:c9:7d:6f:14:8a:99:05:fd:b5:
         2b:5d:78:7d:ee:7b:92:c1:ee:4c:7d:d5:c5:ba:6c:da:ee:20:
         3d:37:b1:ad:cc:38:ea:d8:30:93:10:49:38:dc:be:79:65:e0:
         30:60:60:62:46:bf:19:70:ca:8b:67:2a:a2:c2:a6:65:fa:f4:
         0c:6f:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:48:23 2026 by rpki-client