Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/597ce31b-57c2-3943-aeb1-c071f53e7d9c.roa
File:                     597ce31b-57c2-3943-aeb1-c071f53e7d9c.roa (raw, json)
Hash identifier:          QEMUUdOWdSwOXbaejJeeauKmr7fIJdhPBugFlsGEwM8=
Subject key identifier:   ED:2D:F4:4B:E9:29:53:68:AB:C7:2F:EA:CC:E7:9C:09:8C:F6:71:59
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E78FF78EC1EF549B6B000D760
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/597ce31b-57c2-3943-aeb1-c071f53e7d9c.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     31898
IP address blocks:        129.213.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:78:ec:1e:f5:49:b6:b0:00:d7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=43a3c11b-4169-4333-9e66-1f373463b89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:56:01:b6:d3:79:40:79:e0:b0:c9:da:29:28:
                    e8:22:39:4d:6c:23:ea:46:05:5e:35:16:9e:a5:45:
                    f7:6b:d0:f4:67:c4:f4:e7:84:e5:d8:1f:c5:69:1d:
                    74:a5:5a:a4:9c:d4:9e:31:b9:ed:8a:8e:2f:ea:18:
                    08:35:22:6b:aa:66:a5:34:d7:46:83:b8:28:20:c6:
                    88:92:07:f7:0b:4b:8b:a3:e7:12:87:d6:70:39:b2:
                    71:c8:df:fe:e0:b0:d6:18:89:2e:8c:b1:56:83:25:
                    cb:5c:70:b2:5f:26:32:38:1e:8a:de:0b:38:0b:6e:
                    bb:b9:35:4d:11:fe:7d:51:9f:50:9e:10:91:79:c9:
                    a1:ce:6a:e6:12:a3:c2:f9:eb:f7:81:d4:5c:50:07:
                    24:3e:ce:46:63:f6:20:6e:12:22:65:fd:7b:77:a0:
                    fa:7d:56:47:6c:ad:45:0a:1c:83:94:83:8a:f9:02:
                    23:72:65:d9:51:1f:07:ef:dd:dd:f8:39:f7:70:10:
                    9d:93:f3:eb:4d:d3:27:21:1a:6c:64:a8:ad:75:07:
                    97:ad:ec:84:62:f8:83:b3:a6:c2:ea:db:31:3b:ae:
                    4a:5a:7f:fd:e5:68:9e:e8:6b:c9:4f:7f:81:01:f3:
                    30:6a:7a:cf:77:73:dd:80:00:e8:32:04:34:f7:e2:
                    ad:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2D:F4:4B:E9:29:53:68:AB:C7:2F:EA:CC:E7:9C:09:8C:F6:71:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/597ce31b-57c2-3943-aeb1-c071f53e7d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.213.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:95:48:e6:14:6d:76:26:94:e4:3e:cb:90:58:5b:0f:7b:ec:
         5e:82:e5:ab:0e:1d:d2:a5:5b:c3:84:58:72:f4:ad:af:96:ba:
         61:12:e5:41:f6:80:f0:36:ee:43:f5:90:e5:57:7b:a8:9e:01:
         01:90:a3:a3:0a:ef:3e:97:09:40:8c:bd:b9:1f:41:09:bf:76:
         2b:a0:5d:b7:50:9b:47:8f:0d:fc:c1:81:3b:00:c4:23:f2:2a:
         12:09:08:60:3b:f9:4e:ac:2c:5d:69:e6:60:ce:50:5b:c5:14:
         5d:06:d3:7c:34:b1:73:34:ba:69:46:d3:72:c9:0d:34:2f:59:
         a8:69:85:15:c3:a6:dd:70:29:db:dc:43:b8:36:d9:aa:e1:5a:
         df:6c:c5:67:a4:49:36:bf:9b:b7:9a:00:34:ec:87:a8:2d:4d:
         bf:82:c7:2f:61:a1:70:88:27:74:81:82:14:da:79:2e:a1:5c:
         65:74:3e:6a:41:14:f2:4e:12:14:11:fc:67:bd:c2:cc:0a:e2:
         6c:ea:a7:a0:a4:4a:d2:07:0b:ca:ea:8b:12:68:04:08:33:a6:
         0c:31:c0:3e:0f:e3:45:be:1b:9e:eb:6f:f5:22:3f:0e:a9:a0:
         f7:6a:5d:82:bc:ae:0e:19:26:25:1c:83:33:0b:cd:f3:55:31:
         33:c8:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:50:36 2026 by rpki-client