Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20b7ffd9-4ca2-30e7-a2b1-a00bd347c42f.roa
File:                     20b7ffd9-4ca2-30e7-a2b1-a00bd347c42f.roa (raw, json)
Hash identifier:          sBvxWTwe0JuUUptXIG+g8lE+4yAJimJM0+IrKk3L9v4=
Subject key identifier:   DA:0D:54:95:E4:44:B3:3E:95:3D:8C:7D:5E:2B:6E:44:28:FF:F7:54
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBDB1D6BD20884C26EB362F00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20b7ffd9-4ca2-30e7-a2b1-a00bd347c42f.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        144.33.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:d6:bd:20:88:4c:26:eb:36:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=83d52479-c6a6-4b55-8fac-8d6dd8e227ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:ed:90:9d:ec:45:54:3e:1d:c7:50:a5:65:
                    b7:51:b9:8a:85:e6:b5:59:d2:e3:66:2b:05:bf:61:
                    dd:42:bf:01:fa:4c:53:c0:3f:46:47:63:28:c5:d4:
                    60:49:d6:45:9e:41:b9:78:4e:db:6a:22:ff:e8:be:
                    78:c9:a0:bf:ce:f5:89:c4:ea:f2:eb:ef:0e:6f:80:
                    ba:2b:0e:d0:a6:65:45:30:38:56:d5:91:3c:cc:32:
                    b0:c5:f5:97:5e:14:1d:9d:df:09:f0:07:13:ab:50:
                    e8:27:78:bd:5e:ed:d7:5d:01:2d:7c:e4:2e:8f:c4:
                    ac:ae:5d:5b:90:df:0a:a9:32:b5:83:1e:d7:27:ca:
                    88:a6:30:61:95:a7:df:82:67:e4:82:9b:0d:46:97:
                    c2:1b:52:d3:b4:01:c5:2d:75:2a:88:10:e4:46:58:
                    b4:77:a6:39:4f:2b:2e:76:e8:35:bd:5a:79:19:42:
                    7c:dc:1e:e7:ee:ce:5b:f6:f4:80:03:8b:11:dd:fc:
                    ee:d2:c1:a7:9f:3d:33:82:68:c4:b9:b5:ee:6f:b4:
                    23:47:36:06:3d:35:aa:24:9a:a5:58:3f:b4:cc:ce:
                    0b:63:97:3c:80:75:5f:5b:07:69:d7:da:e0:ec:9e:
                    e9:eb:62:33:ff:54:13:e4:79:3c:9f:83:e7:a3:12:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0D:54:95:E4:44:B3:3E:95:3D:8C:7D:5E:2B:6E:44:28:FF:F7:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20b7ffd9-4ca2-30e7-a2b1-a00bd347c42f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.33.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:79:5d:45:34:ad:d7:9f:2b:14:2a:64:8d:be:62:24:0e:37:
         ae:fb:73:7b:22:08:41:44:c7:31:73:ef:85:08:1d:70:21:2e:
         39:b4:1b:23:34:ff:9c:ce:49:13:a3:c2:59:3e:54:b7:f5:af:
         c0:3c:04:91:fa:3b:aa:11:dc:4e:64:29:f7:d8:11:d7:bc:7c:
         f2:67:bb:93:75:2b:8c:ad:d5:74:b1:46:07:02:02:83:ff:5b:
         69:f4:17:3f:0d:d5:17:e2:4c:fd:b4:f6:87:3e:d5:cf:9f:01:
         ba:a2:fc:5e:56:13:43:ab:0a:2e:46:b8:b6:d0:79:9b:3a:94:
         ca:0e:ed:56:b0:eb:ef:c4:4d:dd:bd:bf:7d:8b:fb:06:9f:d6:
         41:0b:01:5b:8f:a6:e6:b1:e4:0b:f5:37:17:e8:f4:8e:76:d8:
         bb:09:62:39:f3:38:33:ce:16:07:1c:47:f7:56:cd:fa:10:39:
         8a:14:9c:2b:25:05:7f:e8:8f:26:16:83:3f:92:d1:52:63:c3:
         66:0f:51:62:64:0c:43:11:34:09:7a:cb:67:0a:51:93:ad:7d:
         f8:86:21:b6:8b:2f:d9:fc:04:19:bf:1d:6b:e7:2e:ee:5c:4b:
         a8:71:bd:df:c5:e5:a8:bc:5e:7f:1f:64:11:9f:05:f7:f1:f6:
         70:ef:8a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:26:26 2026 by rpki-client