Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/fce02999-ce72-39f7-957b-223a3adf7b3b.roa
File:                     fce02999-ce72-39f7-957b-223a3adf7b3b.roa (raw, json)
Hash identifier:          5obLvx3xmxNhyBI1r4YUnvhcK+K2/INAy7qe82B8glQ=
Subject key identifier:   CE:0C:C1:2A:4A:70:FA:28:96:65:F7:9C:4B:CF:B5:E9:EC:30:84:28
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F4328584DB4A587EC4AF9E1575DA888F0
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/fce02999-ce72-39f7-957b-223a3adf7b3b.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     48254
IP address blocks:        206.130.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:87:ec:4a:f9:e1:57:5d:a8:88:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=f308a412-d8d0-49b7-b852-0724527241ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:72:e5:f5:37:70:c6:c5:db:b9:8a:5c:5c:
                    0c:02:ad:34:2e:c2:79:65:de:71:80:99:fc:3e:6b:
                    ee:28:30:0d:33:11:af:4d:d4:4b:a1:b6:4d:a4:ac:
                    c2:99:23:f8:01:11:3a:c3:ff:51:0b:f0:6c:bb:0d:
                    12:9b:b3:cd:81:be:ce:59:62:58:4a:e4:be:d6:65:
                    43:9b:77:b2:f5:56:b3:26:fe:06:3d:53:b8:15:dd:
                    25:ce:b0:db:0b:3d:4d:15:1b:c4:cf:8d:92:6a:ab:
                    71:c7:66:12:b6:f7:15:db:d6:ba:37:80:3b:f6:62:
                    93:18:ef:75:09:aa:cd:62:c9:23:a1:6f:83:f9:a9:
                    4d:d5:1b:c4:b1:36:7f:6c:b9:57:c5:0d:70:31:e6:
                    f7:e5:8e:df:28:07:23:4a:30:87:aa:a1:a7:81:07:
                    b7:b4:63:9f:33:97:67:e6:e7:48:34:af:5e:2d:41:
                    98:a3:8a:88:b6:23:0d:e8:18:25:e4:ff:bc:4a:d8:
                    11:c3:1d:74:9c:c1:bd:8b:29:2d:a5:86:0f:46:c3:
                    41:fc:2c:40:87:ea:06:5d:21:29:33:2b:24:36:c2:
                    b8:15:4d:1e:4f:29:a6:67:46:78:c5:83:dd:a4:91:
                    c9:72:62:d2:ea:3a:c1:29:f8:20:1c:47:50:0d:f9:
                    6f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0C:C1:2A:4A:70:FA:28:96:65:F7:9C:4B:CF:B5:E9:EC:30:84:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/fce02999-ce72-39f7-957b-223a3adf7b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:04:9d:ad:e0:96:64:2a:b8:12:08:7b:db:cf:64:81:e7:06:
         8f:68:d5:2d:8c:08:51:89:ce:ef:1d:cd:8f:32:c6:63:f1:5e:
         ed:a5:cb:15:4d:28:e5:43:89:59:95:2e:82:fd:2a:30:ef:bc:
         db:42:17:87:6a:27:cc:ce:76:8d:e6:37:ea:fc:87:67:0b:f6:
         61:28:bf:7d:08:cf:5f:b8:d1:ef:16:70:45:bd:e6:84:25:91:
         74:9d:dc:13:27:aa:3e:46:37:d2:6f:7c:0a:8d:ef:15:bf:5f:
         da:ee:50:ec:83:28:ea:cb:b1:4e:61:ab:d9:bc:73:57:e7:33:
         c6:32:33:3f:7a:da:e1:d2:f6:08:9f:7f:e7:b9:6c:08:a8:44:
         21:cb:68:f2:d1:6d:90:4d:d2:13:4f:02:c5:14:08:3d:42:af:
         6d:64:24:a4:64:25:2a:d2:64:b3:de:2e:0d:f8:36:0c:13:62:
         44:16:0d:56:e3:80:2f:01:0d:86:a1:32:2d:b7:c6:d5:17:83:
         27:e5:22:d9:d2:3f:51:1e:ee:b9:5a:08:32:42:99:33:a2:3b:
         6f:89:8b:51:fe:6e:84:6c:62:d7:09:2a:69:63:05:8e:b2:6b:
         b7:05:b8:41:56:c9:f7:9b:e6:5f:68:34:da:d7:49:56:8b:65:
         e3:8f:ca:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 01:32:16 2026 by rpki-client