Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/785fb15e-90d3-3366-8c08-413a5c6d616a.roa
File:                     785fb15e-90d3-3366-8c08-413a5c6d616a.roa (raw, json)
Hash identifier:          3e5irkrOV95p5QiepF/eNLgtv4keA2hgPz2H3LBw52Q=
Subject key identifier:   45:53:F6:8E:77:10:A6:02:A1:88:DE:EE:94:FD:74:2A:E3:99:9F:64
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584E2D9F088982643C2299958700
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/785fb15e-90d3-3366-8c08-413a5c6d616a.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     21949
IP address blocks:        173.231.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:08:89:82:64:3c:22:99:95:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=8e939790-c89b-4b10-b8a9-a91323676e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e2:b4:32:86:f2:31:55:16:c2:cc:89:dd:4b:
                    6d:5f:82:e1:a6:1b:41:4d:f0:50:78:e5:db:92:6f:
                    09:58:eb:fd:06:d3:c8:3c:48:b7:a6:b7:54:6a:68:
                    30:60:aa:e8:20:0b:b8:ba:47:76:28:31:f2:46:10:
                    34:3d:1a:01:5e:d5:14:89:94:65:20:5e:a3:1f:34:
                    9c:d7:8a:b4:94:48:15:dc:e4:ee:ea:4a:bb:3e:83:
                    da:d6:55:f0:9d:0d:93:5d:1d:d3:18:a3:0f:2c:d1:
                    6b:ad:c2:f2:8b:58:00:26:c4:a1:9b:ce:bf:19:c0:
                    ec:88:ba:67:b0:b7:ce:c6:36:84:54:3c:d2:0f:3e:
                    5c:48:cf:68:a6:13:1f:28:df:9d:a1:72:01:4d:f6:
                    5a:38:d6:a1:bc:c4:64:ce:81:be:ae:18:e0:1f:42:
                    2b:05:80:20:82:88:bf:30:66:cf:41:e2:9b:f9:6c:
                    67:6b:5f:b9:f9:71:17:63:46:84:c0:57:74:98:d8:
                    79:31:0e:2b:df:12:f3:26:9f:9a:14:75:b6:17:b8:
                    4f:a2:e4:8e:2b:e9:1a:9f:55:07:62:9e:db:a1:5b:
                    8f:cf:40:03:de:64:c0:34:bb:a8:60:d0:9a:71:13:
                    03:63:3a:04:d5:13:34:05:2b:47:09:0e:49:56:d6:
                    92:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:53:F6:8E:77:10:A6:02:A1:88:DE:EE:94:FD:74:2A:E3:99:9F:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/785fb15e-90d3-3366-8c08-413a5c6d616a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.231.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:63:bf:5d:42:32:29:19:29:c8:2c:d8:65:e6:bf:8e:3d:13:
         7f:ba:9d:61:c8:7f:0f:01:9f:de:d6:49:2a:fa:da:35:a4:e9:
         37:8a:62:5c:a5:99:59:a2:ef:07:8f:92:b3:55:42:b9:86:4d:
         f7:c3:8b:11:c8:dc:62:38:c9:78:07:d0:6a:ad:69:a2:0c:63:
         66:87:1a:7e:b6:9c:0b:26:3d:bb:a5:91:f4:3e:3e:53:bb:f8:
         66:14:bf:f5:97:2f:61:bc:60:b3:6e:c0:99:c8:f0:67:f8:16:
         bd:74:3e:b3:ae:22:87:b2:ac:e2:71:ae:42:fc:a6:13:68:e0:
         9d:fe:eb:69:32:6d:22:0b:3a:cb:69:cf:b2:d7:e3:7b:18:f2:
         d4:ed:39:15:f1:a4:65:c4:95:df:bd:27:df:d9:60:f3:1d:20:
         64:81:d9:d7:66:6c:84:d2:b2:a4:6b:1d:da:25:58:90:65:63:
         5f:80:f3:2b:70:a6:74:13:c4:84:da:d1:5f:fd:05:33:06:0a:
         18:60:38:1b:90:fd:06:dc:43:9e:db:65:f8:e9:b7:16:ab:e1:
         69:a6:83:1e:7e:59:ef:20:20:90:41:fb:11:a0:28:02:73:7a:
         d7:fe:86:06:c7:0b:bd:eb:d6:6b:8e:67:b8:69:97:48:03:7b:
         31:b1:75:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:02:12 2026 by rpki-client