Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f17cf544-e67f-346a-b231-ab3fa04a7998.roa
File:                     f17cf544-e67f-346a-b231-ab3fa04a7998.roa (raw, json)
Hash identifier:          ml/+89is806GzVU3o5uhixz2QyHyod4sPSKrMOAaRYw=
Subject key identifier:   73:59:A7:EA:3D:DA:A6:24:89:DC:C5:E5:55:7A:66:A7:15:38:A7:C9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AFD42A550415229EB3605D900
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f17cf544-e67f-346a-b231-ab3fa04a7998.roa
Signing time:             Tue 26 Aug 2025 22:54:33 +0000
ROA not before:           Tue 26 Aug 2025 22:54:33 +0000
ROA not after:            Mon 24 Nov 2025 23:54:33 +0000
asID:                     31898
IP address blocks:        132.226.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fd:42:a5:50:41:52:29:eb:36:05:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 26 22:54:33 2025 GMT
            Not After : Nov 24 23:54:33 2025 GMT
        Subject: CN=642ccce4-a5ac-4c3a-bf49-24c29b2ca8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b5:69:e1:23:47:dd:88:e3:91:54:6d:de:93:
                    06:eb:93:14:58:57:41:b1:28:5c:bf:2a:78:23:6b:
                    bb:2f:3a:eb:3e:d7:08:fe:91:41:b2:05:99:24:35:
                    04:1d:40:e5:c1:05:91:e6:be:76:10:a6:0a:d8:41:
                    85:99:f3:e6:a3:ce:e6:d2:fa:82:bb:bf:30:b2:cb:
                    68:77:6a:0c:e2:2b:98:b8:b3:c5:0f:30:65:65:9b:
                    92:ba:db:6a:94:4a:a7:f4:3d:16:cd:22:b6:40:62:
                    34:21:c9:23:fd:c4:1c:bd:ce:c4:51:2d:8a:98:87:
                    0f:6c:fb:f5:b5:86:0a:49:92:ac:b3:81:93:a5:cd:
                    ab:4f:d8:ff:00:aa:cc:a9:ce:30:b7:4e:e8:2f:44:
                    74:07:37:b2:3f:4c:5b:9b:58:f9:bd:8f:63:16:23:
                    6e:20:49:03:7a:57:bf:f8:35:89:a5:c9:03:28:78:
                    34:b4:e3:cd:43:eb:9b:ec:7c:88:91:25:1c:eb:06:
                    df:87:da:e8:63:79:c2:4e:05:02:6e:89:ff:3d:52:
                    d0:55:a8:7d:aa:a1:47:e1:e9:59:f4:cb:23:b8:bd:
                    9c:54:f0:12:15:5d:01:57:34:76:14:6a:aa:79:64:
                    bc:25:eb:63:92:6f:fd:56:1e:79:5d:5b:95:42:78:
                    d8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:59:A7:EA:3D:DA:A6:24:89:DC:C5:E5:55:7A:66:A7:15:38:A7:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f17cf544-e67f-346a-b231-ab3fa04a7998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.226.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3f:85:b4:a6:62:1a:5d:bc:6a:03:47:99:06:d6:d1:a9:28:
         5d:02:8a:9b:6c:13:1c:0f:50:88:58:b1:d0:fe:dc:4e:46:f8:
         0e:c5:b0:18:6b:2e:3e:ef:6b:b4:12:23:6b:9f:92:8f:5b:1a:
         75:11:87:d6:f9:64:e8:6e:17:44:a3:8a:8d:cc:09:36:3f:8a:
         d9:a0:5b:98:17:ac:5c:22:b7:f8:f8:96:31:b3:d2:fb:5c:79:
         b5:6f:e6:02:6e:a0:f9:ce:0a:b3:2f:dc:84:18:c6:c6:a6:b4:
         7f:1c:2c:8a:ed:50:3a:53:ac:f7:6e:2c:1b:76:f8:b1:e7:1f:
         90:1b:d1:e8:17:ac:65:63:bd:bc:71:54:ec:8b:77:00:6e:50:
         08:13:8b:fc:b9:fd:6d:46:d1:9a:11:cc:d1:27:c6:ce:76:24:
         08:a2:da:02:27:63:f2:2c:48:42:ae:9d:10:f2:4f:4a:83:8c:
         c7:01:67:f4:a1:b1:4f:9f:80:5a:ef:9c:97:7e:2f:fa:81:45:
         df:c2:0c:e7:78:f4:66:59:91:45:b9:1f:86:30:c5:f5:d1:6f:
         3a:3b:86:4f:1f:e6:45:e2:e5:e5:71:1f:ce:b2:47:42:1e:dc:
         62:c2:6b:21:b7:9d:29:5c:18:47:ad:35:b7:c0:97:44:74:ae:
         4b:de:60:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:18:10 2025 by rpki-client