Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6bc1d7a9-2786-3e5e-8011-ffff9624a6f8.roa
File:                     6bc1d7a9-2786-3e5e-8011-ffff9624a6f8.roa (raw, json)
Hash identifier:          oenDbI0OAOKT9Evrqkh1NOILmAYF60CdO/ELYBI9rE0=
Subject key identifier:   87:60:C2:06:70:30:DD:59:EC:FA:35:2C:4B:8F:95:1E:30:56:6E:45
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D6EDA903EB93E9129BD34CB80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6bc1d7a9-2786-3e5e-8011-ffff9624a6f8.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        129.213.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:90:3e:b9:3e:91:29:bd:34:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=d144a6ee-3e2b-4e72-9e45-86c91347e09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ca:05:3d:3f:e9:dc:07:2e:11:b1:b9:71:86:
                    99:a9:1e:8e:98:6f:bb:95:ba:8b:e2:7d:12:27:2f:
                    09:ab:48:9d:f9:7f:68:58:cd:9a:db:14:a5:42:e5:
                    b4:17:af:09:06:f1:1e:e0:21:a3:1f:67:3c:d2:41:
                    61:71:18:6f:37:6d:cc:82:b9:32:3c:b3:f3:83:5e:
                    7d:42:60:ff:2a:66:2f:10:0a:ef:38:e5:33:52:1f:
                    ea:44:54:0c:c2:e3:0d:6c:47:62:a3:17:bb:84:79:
                    3e:e0:22:bb:4b:9b:b6:d5:d3:8e:68:3f:7e:00:4d:
                    1d:e8:14:89:d5:17:28:43:2d:a6:79:58:ef:67:6e:
                    7b:e6:c8:24:c3:87:8c:ab:82:6b:4e:e2:c2:2e:35:
                    78:16:a1:0a:9a:09:28:3a:bd:02:7b:41:69:3b:0b:
                    0a:f1:9c:cb:bd:6a:c2:fd:b6:d5:b9:f9:bc:84:c6:
                    7b:9b:3d:d0:63:b1:4f:e3:a3:94:03:97:1f:d3:86:
                    9e:8e:ed:22:ea:d5:6e:75:74:1e:09:e7:dc:0b:87:
                    4f:9f:2a:45:78:59:41:24:29:4e:2d:cf:6c:a6:c2:
                    7b:e5:fb:3d:cc:67:43:bf:08:50:24:20:ef:a4:b1:
                    56:62:df:fe:ba:e8:70:19:2e:54:b5:c9:c7:c5:df:
                    73:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:60:C2:06:70:30:DD:59:EC:FA:35:2C:4B:8F:95:1E:30:56:6E:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6bc1d7a9-2786-3e5e-8011-ffff9624a6f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.213.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:f6:bb:09:f3:f2:a1:b5:6f:71:b7:f4:e7:f1:9a:c0:4a:a3:
         af:58:28:4e:62:75:8e:25:b7:3a:7d:48:7a:42:12:a0:65:a1:
         c7:e3:02:d7:0f:79:f4:33:7e:c8:62:c6:4c:29:1a:f8:be:e4:
         46:7f:03:bf:9c:e6:3b:a3:8c:3b:8d:8e:10:a1:40:a2:e1:50:
         63:34:6b:35:d8:85:72:d2:21:d8:41:f3:6b:57:60:65:d4:70:
         3e:9c:61:da:b6:95:0b:c5:4d:5f:cd:64:11:ff:73:bd:be:20:
         44:5e:90:45:25:c3:0a:1a:f6:17:1e:35:1e:61:e5:75:fe:d9:
         f5:23:13:85:d1:90:0c:8c:d5:c3:87:27:1b:50:e0:79:47:be:
         57:a0:ff:fd:6c:1f:02:9f:ec:60:3c:7d:3d:f8:9b:e3:59:48:
         38:04:16:91:2c:14:fe:4f:fd:74:25:60:67:62:db:f3:b8:a2:
         57:f6:14:ac:db:e1:41:0f:1d:6a:2d:34:c5:0d:6a:ff:4e:07:
         76:8c:a5:02:8a:8d:e7:a3:2a:3d:cb:1b:f9:36:3c:98:02:86:
         e5:6e:b6:9e:b3:b6:55:7d:b7:76:2c:a4:4d:68:44:bc:c2:44:
         3e:a7:c1:ec:aa:6e:b0:2d:c0:2f:7d:d8:9c:b8:65:19:81:69:
         11:e9:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 14:39:03 2026 by rpki-client