Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21da4dcd-40e9-3f45-8119-dec62e2629ac.roa
File:                     21da4dcd-40e9-3f45-8119-dec62e2629ac.roa (raw, json)
Hash identifier:          FbMgCGgtRHkNEukLImfNSNvtjyy89pK5lYuX9VFRDIY=
Subject key identifier:   5B:23:A9:82:5A:3A:AC:78:A7:23:CE:B5:51:8B:D5:77:A1:1E:3D:9F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E78FF8926D0B0DF4FB9FBBB80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21da4dcd-40e9-3f45-8119-dec62e2629ac.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     31898
IP address blocks:        140.204.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:89:26:d0:b0:df:4f:b9:fb:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=b4377077-e6f5-476b-af26-ebb197e57cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1f:34:fa:68:16:a5:6d:13:3b:b5:94:e9:3d:
                    ff:ee:52:2c:a6:45:65:9f:f6:ea:55:d8:c5:db:50:
                    ab:63:f2:9f:ca:b1:26:82:8f:5e:f6:1f:70:4b:c8:
                    f7:e6:10:54:c9:cc:0b:9c:ff:bf:04:6b:57:32:6f:
                    0e:b9:66:a0:3b:9c:15:bd:16:7f:3d:74:c7:a6:db:
                    36:3d:10:90:66:43:70:b5:85:a1:13:5f:4c:6f:17:
                    44:81:de:e7:1b:90:a5:5a:a7:f7:04:8b:b4:89:bd:
                    cf:72:0a:ea:a3:87:25:72:be:08:35:15:1f:97:46:
                    14:34:3d:4a:27:af:ed:80:33:a6:5e:49:d3:4e:29:
                    24:0f:e9:fc:c8:1c:ac:ce:c4:d0:44:c3:69:3e:4b:
                    ea:a4:e9:07:bd:f1:be:9e:bc:7f:9e:99:8a:3e:17:
                    bc:44:8f:e5:c7:f8:62:46:c3:17:c6:20:8a:d3:e5:
                    d7:4d:95:55:b3:8d:55:a7:25:33:cb:96:a1:8e:3b:
                    b3:0e:f7:8e:1e:61:3d:78:8f:8c:76:cd:77:69:4a:
                    ee:40:90:ac:0c:38:a7:9c:52:da:4c:ef:44:94:02:
                    ab:50:73:16:3b:d3:de:0e:4d:80:4b:4c:d2:55:ee:
                    9c:ed:7a:2f:34:52:0e:d3:1e:fa:8a:a7:93:da:15:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:23:A9:82:5A:3A:AC:78:A7:23:CE:B5:51:8B:D5:77:A1:1E:3D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21da4dcd-40e9-3f45-8119-dec62e2629ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.204.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:e7:f8:97:f7:b3:39:62:11:df:c0:0f:f2:a7:cf:4b:d1:97:
         b3:51:31:ff:6a:12:19:26:39:45:12:8e:85:bf:b0:6e:13:d2:
         a1:eb:d6:a1:ef:d8:0f:4b:c0:40:f0:62:0f:bd:98:50:a3:85:
         55:64:1e:33:77:fc:48:85:f4:64:de:bb:63:df:27:4c:40:88:
         70:8d:ed:60:b3:b8:46:cb:b8:78:00:7e:fe:f6:73:de:b8:72:
         c8:fe:13:e0:e9:c5:18:f3:2d:a3:0b:82:09:97:c8:7d:d4:68:
         cb:30:43:ad:b1:53:cf:c8:dc:50:ba:b9:c5:2a:96:81:58:b3:
         f9:b0:c5:76:9f:08:c3:87:82:d4:2f:6a:d8:9c:cf:9d:b4:d9:
         63:fe:89:f5:8b:92:ce:6d:f7:78:fa:ba:23:3b:23:f0:99:27:
         a9:7a:1e:4b:24:2a:e2:a5:7e:4f:99:92:69:cc:87:fc:6c:79:
         99:a5:24:eb:72:43:73:b0:e7:0e:67:05:1e:73:e6:96:1d:6c:
         a9:de:24:25:52:ed:d5:9b:97:c5:78:00:17:a2:53:27:b6:64:
         41:53:8f:9d:ce:c7:6c:e0:24:f6:9f:d6:53:b7:a3:a9:fc:5a:
         12:b7:4f:32:f9:1d:5d:ef:31:27:11:12:ec:f7:ee:e2:61:03:
         f2:36:2c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:47:41 2026 by rpki-client