Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5464ec8-9296-3ab4-bccf-6d6d296147d7.roa
File:                     f5464ec8-9296-3ab4-bccf-6d6d296147d7.roa (raw, json)
Hash identifier:          Yn7XYu9wj04Nw7MyL6pcqA4wYFEBJzo3VkgZhaqMCQs=
Subject key identifier:   CB:9D:B3:1C:96:8B:C1:6B:80:79:F6:B5:0F:CC:C0:A9:B3:06:66:9E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F119CE59757DBE052614AE000
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5464ec8-9296-3ab4-bccf-6d6d296147d7.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        159.112.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:e5:97:57:db:e0:52:61:4a:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=c2495685-b1ba-4453-b66f-b29fdc623e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:ad:d9:64:d2:8c:4e:37:ab:50:1c:1a:0e:
                    e1:af:8c:a7:8c:66:31:ec:71:3e:28:ea:ca:1a:ef:
                    52:af:81:f8:de:ec:5f:d4:d2:48:d1:83:62:6f:4d:
                    03:21:2d:29:4e:97:5b:83:fd:48:73:45:ee:c7:fa:
                    3c:73:77:bd:a3:11:43:31:ec:2f:5f:47:28:aa:5d:
                    6f:e4:ce:e5:27:2d:8c:64:fc:db:66:b6:c3:7f:b2:
                    22:5b:d3:22:cc:ff:65:8b:53:5d:21:1f:12:46:a0:
                    1a:3c:17:8f:c8:00:36:15:72:a5:67:16:05:9e:62:
                    f1:8b:77:56:36:1e:53:90:7c:d2:bf:3c:42:76:8a:
                    1a:54:0b:72:99:b1:38:0d:46:0b:b0:6e:48:d2:2f:
                    d4:26:08:5e:ed:d8:56:2b:61:47:94:ec:16:0d:3e:
                    27:33:c9:ed:27:87:58:bb:e5:b7:89:03:8f:af:93:
                    ec:b6:ea:b9:26:48:86:9c:3d:11:1e:33:fd:6f:72:
                    02:81:35:8a:6b:15:02:71:be:99:8d:47:ed:6c:cc:
                    cc:da:61:2c:37:45:09:fd:a9:c3:6b:14:0c:24:6b:
                    1f:78:0b:42:53:d9:eb:5a:16:9e:5c:19:92:be:de:
                    0d:75:af:8e:31:86:4e:f9:49:06:25:8a:56:44:e7:
                    8b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9D:B3:1C:96:8B:C1:6B:80:79:F6:B5:0F:CC:C0:A9:B3:06:66:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5464ec8-9296-3ab4-bccf-6d6d296147d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.112.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:da:c4:c7:e8:71:e9:84:36:b1:7e:cb:e9:1b:a0:6d:a1:87:
         8f:95:ae:01:c5:9b:78:bc:8a:a6:b5:e2:95:c6:09:a1:46:87:
         10:00:93:3c:81:3d:53:14:a4:d0:5a:9c:b3:f9:c5:45:49:ae:
         cc:4b:1e:50:79:73:f1:97:8c:63:cd:9d:6b:38:42:63:53:48:
         21:d0:89:df:43:9a:7a:e5:f5:ec:37:dc:84:73:1c:62:9b:05:
         d5:4e:39:27:74:ae:fb:2e:37:3b:07:ee:05:1d:b4:db:63:ea:
         b0:4d:6e:9e:75:e8:d1:a7:a4:e9:82:89:b1:bd:51:2d:b4:a3:
         be:52:65:1b:0f:a0:f5:17:d4:f8:42:bb:4d:59:c0:25:b5:4c:
         e4:c1:72:f7:8d:d8:85:a6:f6:32:59:3e:6f:f3:31:bc:19:d5:
         67:e3:77:91:4f:9d:2b:82:7c:30:dd:34:d6:25:dd:c9:2c:60:
         7c:40:77:1d:88:01:83:79:1c:ad:31:6f:c4:3c:cd:e9:c3:26:
         37:29:63:52:62:a7:3d:2b:44:81:b3:39:b0:77:e3:71:a9:8e:
         89:75:96:bf:90:ee:23:97:03:73:8a:de:58:d5:af:03:e5:60:
         3b:62:d4:23:8c:d1:5c:2d:5a:69:be:f3:42:cc:65:7c:6a:6a:
         da:8b:f9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:54:07 2026 by rpki-client