Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/31c2723c-53b1-306c-ac1a-2b1203a27d9a.roa
File:                     31c2723c-53b1-306c-ac1a-2b1203a27d9a.roa (raw, json)
Hash identifier:          WbEyWKD5LZfecVAsZeWuKXDyBv3Lr66MJUOZLM1CfsU=
Subject key identifier:   69:62:56:15:61:F2:78:5A:00:66:21:B8:CD:37:10:3F:0D:F5:B2:50
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584DE150A1CC6B5EE482B53DCE00
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/31c2723c-53b1-306c-ac1a-2b1203a27d9a.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20477
IP address blocks:        137.118.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:a1:cc:6b:5e:e4:82:b5:3d:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=476ff2bb-9e89-4601-ae9b-fe0082b15661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:d4:93:fb:24:3e:e9:b2:86:ff:8e:c5:a2:
                    ee:de:14:16:e9:58:d9:c7:a6:ad:24:22:c6:85:0c:
                    46:1a:65:32:67:95:06:5a:22:87:0e:f9:a8:e1:f4:
                    2c:14:65:57:19:e8:6b:79:a2:de:84:75:d7:73:9a:
                    c4:d5:d0:6b:ea:ca:b2:71:4e:ff:25:7e:f5:c7:af:
                    68:40:10:89:e6:7c:e1:8a:24:30:1a:ff:fc:64:a9:
                    c7:02:a7:5d:71:e8:bc:14:94:20:b1:61:a9:3d:c5:
                    cf:19:0d:0b:0a:8c:f4:16:49:f2:43:46:34:d9:24:
                    25:6a:c7:55:27:d5:4b:68:73:a6:1e:58:f4:47:e7:
                    b9:60:6c:87:73:ab:3e:e8:d3:20:9c:d5:ec:7a:1c:
                    a0:7c:35:a0:49:37:07:dd:cb:d6:f9:8a:60:c3:a5:
                    75:b3:a3:18:b7:f8:4c:8c:35:5d:0e:67:d8:8f:ab:
                    c6:ac:ff:9b:09:25:87:c5:14:7e:00:8c:24:01:82:
                    51:e3:b5:84:7f:7e:b9:c8:dd:80:a6:e7:80:a7:62:
                    79:fc:4e:9a:df:45:c7:5a:96:53:58:84:d3:d3:0d:
                    fd:bc:cb:e3:a5:61:c0:28:93:7b:4b:09:b4:33:e1:
                    f1:7c:1b:52:c5:51:94:a2:2d:6f:35:be:3e:1d:3b:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:62:56:15:61:F2:78:5A:00:66:21:B8:CD:37:10:3F:0D:F5:B2:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/31c2723c-53b1-306c-ac1a-2b1203a27d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6b:e2:5c:06:2c:49:11:89:4d:ce:53:db:0e:80:0b:d3:34:
         55:70:f6:86:7d:36:60:b1:b5:0f:eb:58:bc:51:22:02:2c:0c:
         21:4a:82:ae:b1:c0:58:c9:c6:77:6e:cb:2d:9d:45:96:82:2a:
         4c:d5:7a:43:e2:b7:43:1b:a3:54:43:33:c6:e1:ce:54:d2:b0:
         75:81:5a:b1:b6:92:aa:46:2e:25:36:a3:de:4d:f2:b0:dd:b5:
         dc:d3:ce:e9:c1:14:22:ea:a2:c6:64:01:59:12:a1:72:0b:82:
         1d:53:ee:71:c0:21:68:34:bb:1e:96:70:73:5d:a1:8c:58:46:
         00:c5:b2:a7:4a:88:ff:3b:4a:47:b5:43:f5:d8:48:ba:21:9e:
         0c:0b:6c:4f:8d:87:56:bd:19:b7:14:75:26:b0:b3:e1:d2:4b:
         98:1d:21:4a:57:e5:7d:aa:90:ef:ca:6c:98:22:29:ca:22:14:
         df:1d:9a:1d:79:91:3b:41:5a:ba:26:50:48:62:cd:62:10:e7:
         fa:56:1f:39:24:7d:12:19:fb:86:42:b0:3d:35:f7:bd:52:2e:
         d5:00:5f:47:60:33:1f:1b:01:72:58:39:c7:c7:24:52:ba:22:
         cf:54:53:bb:65:fb:56:48:46:c8:7d:1c:43:cc:4a:35:e6:d7:
         d2:ea:b1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:30:28 2026 by rpki-client