Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa6b79b7-b285-3d13-9e76-0d8b179d5e47.roa
File:                     fa6b79b7-b285-3d13-9e76-0d8b179d5e47.roa (raw, json)
Hash identifier:          9/m5WbUF5TrPwCFEpKSONlwJYWMX3n3n9wb/US+pFGY=
Subject key identifier:   20:18:7C:35:0D:54:B1:17:EC:FE:96:15:74:9D:1F:6C:94:BD:04:A8
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584DC135C71399A8388A0D1FBC40
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa6b79b7-b285-3d13-9e76-0d8b179d5e47.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     22652
IP address blocks:        173.231.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:c7:13:99:a8:38:8a:0d:1f:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=cb601fdd-adb5-4ce6-8069-a934aff5b2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e2:c7:59:d6:87:ef:a5:ea:88:09:b2:81:53:
                    6a:5d:29:45:46:d9:b8:cd:bb:b9:90:7e:a7:3b:d9:
                    29:01:17:7c:43:18:48:ff:fd:b5:ac:c0:2a:17:ae:
                    6d:8a:50:c9:f2:dc:de:bc:7e:9d:1c:d6:0a:68:3b:
                    05:7f:01:e2:9a:8e:e6:86:51:13:be:b8:06:d9:c5:
                    df:2b:ac:da:42:eb:7a:37:57:51:be:b6:e7:8b:59:
                    23:86:d4:a9:f9:b7:de:06:2f:d8:f4:32:fa:59:df:
                    45:3b:8c:cc:51:6c:75:74:74:c5:14:a0:dd:3c:74:
                    22:43:14:8c:dd:4b:32:d8:0c:06:12:eb:fe:d9:33:
                    34:69:d0:60:f1:2a:a7:cf:14:74:dd:67:94:6f:f2:
                    91:e9:97:3d:d4:74:09:35:d9:e8:b9:ef:ad:50:0b:
                    1f:eb:f4:5c:bf:ce:74:6b:d8:15:a8:21:3c:77:ff:
                    70:7b:b7:80:57:d1:ca:e6:ba:2d:dd:33:0f:5b:97:
                    72:7e:67:c6:4f:69:8c:03:ea:66:73:95:c9:46:09:
                    ef:74:5d:f6:b3:74:06:47:e8:fb:09:7c:a0:69:60:
                    8d:72:6d:5a:2d:f3:6b:90:8c:31:8a:7f:5b:c5:bd:
                    60:62:25:dd:61:58:3a:1c:4f:1a:13:4c:8b:78:ac:
                    12:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:18:7C:35:0D:54:B1:17:EC:FE:96:15:74:9D:1F:6C:94:BD:04:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa6b79b7-b285-3d13-9e76-0d8b179d5e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.231.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:eb:25:62:e3:0c:fe:7d:ce:52:09:33:02:0c:1f:52:ef:c3:
         f3:3d:02:d5:44:8a:6e:d4:81:b7:77:e4:2f:2e:42:07:79:53:
         3d:1b:5e:ac:a0:56:75:4a:13:bb:a9:97:24:d6:93:6e:3f:d9:
         0a:91:af:78:a7:8d:59:0f:f1:f5:8a:83:55:24:2d:7e:6b:00:
         bf:7f:5f:78:99:00:ff:e9:fa:f9:b2:dd:27:bd:8a:33:8b:15:
         51:ad:59:c3:df:5c:33:ec:0c:85:9f:79:e4:6a:61:bd:bf:44:
         f5:68:4c:74:ba:94:62:62:5c:07:ef:aa:a3:d7:8e:ad:1b:8e:
         45:55:1e:bd:45:b8:f9:32:6f:85:d1:92:1e:41:68:57:be:72:
         68:a3:01:84:e1:73:6a:f3:20:4f:a3:1e:fd:d5:25:f9:a6:0b:
         03:fc:14:62:26:40:37:08:6d:4c:5b:63:55:a4:3f:a4:fb:ca:
         30:a3:0b:ea:81:f8:c9:6b:c8:d2:9e:9a:3c:55:70:1a:0b:2a:
         ca:9c:74:bb:6e:9c:d2:cf:c4:2c:12:5d:5f:82:56:7f:fa:83:
         ac:86:27:99:36:0d:be:9e:fb:c1:c1:3b:21:01:17:4c:7d:2d:
         c1:78:f3:01:bf:a1:b7:45:43:8e:28:9e:99:cd:f8:4e:5b:3a:
         c1:a6:c7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 19:28:27 2026 by rpki-client