Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/571cb3cd-281b-3f85-a7ce-d0cd30c660e4.roa
File:                     571cb3cd-281b-3f85-a7ce-d0cd30c660e4.roa (raw, json)
Hash identifier:          vUp3D493IfHsv9hMuNJ2q+wfyAwyMR29OczwqGz3oF4=
Subject key identifier:   6E:35:A4:D5:B8:37:1F:27:45:10:DC:32:F2:7F:A8:10:FB:5D:69:6C
Certificate issuer:       /CN=1226980a-2c43-43da-83fd-198696a9b02e
Certificate serial:       010D0C9F4328584DE84B3D12462CC105DC615500
Authority key identifier: E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/571cb3cd-281b-3f85-a7ce-d0cd30c660e4.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     14618
IP address blocks:        207.110.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:3d:12:46:2c:c1:05:dc:61:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1226980a-2c43-43da-83fd-198696a9b02e
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=3a39521d-fd05-47be-8417-1ef19976c66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:18:f6:de:8d:a0:ce:a6:dc:92:17:77:0b:09:
                    c5:bd:76:e2:70:83:14:cc:63:2b:22:d3:60:6c:ca:
                    59:f8:c8:9a:3e:9e:60:e7:65:ab:07:56:23:2d:33:
                    11:d5:2c:5d:3e:1d:93:71:14:82:ef:1b:2b:66:9c:
                    73:42:c9:1d:12:f3:b8:b5:35:3a:42:89:9b:2e:17:
                    86:19:ed:c8:92:70:5c:8e:32:68:30:0a:f7:d8:fb:
                    f0:b0:fd:a7:f4:b4:45:5f:d6:de:e0:26:77:ee:44:
                    d8:03:e1:07:6c:ee:41:ad:14:c8:ee:21:02:63:66:
                    d8:b1:1d:58:b2:44:62:d0:66:13:83:53:72:9b:34:
                    8a:0f:70:df:d2:88:93:47:64:03:ba:93:69:f7:75:
                    54:71:9a:bb:59:20:83:6f:37:26:e0:d1:9d:47:cf:
                    77:59:98:de:e7:d4:f1:2e:da:0e:28:89:58:d9:f5:
                    08:f2:ae:b4:2d:4a:e1:0f:08:4f:d1:3b:e0:72:73:
                    5d:07:a9:70:28:22:72:a3:86:02:e7:e7:3c:b3:25:
                    6f:1e:d2:fb:b7:0e:b0:75:d9:4a:f1:00:1a:c7:b8:
                    90:32:47:52:70:d1:12:e4:8c:c9:c3:d1:ee:d7:0c:
                    d8:13:a1:05:a5:82:0f:0f:69:35:cc:07:e4:8c:67:
                    16:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:35:A4:D5:B8:37:1F:27:45:10:DC:32:F2:7F:A8:10:FB:5D:69:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/571cb3cd-281b-3f85-a7ce-d0cd30c660e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl

            X509v3 Authority Key Identifier:
                keyid:E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.110.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:84:19:a8:ed:22:48:6d:05:a6:50:48:25:95:e1:08:f4:a7:
         1f:e0:54:3f:50:b2:de:c9:c2:33:3f:75:b4:03:47:01:c4:59:
         db:c7:df:8b:0e:67:f8:2b:1a:af:5b:d9:e4:1e:38:e5:b3:ed:
         7b:89:9a:7a:1b:4a:5d:ce:76:c8:ba:18:cf:69:06:72:ad:27:
         96:f2:ad:0c:5d:5f:57:23:2a:82:ac:4f:4f:e2:a7:9f:5a:0d:
         b0:ca:22:24:b5:12:d3:e3:ec:83:22:10:68:11:96:eb:de:16:
         ff:01:88:0a:c1:0d:be:98:54:1c:a1:3d:34:e0:be:2d:75:fd:
         e2:d4:01:67:15:fb:5f:0e:59:7a:cd:2d:b0:c7:07:c3:12:0f:
         a0:31:0a:e5:b5:84:c6:2e:1a:c2:af:0b:53:ac:ba:ca:d2:d5:
         c6:fd:4e:ad:a2:6f:82:9f:60:89:b2:48:8a:18:2e:b9:5f:76:
         e5:76:ce:f9:43:0f:4a:40:e1:38:61:b3:72:06:13:a2:1f:35:
         1e:00:06:89:80:05:bf:9f:86:0f:34:c5:6e:4e:f6:fc:ed:5e:
         ee:71:f3:d8:c2:2a:99:48:d9:77:6f:da:46:3a:4d:4f:00:39:
         ab:46:54:2b:9e:28:49:23:fd:58:1e:5c:d9:55:e2:cb:b1:fa:
         37:72:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:20:28 2026 by rpki-client