Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23c5e5ea-0067-3a34-834a-532581a87ad9.roa
File:                     23c5e5ea-0067-3a34-834a-532581a87ad9.roa (raw, json)
Hash identifier:          E8E37hg91oFp78RsbKhfBpTmdtM/+jxngb6i7tnyxzU=
Subject key identifier:   7F:29:7E:C1:2C:97:D4:34:02:A3:F0:1D:82:E8:E4:77:35:DE:4B:4D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E5FDF5772B69CD65AA6E42600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23c5e5ea-0067-3a34-834a-532581a87ad9.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        207.211.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:57:72:b6:9c:d6:5a:a6:e4:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=3e97b9a8-6338-4bec-94e7-6e8e2522698e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:7a:da:41:5a:02:b7:93:53:d1:ca:82:60:
                    75:a7:be:cc:73:f3:0f:8c:02:df:7e:c3:c6:81:cd:
                    bf:95:c5:f6:75:de:93:70:a0:1b:14:b6:fa:07:88:
                    10:fd:f1:3d:0b:fc:67:cb:69:da:ff:d8:48:77:e9:
                    f8:26:af:21:88:60:0f:ad:13:2f:e9:82:23:5d:7f:
                    a7:58:64:be:5a:ec:21:bb:34:dd:93:67:07:4c:9d:
                    b7:23:ef:67:1d:8b:e3:e2:bc:9e:7d:ab:df:7b:2d:
                    42:54:6f:d2:58:7e:03:56:13:26:2f:25:6c:19:27:
                    33:35:c3:d3:ef:75:ae:e4:a7:87:97:b9:4b:c6:9d:
                    20:a9:ec:85:a3:5e:b2:8b:f5:8b:10:c9:4d:fb:12:
                    a0:cf:9d:d1:64:c3:e6:a2:a9:97:ec:2f:8c:f0:b6:
                    23:8b:e0:2c:a3:5a:65:87:c0:f9:22:8b:81:c5:a8:
                    21:30:52:c9:3f:ff:e0:4a:37:92:83:2a:9b:48:eb:
                    41:10:58:89:f2:30:91:03:10:91:dc:d0:79:8a:24:
                    7b:c1:4a:d5:da:1f:f3:6c:e3:c1:11:3d:ac:8e:63:
                    61:11:e3:c9:0c:dc:76:56:bd:79:89:f1:33:61:d1:
                    8d:ea:b7:30:45:e4:f5:ef:17:31:3a:f7:2c:be:88:
                    71:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:29:7E:C1:2C:97:D4:34:02:A3:F0:1D:82:E8:E4:77:35:DE:4B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23c5e5ea-0067-3a34-834a-532581a87ad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.211.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:48:e4:ad:e6:08:0d:dc:9e:82:21:1f:c3:01:6b:c0:58:3d:
         7e:5c:b8:9a:d0:b2:a9:4b:09:a8:2d:a7:2c:2b:9d:56:e7:32:
         5d:8b:61:73:09:3b:d5:41:9c:8b:13:49:f0:9d:f3:35:b1:85:
         2a:2a:31:57:d0:d6:1d:fe:10:1f:6d:5d:64:7c:29:44:27:26:
         85:22:6d:8e:4e:17:0b:89:31:92:7b:50:9f:6c:bb:fd:76:16:
         8f:dc:a0:a3:be:03:3a:02:75:6a:d4:02:62:bb:8e:6f:60:c1:
         26:6f:6e:40:f8:94:28:23:f8:ee:87:c1:13:13:67:b0:51:dd:
         04:f2:0f:0f:0a:88:66:e3:a3:d4:f6:86:12:9b:d9:35:06:9c:
         cb:8f:a5:49:c5:b7:22:52:ee:30:1c:5b:ef:b7:71:57:cb:df:
         6f:07:a5:66:26:34:df:0a:c0:bf:3c:ba:99:36:4f:c4:6f:8c:
         d8:1e:5e:18:95:8e:f0:96:01:80:9e:c1:3c:26:5c:cd:7f:69:
         59:64:df:a5:0a:5f:b5:26:51:bd:4a:24:4c:76:ed:bf:23:80:
         bc:c3:4f:e2:2b:25:0b:27:37:0f:de:17:1b:3b:6c:9a:85:c9:
         6f:99:cf:b8:75:7b:40:eb:c0:e0:ff:65:4d:44:f5:d0:32:ba:
         2d:a5:1a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:50:39 2026 by rpki-client