Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1747a82d-0fa6-356c-b87e-78843071f867.roa
File:                     1747a82d-0fa6-356c-b87e-78843071f867.roa (raw, json)
Hash identifier:          r4AoNS0ZbV9FFfJoySAZp/8mCHjfPrtjn3L0+KaPUAA=
Subject key identifier:   48:D3:0A:92:FD:BE:FE:ED:03:FF:71:57:78:A0:26:99:87:97:FB:F7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EED51FDE9E9965D7A5700B400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1747a82d-0fa6-356c-b87e-78843071f867.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        132.145.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:51:fd:e9:e9:96:5d:7a:57:00:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=46e21461-e5d3-4af5-8584-3614800329c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f1:c2:5c:e1:46:62:dc:58:33:9d:9f:89:e4:
                    b7:21:42:54:d0:2d:c7:ff:14:a4:8e:28:55:f0:43:
                    1b:1b:84:02:83:0d:f1:d0:88:d4:06:cf:a5:6c:1e:
                    6a:10:27:8f:bc:ae:5c:24:de:49:0d:20:01:4a:6b:
                    8e:b2:b6:13:a7:28:e4:35:d1:78:ca:9d:70:c2:5d:
                    e4:75:e8:eb:c7:a3:10:e3:cb:1c:c7:ae:2c:71:47:
                    49:16:2b:68:d4:7b:7c:2e:16:e2:ca:e9:ea:6c:58:
                    02:55:db:31:5b:20:53:d9:e2:e4:4f:56:d9:08:ba:
                    77:1e:ab:61:7e:d1:40:8f:c7:33:74:e2:20:6c:e6:
                    cb:e7:63:64:26:a1:b6:54:de:d6:3c:8c:d2:0e:ae:
                    c8:7a:f1:cc:42:88:4e:36:22:cb:11:a6:ef:2d:02:
                    08:78:b6:2a:9d:1b:c3:7b:a2:a4:56:1a:ed:63:df:
                    20:f2:f0:68:d0:72:38:1d:b9:bf:c2:65:da:b6:d8:
                    28:24:a8:7d:37:9a:38:74:4f:83:c8:e1:c2:25:c4:
                    33:15:e0:6a:e7:4b:5a:da:e0:77:4f:a7:b3:97:9e:
                    e4:99:96:e0:0c:fe:13:97:78:bf:12:5a:41:98:65:
                    0e:17:1a:42:39:3a:81:b8:9c:b9:50:1e:5a:b9:cc:
                    33:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D3:0A:92:FD:BE:FE:ED:03:FF:71:57:78:A0:26:99:87:97:FB:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1747a82d-0fa6-356c-b87e-78843071f867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.145.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:cf:41:71:a4:00:18:40:e5:e6:9b:e9:f6:e4:bc:18:1c:4d:
         87:38:95:c1:cd:c9:26:34:31:21:20:34:a3:a5:ab:1f:aa:18:
         24:3c:49:fc:db:a9:4f:26:cc:6a:63:33:e1:88:5f:40:18:20:
         ea:4e:ff:d7:82:17:cd:14:b2:fa:5b:41:f4:69:09:a7:2f:ab:
         1f:68:5c:42:85:2b:65:5f:2b:6d:ab:f0:8d:c0:d9:c0:94:49:
         21:ac:35:3f:7a:bb:68:d7:c0:b3:19:16:bd:16:27:8f:98:09:
         da:89:94:2e:a1:42:89:20:14:2b:46:44:ce:e6:c4:94:94:08:
         7e:6e:1f:f5:99:16:a6:d2:5e:3d:77:d2:f3:cd:b3:15:40:6e:
         9d:f3:8b:0a:95:f9:57:df:7d:f9:2e:1e:27:76:8d:b9:96:4a:
         da:1c:d6:82:52:d8:8f:db:36:03:b9:9c:d2:23:c9:1c:de:8d:
         57:a4:06:99:42:1f:08:e8:e6:c9:e5:2a:33:5a:88:0e:fd:f5:
         25:73:79:18:0d:67:62:44:fa:b9:91:d4:e4:97:94:0e:f3:05:
         6d:62:cb:00:d8:36:8d:f4:f6:e2:7e:0a:53:b7:60:ef:34:15:
         5e:18:19:d8:62:e5:bc:6a:2d:58:5f:2c:e2:3e:95:10:62:f8:
         93:94:e3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:31:36 2026 by rpki-client