Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07097658-3eae-3abe-843f-4f35dccb79c3.roa
File:                     07097658-3eae-3abe-843f-4f35dccb79c3.roa (raw, json)
Hash identifier:          xTiiDlMW8Yc54Cp7S2S/0bz5GlEwd63m4L38osnu7aA=
Subject key identifier:   59:31:41:3F:00:42:32:B0:AA:D2:52:F4:09:83:5E:0F:F8:D2:65:27
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA786DF178DF4EC67A6F361E0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07097658-3eae-3abe-843f-4f35dccb79c3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        204.216.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:df:17:8d:f4:ec:67:a6:f3:61:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2ed4cd4b-60e2-4597-9291-f8f3a35fe5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b2:0e:06:7a:cd:06:2a:15:fc:fd:08:3f:17:
                    a4:fd:da:a9:56:0d:3e:3a:ee:04:1b:5d:78:bf:fd:
                    c6:06:1c:a7:18:14:f3:1a:97:dd:18:ee:a4:a4:30:
                    67:98:09:53:81:04:64:16:d9:5f:57:dd:f6:af:62:
                    2a:38:99:a0:a9:d2:f3:86:76:a6:30:eb:11:19:72:
                    b2:cc:17:7a:f0:a9:7b:34:ea:14:ef:bf:6b:46:88:
                    4d:2a:bb:e8:2e:de:e5:98:35:ca:58:f1:bc:08:b9:
                    e6:a7:23:0d:90:c1:52:55:11:6e:67:1d:eb:db:46:
                    63:57:6b:63:3d:1b:3c:6b:a9:b3:96:57:25:22:13:
                    30:61:9b:d5:25:ad:96:7d:67:21:e8:cb:c9:b0:2a:
                    74:9f:f3:b7:ad:36:13:60:cf:cb:17:09:bf:91:91:
                    9d:c2:74:e4:42:6c:6e:dc:21:d9:0c:38:78:0a:09:
                    02:53:93:10:00:e0:1d:44:cc:3c:ec:a9:8b:d5:1b:
                    f0:b9:f2:8d:9e:ee:a8:2c:13:8c:82:da:72:88:d3:
                    ab:68:89:3c:46:02:2e:20:06:8c:20:53:01:0d:a0:
                    38:67:d1:e7:52:ab:a5:ab:36:5c:13:00:6c:42:79:
                    a0:8c:61:3d:e7:c1:92:88:2a:91:38:dc:01:3f:a4:
                    c1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:31:41:3F:00:42:32:B0:AA:D2:52:F4:09:83:5E:0F:F8:D2:65:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07097658-3eae-3abe-843f-4f35dccb79c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.216.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:38:cf:25:0e:87:04:3b:b0:3e:9a:33:42:94:33:9c:6d:36:
         8f:bc:f6:b9:7c:fe:c4:9b:ba:f8:83:ea:4c:45:c6:05:49:bb:
         6f:01:68:d2:0f:a6:1d:b8:dd:30:d2:ff:7a:31:76:0e:20:78:
         2e:57:0b:11:d0:2f:2d:4f:fb:62:b4:d2:24:82:cf:84:86:e4:
         cb:63:ab:c6:ee:40:8b:f5:49:54:b4:34:81:f9:a4:68:3b:f0:
         8a:ae:08:00:84:b9:72:53:8c:79:2d:29:58:88:2b:3f:96:67:
         ab:be:d1:07:69:4a:87:39:43:38:fd:2d:af:bb:97:83:29:45:
         50:45:cd:8d:20:1e:90:fc:b7:49:31:12:b7:4d:d3:6b:e0:95:
         cc:ed:17:66:fa:b8:a1:c1:86:8a:54:b1:c1:9b:56:8b:e0:24:
         b8:10:c6:b6:65:e8:d8:1e:87:7a:0f:5a:29:ee:14:fb:36:28:
         f4:fa:58:d4:d7:99:78:d3:bb:61:29:52:73:f0:48:ed:37:ba:
         6a:24:28:85:87:14:85:28:5a:b4:3a:df:2f:cc:97:a6:46:88:
         41:03:6e:50:61:6d:01:73:13:5c:ea:37:5b:a9:2c:f7:9e:01:
         fd:4f:64:1f:06:51:8a:00:b7:79:2d:38:4d:cf:ab:c1:9e:cb:
         c3:d4:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:29:49 2026 by rpki-client