Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47932dd3-0534-37b7-a2e9-041621769083.roa
File:                     47932dd3-0534-37b7-a2e9-041621769083.roa (raw, json)
Hash identifier:          pHE6hNlRUvhVhceAKEzib96JngWzt/YUW1LJnvMqfcw=
Subject key identifier:   B0:EC:09:AD:09:1E:81:01:47:A6:4B:02:E8:15:92:BF:CB:41:A3:B6
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EED5241991046EB72F8708DA0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47932dd3-0534-37b7-a2e9-041621769083.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        129.153.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:41:99:10:46:eb:72:f8:70:8d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=94566bf8-cbce-47b8-b2a3-4140a395e417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:31:6d:10:d9:da:55:b4:b9:42:ab:9e:7d:06:
                    bc:f4:13:bd:11:a0:6b:7f:d1:8e:25:a0:15:09:15:
                    fb:fb:04:ee:c3:b2:19:68:7c:ed:e8:21:9b:15:cf:
                    7a:de:3e:f3:d1:2e:f6:13:43:6a:3e:45:12:f9:52:
                    c3:5c:fd:f1:40:46:18:c2:62:67:72:93:42:03:22:
                    23:21:db:d9:aa:75:42:14:fb:94:58:5a:ed:b2:80:
                    af:31:86:75:03:26:eb:58:d8:17:be:9f:c1:7e:af:
                    a8:3d:5b:a9:b2:96:1d:4f:33:7a:b6:0a:82:15:f3:
                    be:dc:e3:74:1b:6f:0c:4f:d9:1e:b9:ff:90:54:22:
                    6a:89:fa:e2:da:1b:3b:74:51:ee:8c:19:03:d0:15:
                    10:dc:f4:f7:f4:69:dd:b4:54:60:2b:9c:ef:62:01:
                    79:32:34:ab:13:ce:05:01:34:c5:8d:bd:95:3f:1a:
                    d7:f3:44:85:2c:b6:28:69:cc:39:1c:52:39:86:d5:
                    6c:88:74:e5:c1:db:b6:ed:1f:84:a2:09:c6:0e:65:
                    78:49:46:ad:f5:62:6d:6d:03:3d:ee:ae:bf:70:6d:
                    bb:b6:c8:8f:29:8f:54:0e:5f:62:c5:65:6d:e8:1e:
                    50:a2:c2:7a:8a:be:08:0a:ca:d5:1b:b6:7a:df:57:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EC:09:AD:09:1E:81:01:47:A6:4B:02:E8:15:92:BF:CB:41:A3:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47932dd3-0534-37b7-a2e9-041621769083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.153.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d2:08:70:03:8f:a2:7d:a6:30:d4:00:47:af:c8:c6:e9:6f:
         ed:fb:2a:3d:da:e4:31:fe:90:cf:2e:32:6a:a8:ce:65:73:54:
         70:1a:bc:e8:c7:21:23:e6:93:b5:16:64:55:4c:cb:cc:dd:bc:
         89:e9:b8:d4:87:97:13:e7:41:9c:dd:e8:90:cc:47:37:a8:64:
         c9:36:c0:15:8f:bf:76:8a:44:06:d5:e8:8a:36:a0:86:db:1d:
         3f:43:ec:bc:f5:95:ae:d2:5d:64:a7:7d:a1:d2:da:08:54:fd:
         ae:26:ed:3d:02:c0:ff:01:a4:1b:ba:d2:70:9e:96:04:47:3f:
         08:db:97:62:04:70:c3:5e:d4:62:dc:a3:bb:86:25:1c:62:ea:
         cf:08:dc:cf:69:da:95:ce:07:7a:15:36:f8:a8:7b:02:2e:e1:
         b3:fe:27:e6:9b:7b:17:34:3c:c3:1b:86:5b:a5:d1:da:13:97:
         c7:9b:02:31:b5:ef:f6:03:d7:98:10:fa:b1:7f:5e:30:43:c8:
         4e:32:e6:ee:80:41:bd:e2:1c:1d:43:1c:96:37:56:c4:3f:c0:
         2f:9b:5f:28:0f:20:d0:55:10:ba:af:c6:a4:3d:62:95:0b:fb:
         07:33:14:89:85:2b:52:c3:32:4c:78:61:b8:8e:99:32:ed:76:
         bd:69:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:50:58 2026 by rpki-client