Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffd82e79-63f3-3fd6-987e-7db1ba53115d.roa
File:                     ffd82e79-63f3-3fd6-987e-7db1ba53115d.roa (raw, json)
Hash identifier:          0nlDkoEmYyQN+cN0pDSp13eAufKjn+Ptrap2N+TFp0I=
Subject key identifier:   2A:B2:FC:22:C2:E2:30:96:93:5C:C9:B9:FD:22:D3:E9:5E:36:B4:D3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8D8FE689F7B2D7104A805AD0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffd82e79-63f3-3fd6-987e-7db1ba53115d.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     31898
IP address blocks:        140.91.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:e6:89:f7:b2:d7:10:4a:80:5a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=0f072b8d-9075-40f6-9878-52c5ecc80adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:91:8a:92:0b:3a:30:c1:51:57:19:f9:b0:
                    88:bb:6c:11:b3:73:dc:bf:fa:1f:ba:96:31:d5:18:
                    10:a1:41:e8:97:80:18:e9:1b:c6:3b:7c:84:4f:a2:
                    58:66:23:e9:a2:16:2c:62:48:d2:73:a2:c9:03:e7:
                    86:0d:0a:a2:7c:e2:a1:34:a0:b9:ad:cf:d6:8a:b1:
                    96:1c:25:a9:34:ae:69:46:78:3f:a1:42:76:7c:17:
                    82:5d:33:30:ed:4f:11:5d:0a:d8:85:4a:8a:93:70:
                    1b:38:d7:20:61:bb:c6:c4:5e:13:4c:de:cc:c3:ac:
                    b9:5e:2b:e0:3b:11:67:d7:04:50:80:1a:f1:39:ef:
                    f9:c1:ea:8f:d2:68:79:4e:8a:36:db:d1:81:47:82:
                    8c:41:98:68:28:d2:a0:f1:bb:8e:45:13:6b:3b:ae:
                    f2:be:78:3e:28:74:d8:e6:82:47:3a:e6:7b:55:54:
                    b8:f8:c1:0b:e1:b9:07:e2:e1:f1:04:40:8e:4b:55:
                    49:0a:cc:df:36:d2:cc:d8:48:52:72:60:38:cd:2d:
                    88:60:ec:6d:7b:34:f7:79:c5:98:c6:aa:12:12:b1:
                    b5:3a:92:2c:a6:e4:45:91:77:ec:c9:4c:8b:4f:06:
                    29:8c:c1:d3:e8:08:af:57:02:17:37:3a:37:9b:49:
                    e3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B2:FC:22:C2:E2:30:96:93:5C:C9:B9:FD:22:D3:E9:5E:36:B4:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffd82e79-63f3-3fd6-987e-7db1ba53115d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:5f:5c:e1:0b:47:cb:77:92:53:e1:a8:96:82:bd:6f:06:9b:
         10:56:75:35:c6:01:d3:03:be:86:3c:cc:53:01:ac:c6:a2:93:
         fb:08:4e:cf:53:96:de:99:09:ba:4a:42:bf:a3:2d:a4:d9:28:
         41:bb:c4:e0:3c:92:f7:25:ad:a8:09:f4:e0:31:20:02:10:0b:
         5b:0a:1c:c4:0d:ee:ba:94:a3:dc:25:1d:63:ef:a1:94:9a:ff:
         a5:38:6c:a0:42:f6:5f:eb:06:6a:20:00:68:a8:a6:ae:00:24:
         8b:f6:66:04:93:47:e1:aa:6e:75:dc:38:56:fb:10:18:a2:33:
         bc:a4:fb:11:0a:8a:dc:28:53:2b:c2:95:c5:13:8c:d3:76:ce:
         24:33:b8:9c:b0:d1:5e:6b:49:e1:6a:b8:8d:8b:61:8a:b3:a8:
         f9:93:a1:d8:03:f8:74:03:a9:62:81:f6:20:3f:c5:bb:e2:35:
         34:8a:17:fd:d1:ce:c7:85:3d:53:4e:a4:0d:33:2a:47:2a:3b:
         7b:5a:83:03:50:a2:51:05:3b:2b:da:24:d8:7f:02:2e:83:72:
         9d:d6:56:c5:67:25:86:2c:45:d8:07:ca:f5:df:64:c6:23:2a:
         ce:79:40:23:b9:38:d2:e9:5f:70:ee:5b:5c:31:5f:1c:13:29:
         5a:ea:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:32 2026 by rpki-client