Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a979bb9-1d54-3e5b-bf7d-c1661fbde173.roa
File:                     2a979bb9-1d54-3e5b-bf7d-c1661fbde173.roa (raw, json)
Hash identifier:          up7BPjfGigYfw7qrgq8sPQomXPemb2yyX+SAcYdqOxI=
Subject key identifier:   4A:A9:4D:F1:FB:49:0F:EB:48:4D:0A:F3:A8:1D:7E:87:60:C7:DB:32
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6F3A17B3FD57CFAB69B716C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a979bb9-1d54-3e5b-bf7d-c1661fbde173.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        130.61.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:17:b3:fd:57:cf:ab:69:b7:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=8e630107-1f97-4031-b418-b49a6566494e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:26:2e:12:c6:29:46:88:76:e6:a5:73:32:74:
                    57:5c:37:d3:cd:1c:dd:48:b2:46:51:e1:e7:71:d0:
                    73:ad:41:4d:a2:55:5f:e0:3f:ca:e9:55:3d:d5:cd:
                    29:75:9e:d7:7a:29:04:66:62:23:b6:91:35:92:c9:
                    90:28:2a:82:ae:17:85:0e:70:9f:84:28:ea:d7:26:
                    6f:00:4e:18:fe:16:39:55:45:9b:16:12:63:36:52:
                    5a:93:ab:7d:03:fa:6f:56:fe:36:ac:76:df:28:62:
                    2e:a4:4b:da:8a:53:28:3f:27:46:dd:0b:dd:56:83:
                    8c:d3:33:8c:14:25:f2:3f:56:a9:1d:c1:ce:af:75:
                    eb:28:7a:48:57:1d:d6:f1:9d:22:27:ff:ab:f5:6e:
                    85:a8:71:94:ee:00:79:04:90:75:58:75:b7:40:2e:
                    fa:6e:cb:ec:a4:60:7c:6b:c8:88:31:a7:8d:fd:a8:
                    54:d2:7a:be:c3:43:f7:28:1f:58:f8:94:ad:d6:12:
                    cf:0d:03:a5:35:f2:d3:50:32:e5:9d:e8:24:e0:af:
                    d0:4a:8a:4d:c6:81:31:a8:8f:9b:29:5d:7d:fb:2e:
                    96:d6:f4:b2:91:0a:4e:4e:59:68:e6:f3:35:ab:66:
                    f3:c8:55:72:17:5c:ca:a3:22:3a:2c:3e:51:9f:95:
                    14:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A9:4D:F1:FB:49:0F:EB:48:4D:0A:F3:A8:1D:7E:87:60:C7:DB:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a979bb9-1d54-3e5b-bf7d-c1661fbde173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.61.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ad:37:d6:32:39:7a:ab:83:6a:f2:8f:09:df:c3:ac:32:5d:
         a9:5d:8c:64:43:ce:08:68:11:25:f3:29:5b:c9:3b:1d:79:d6:
         b3:a9:41:22:db:20:1e:b5:2e:db:d8:e2:0b:dc:d1:ce:c9:5a:
         8b:8c:dd:ac:8f:79:00:2c:7f:95:dc:a9:a1:08:e6:ae:42:eb:
         c9:61:b4:e6:9d:f8:f6:55:58:eb:80:6b:25:d3:b5:73:94:73:
         26:6c:0d:ed:0a:12:50:c7:52:2f:40:3a:f0:15:1c:03:7d:b8:
         d6:89:ae:4a:07:46:cb:22:95:29:7a:4a:27:ba:0e:ce:ed:94:
         21:07:d6:69:af:13:3c:cd:c4:8e:aa:ad:a7:d4:c4:d5:07:30:
         5d:be:68:ca:18:7e:89:37:a9:24:08:cb:84:c8:57:66:a9:ee:
         51:03:8e:73:5e:0b:4f:19:25:99:ab:19:a4:23:62:10:25:50:
         f4:4c:6d:b6:46:3f:a5:99:37:1a:80:55:72:8d:ad:fc:7a:f0:
         f2:4a:d9:05:79:aa:6a:81:c2:75:ac:c9:8d:40:45:fb:48:a1:
         91:e1:a3:7e:55:b5:d7:1a:c2:3d:d5:c9:a4:c9:23:c2:1c:3e:
         58:57:b8:b6:51:0c:38:9d:b9:3f:18:a3:65:d2:96:3f:1c:64:
         5f:24:c9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:52:06 2026 by rpki-client