Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/67d9033b-f7fa-3e87-8748-945557538f21.roa
File:                     67d9033b-f7fa-3e87-8748-945557538f21.roa (raw, json)
Hash identifier:          tTcYCX7pS9MDE2hFvsdOqxUOtx2c98xWKscNzCH4zBs=
Subject key identifier:   DD:45:B6:0F:AD:49:43:70:C7:DB:9B:0B:32:10:94:6D:90:92:81:FE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D6AAAACD4FC7E27191A0B6430
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/67d9033b-f7fa-3e87-8748-945557538f21.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     31898
IP address blocks:        192.18.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:ac:d4:fc:7e:27:19:1a:0b:64:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=21f7831a-d34f-4e36-8ce3-d5b8945bfee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:76:ef:f3:77:94:58:60:7e:66:93:4a:e1:
                    5f:31:f3:ad:29:24:06:c3:89:99:8d:a6:9b:4b:06:
                    e7:ca:11:29:47:c6:28:ee:ea:de:01:11:d7:e0:c6:
                    f7:4e:16:6c:87:8d:c8:b4:ef:ac:6a:86:cc:c2:e4:
                    7d:c5:11:c3:97:76:bc:88:41:b9:86:71:50:c3:f7:
                    5b:94:8c:46:5d:d7:ec:79:7a:6d:e8:d6:a7:c3:45:
                    0a:71:67:e3:08:63:77:21:2f:a4:a8:51:af:17:2d:
                    7b:dd:7a:52:b9:a8:88:62:10:71:d3:3f:25:3c:69:
                    2d:8a:83:30:c8:04:ed:a7:1e:de:ff:6f:9c:ea:5f:
                    f0:31:02:8e:39:bb:88:57:c7:ab:76:48:4c:2f:44:
                    b0:83:24:97:d1:cd:e5:df:58:59:58:39:e4:ba:36:
                    ab:36:e3:a5:a8:d9:cb:f2:06:7a:4c:8f:07:d9:f6:
                    9b:ae:5f:00:3a:2a:27:2a:df:82:84:8c:84:de:0f:
                    a2:99:91:65:95:82:f4:5f:b6:06:bd:e9:88:69:9b:
                    04:4f:bc:8f:50:2e:93:ac:c5:6d:ac:4a:d1:46:90:
                    44:24:ed:9d:cd:7c:d4:a3:29:4f:a7:ee:59:41:e6:
                    68:a8:0a:fe:1d:c9:32:0d:b9:75:99:38:c4:39:09:
                    aa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:45:B6:0F:AD:49:43:70:C7:DB:9B:0B:32:10:94:6D:90:92:81:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/67d9033b-f7fa-3e87-8748-945557538f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.18.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:98:57:0f:50:21:cd:34:cd:f4:7c:fb:d1:b8:4c:28:41:c5:
         2f:53:50:be:ad:fc:c6:ce:22:72:49:04:5a:bc:6e:85:db:5a:
         1b:74:6f:5f:8d:4b:a4:1d:8b:ae:7f:b4:3d:1d:0f:f8:6c:63:
         b5:35:10:8e:dd:0b:c9:8f:be:6f:a6:e9:e3:1f:d4:85:fa:fb:
         ca:ca:34:02:c0:8c:67:9b:fa:2a:78:61:9f:3b:54:79:79:7d:
         c9:f5:5e:03:af:e6:d0:fc:d1:09:c8:b2:bc:c9:b2:a2:2f:e2:
         a1:12:49:7d:ce:85:07:75:5c:03:9f:86:6c:e6:6a:05:de:a6:
         ad:a7:e3:f0:5a:01:f1:2a:fd:95:82:bd:12:24:84:b1:3c:55:
         5b:ab:3a:07:63:48:94:51:7b:d9:b2:16:65:b1:c3:35:3d:56:
         fd:cc:bb:38:50:47:48:51:b0:45:e0:bb:91:13:c0:47:19:8d:
         3a:f6:8b:f8:4f:3d:99:fd:92:ce:f7:2a:9e:8d:41:63:78:98:
         5d:7f:17:6f:2e:14:18:ef:99:64:3d:c0:f3:f3:0d:e3:f3:df:
         8d:a8:7d:a2:7b:a6:b3:5c:06:d3:22:54:75:b3:e6:2e:86:f3:
         fa:ec:e9:92:75:a2:e1:c0:e6:8d:da:24:82:87:51:6f:1f:23:
         19:5b:b3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 14:40:58 2026 by rpki-client