Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/261b2f23-e6d4-36e9-bb9d-b249d7d2d7b3.roa
File:                     261b2f23-e6d4-36e9-bb9d-b249d7d2d7b3.roa (raw, json)
Hash identifier:          1a+LcKTgE/umc/VY76lUEja/Pud2JvDcgXL9ZcfUF7A=
Subject key identifier:   35:33:06:A9:C5:C2:E3:55:98:31:12:7D:58:90:CF:DF:8F:2F:50:AA
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E709F7C566767DC1C65012680
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/261b2f23-e6d4-36e9-bb9d-b249d7d2d7b3.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     31898
IP address blocks:        144.33.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:7c:56:67:67:dc:1c:65:01:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=ac77a605-5bb0-4e0b-9349-32c78ecf5cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:26:b0:ea:e2:94:6c:b1:56:d0:87:80:04:
                    76:30:da:10:73:39:83:a1:e3:ed:ad:98:56:7b:c5:
                    9a:f5:91:3e:f7:3f:de:9d:ec:75:fb:26:88:57:28:
                    e2:d6:24:b8:31:fe:80:6c:31:a6:43:a1:8e:78:86:
                    24:ed:dd:67:9d:b5:35:be:07:a7:86:41:20:59:58:
                    a8:36:1f:79:d1:43:76:5f:f0:57:93:9e:45:27:82:
                    d0:7a:b7:c3:6a:bb:3c:3d:64:39:a2:91:3c:c9:72:
                    df:36:a5:9e:60:9f:4a:95:fa:61:bf:2b:2f:38:a3:
                    b9:ad:2d:c9:96:4b:83:60:d7:ef:03:6f:7a:70:53:
                    52:b9:be:7d:c3:b9:45:12:d3:da:75:04:9d:aa:0f:
                    42:45:d8:f6:83:7f:ca:fa:f2:ce:d4:01:78:89:c2:
                    49:c7:7f:78:9d:54:51:9f:a3:3e:7d:f9:76:d6:67:
                    57:76:18:26:8a:a0:37:b0:d6:70:5b:df:d2:93:1e:
                    45:a7:b6:46:5c:e6:90:af:69:6e:b0:84:5a:2f:d1:
                    1b:5a:4e:d2:f6:fa:05:b9:5f:c1:56:a1:93:20:78:
                    72:9c:8a:a0:2d:ba:cd:00:a3:77:52:6a:91:fe:17:
                    61:99:d5:6b:43:22:24:eb:f9:61:f9:3b:c6:2f:e0:
                    97:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:33:06:A9:C5:C2:E3:55:98:31:12:7D:58:90:CF:DF:8F:2F:50:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/261b2f23-e6d4-36e9-bb9d-b249d7d2d7b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.33.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5a:15:25:3c:72:89:f0:70:75:d9:70:0b:2b:a2:47:30:76:
         19:fb:9f:ca:7c:4e:06:81:6c:cb:b1:31:80:e7:3c:83:19:7f:
         06:14:ef:44:1d:02:73:1b:84:b7:ff:70:68:e3:b4:07:ab:4d:
         60:7f:8d:f4:4d:8d:d0:3d:27:58:bc:3b:31:87:0d:a8:d7:1f:
         34:65:92:af:de:06:19:65:b0:ac:d4:77:87:d7:02:50:be:0d:
         54:b7:da:77:13:70:80:8e:66:31:29:61:8a:82:17:dd:a0:cd:
         27:60:dd:a1:8b:e2:9f:f5:51:16:67:1c:a4:a5:9d:f7:15:fe:
         a2:11:93:45:5e:e2:fb:c0:14:f2:cf:68:d5:80:e0:bc:68:20:
         dc:ec:71:1c:fc:73:75:c0:6c:db:7d:ff:44:5a:68:6d:cd:1f:
         87:28:34:b6:3c:1e:b0:3c:ce:13:1a:0a:41:d6:d6:2b:a7:14:
         05:88:dd:e6:b7:a1:7d:06:d4:d2:fc:92:96:86:b6:18:cc:0f:
         6d:7b:9e:40:32:53:5d:dc:5c:28:11:1e:55:51:51:9e:75:9d:
         77:15:42:38:10:f2:ae:9d:21:59:12:24:6e:55:08:88:16:1f:
         b0:c0:d4:a3:d6:72:92:ca:7d:46:df:3c:d4:e1:87:bf:b3:d8:
         25:d4:a8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:46 2026 by rpki-client