Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/13ae36b0-98f9-32ca-923c-5567474290df.roa
File:                     13ae36b0-98f9-32ca-923c-5567474290df.roa (raw, json)
Hash identifier:          15+isgWKr4Pr/sQZNu8lKGPWlOvC+iWQxI2WKLCF5Tc=
Subject key identifier:   B6:1E:E2:86:43:6B:8E:34:07:6E:5E:E9:48:22:B3:35:BB:2D:10:66
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAE56FF8CD4878E63584577A0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/13ae36b0-98f9-32ca-923c-5567474290df.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        129.148.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:56:ff:8c:d4:87:8e:63:58:45:77:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=28d3fe84-deca-4067-adb6-3d5be4275d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:90:02:c8:30:c6:09:26:49:a8:4a:cd:ae:9f:
                    da:55:0d:ac:1f:7d:04:41:2b:da:86:21:d0:58:4e:
                    c3:98:cd:28:60:f6:a2:63:d4:23:3a:d6:8f:a6:30:
                    39:e5:de:c5:1e:88:13:23:81:f8:cc:4e:80:0f:f6:
                    28:db:ab:ae:3f:0b:14:62:da:9d:9c:2c:7a:43:2e:
                    12:17:13:f0:bc:24:a6:a2:b2:0a:4a:aa:a2:ee:4a:
                    34:f0:41:5a:3a:15:e7:49:95:72:71:d9:0d:af:33:
                    20:46:55:d5:d3:1d:66:ca:5a:1e:af:ac:2c:95:50:
                    74:67:90:14:0e:a6:b8:64:41:80:e7:a1:d6:fa:1d:
                    25:a4:68:e8:58:d8:ff:d2:5d:eb:87:82:5b:f0:ec:
                    05:17:1f:94:dd:b5:19:6b:41:7f:9e:64:e2:62:08:
                    cd:86:c3:69:a2:6e:e3:fe:88:55:7e:ee:41:2e:49:
                    19:d7:49:17:77:0c:7a:2e:fa:f0:06:52:ac:22:c7:
                    c2:36:0f:d2:af:28:8d:6e:83:fc:b7:0f:55:31:4b:
                    b3:ae:39:18:88:5c:4d:d6:39:fa:68:77:7f:29:3a:
                    89:9d:0f:c1:1e:34:25:8c:81:dd:40:be:06:bd:a8:
                    d8:57:c5:1e:98:eb:2d:5b:ab:02:d9:90:28:fd:a5:
                    88:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1E:E2:86:43:6B:8E:34:07:6E:5E:E9:48:22:B3:35:BB:2D:10:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/13ae36b0-98f9-32ca-923c-5567474290df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.148.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c6:f5:79:22:aa:54:46:01:de:4e:70:ac:e5:50:2d:4b:b0:
         5d:d1:4a:de:66:31:34:06:be:0b:6f:56:88:e5:85:f7:3e:4a:
         1a:f9:5c:08:55:25:08:23:c9:b5:01:da:dc:96:75:90:c6:b8:
         35:1b:ff:27:90:89:4e:3b:4a:63:2b:7c:d3:27:9a:91:84:16:
         78:3a:14:44:41:4a:60:6e:b0:6d:fa:63:43:ab:2e:32:9f:6d:
         1c:58:f8:cb:c4:0f:69:2e:48:83:87:11:df:f0:8e:7d:cc:a7:
         13:0c:82:dc:e1:d2:31:29:a5:f7:04:a8:de:ed:94:0f:98:27:
         09:04:53:03:df:55:63:26:51:38:51:2b:7b:f9:34:7a:fd:2e:
         8b:67:12:d2:cb:e3:79:00:71:21:9d:3f:65:63:ea:0a:44:fb:
         5e:79:21:07:fe:12:aa:6b:8a:04:38:35:47:ed:22:22:23:84:
         47:ad:d6:f0:63:27:d2:46:d2:ae:8d:97:1c:01:5e:40:6d:00:
         fc:ff:44:19:e7:0a:ee:66:bb:75:6e:e0:d6:6f:aa:e0:a4:4e:
         b3:bc:31:ad:db:89:1c:54:01:1b:7e:79:01:69:c4:10:bc:4e:
         e5:83:8c:ae:26:b0:10:22:d4:27:3f:34:a8:3e:56:5c:7f:76:
         77:27:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:33 2026 by rpki-client