Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/ecab91a6-f379-30ba-bb0d-186e10d916d9.roa
File:                     ecab91a6-f379-30ba-bb0d-186e10d916d9.roa (raw, json)
Hash identifier:          nGbwBpg02RsgpfkAPHS8Vk27KNK3gX3xW1QxYh8ZSAI=
Subject key identifier:   46:4E:F0:6B:07:99:8C:B1:26:32:8F:3B:13:39:71:8A:80:45:74:F8
Certificate issuer:       /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Certificate serial:       010D0C9F4328584E2F0460774B342F4EB8327280
Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/ecab91a6-f379-30ba-bb0d-186e10d916d9.roa
Signing time:             Mon 15 Jun 2026 21:00:12 +0000
ROA not before:           Mon 15 Jun 2026 21:00:12 +0000
ROA not after:            Sun 13 Sep 2026 21:00:12 +0000
asID:                     22773
IP address blocks:        170.205.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2f:04:60:77:4b:34:2f:4e:b8:32:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
        Validity
            Not Before: Jun 15 21:00:12 2026 GMT
            Not After : Sep 13 21:00:12 2026 GMT
        Subject: CN=c1de9324-2489-43a0-aa4e-d825e73c3502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:77:fc:c1:1a:d7:ae:56:dd:a6:21:bc:2f:
                    38:dc:23:d1:2c:ad:2f:cc:24:4a:b5:05:9a:e5:ee:
                    21:4e:2d:b3:eb:87:21:1a:ff:75:05:da:cc:9b:99:
                    78:df:ac:db:bb:52:6a:46:12:c5:c2:31:e0:93:d3:
                    ba:ab:0d:60:7c:4d:c3:10:c9:c8:15:da:3b:ea:56:
                    d6:63:0e:56:a0:59:42:ca:33:3d:27:4d:56:b5:af:
                    ec:a5:05:35:d2:15:b4:ec:71:65:05:f7:70:8e:df:
                    2a:0b:cb:7e:41:9f:c1:8a:b3:b1:bb:7f:c8:ac:85:
                    e0:84:28:54:60:1b:76:6c:1d:7b:3c:38:66:60:fe:
                    c5:25:55:7b:3e:aa:2d:4f:5c:ac:02:06:76:a6:c6:
                    2a:ee:95:93:d6:1c:09:7f:42:4c:d3:45:ad:0c:9d:
                    91:96:84:0c:c5:99:6a:8d:f2:96:47:e2:94:d8:50:
                    f0:0d:8a:7c:0e:e4:48:d6:1c:a4:68:85:8c:f3:a0:
                    a0:5f:00:dc:4b:2e:6a:b5:cb:37:17:fb:bc:32:fd:
                    3e:46:86:30:63:12:51:fe:2c:4d:2e:0c:e0:3e:58:
                    fb:4d:9e:21:5c:41:ae:d5:7c:06:86:bb:48:00:66:
                    41:60:f2:bb:ef:8f:8c:13:2d:5c:2f:1e:8b:2e:a9:
                    ac:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4E:F0:6B:07:99:8C:B1:26:32:8F:3B:13:39:71:8A:80:45:74:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/ecab91a6-f379-30ba-bb0d-186e10d916d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl

            X509v3 Authority Key Identifier:
                keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:5f:37:12:1d:49:82:f8:63:1a:b4:28:fa:ef:52:05:14:f9:
         71:11:a9:48:7e:1f:ab:e6:6d:21:23:df:73:d7:39:fd:29:b2:
         ca:ec:a7:24:4f:75:a1:8c:a8:fb:1a:c8:1c:26:02:47:7e:9e:
         04:35:34:be:86:bc:91:41:d9:8d:1c:f5:5a:b4:d6:7c:6b:4f:
         c7:65:b5:a6:5a:b5:97:47:85:5f:35:76:a3:0c:83:59:c2:95:
         d1:87:fd:36:b6:0b:0e:a8:9e:4c:f2:66:92:74:1c:e6:ab:7a:
         d2:ad:c2:2f:65:14:00:73:e5:df:d0:25:77:83:af:da:f8:57:
         1b:c9:7b:ec:48:95:38:f8:b6:2f:af:28:e4:c0:93:e4:bd:4a:
         db:09:bb:62:9c:1c:49:1b:22:77:de:a8:fb:b8:44:46:7f:51:
         98:66:a2:08:75:53:e9:f4:1c:66:9c:fd:9a:56:14:3a:ea:e5:
         16:93:27:39:38:a7:84:07:24:28:af:ba:19:f2:af:03:19:da:
         e1:c3:1f:eb:1e:66:32:a6:b0:e8:c8:ec:19:3e:9c:52:eb:b4:
         25:35:89:97:6c:93:f9:f6:e7:8d:33:05:4a:9c:2d:7b:84:e3:
         43:e2:ba:89:72:5f:42:c8:2b:9d:fa:ff:a1:17:82:cc:f2:9a:
         9e:d0:16:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:52:48 2026 by rpki-client