Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7f6aeda6-32db-306c-b3d5-5915d5395033.roa
File:                     7f6aeda6-32db-306c-b3d5-5915d5395033.roa (raw, json)
Hash identifier:          Lc2ceb6J60QcKHIuszAGqv0SMyiWP2o47PrWJ/eY6hw=
Subject key identifier:   C9:AB:DA:8C:8C:C9:BC:A9:E9:F4:00:1E:1F:FD:E8:63:25:52:D2:97
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6F3A18D57635BCB59E49B2E0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7f6aeda6-32db-306c-b3d5-5915d5395033.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        129.151.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:18:d5:76:35:bc:b5:9e:49:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=8b75bf03-8549-4091-b2e5-ad0da978182c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:ff:81:ed:a5:a3:de:54:c0:f5:b1:29:55:
                    92:a8:bb:7a:80:67:c4:b4:75:6f:9e:34:0d:f5:80:
                    e6:4a:2d:c6:37:32:21:d0:bd:d8:07:1a:99:51:f9:
                    e6:c0:9a:bf:75:fb:9a:50:4d:ed:fd:71:49:3a:af:
                    1c:67:ca:c8:2d:8a:d5:9e:2a:43:48:5b:e8:f6:65:
                    b5:4f:78:9b:06:08:0d:51:9b:62:66:bd:a4:b5:61:
                    e3:4a:57:0c:7c:50:93:46:e4:e8:5c:ca:45:ed:fe:
                    b6:32:32:5d:e0:dd:39:63:50:26:35:e3:b8:32:99:
                    cc:a0:7f:7b:92:93:a7:33:11:15:7e:82:4e:0f:41:
                    5f:4e:dc:d0:fb:fd:19:16:e8:77:24:66:fa:43:2a:
                    ad:6d:2e:71:ee:e0:63:76:76:49:95:1e:31:60:dd:
                    74:ea:88:ee:28:8a:de:70:e6:df:76:b2:93:24:b4:
                    41:8f:46:aa:6b:24:1b:dd:32:98:4f:03:3a:a6:3c:
                    f4:11:48:b3:e3:db:a3:15:c1:5e:54:38:81:7c:f5:
                    73:88:7b:7c:81:70:51:66:7d:24:53:59:a6:36:f8:
                    a5:51:b3:50:80:10:ac:d4:5f:9c:df:f2:1c:a7:f5:
                    52:c8:97:9f:a1:b4:77:ba:d0:3f:ce:fc:50:82:eb:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AB:DA:8C:8C:C9:BC:A9:E9:F4:00:1E:1F:FD:E8:63:25:52:D2:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7f6aeda6-32db-306c-b3d5-5915d5395033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.151.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:2e:2d:06:1c:36:d9:76:8d:22:a6:85:de:a1:a6:ae:6e:
         f1:ce:18:70:8a:64:95:62:aa:a5:34:05:90:0c:08:56:8b:3c:
         68:74:4e:4f:50:a9:8e:83:6f:70:b6:bb:81:69:86:23:ba:59:
         de:06:28:22:1a:c1:bd:ba:6f:15:a7:93:cd:4b:84:ef:6b:3e:
         69:3d:fe:9b:7b:6f:21:2a:1d:bb:7d:25:09:d9:56:22:22:67:
         01:2f:bf:da:d3:a4:62:2a:cb:27:6c:f7:ea:9d:54:20:b8:18:
         b7:bc:e2:50:77:36:d3:44:eb:87:39:74:d3:2c:87:1d:b1:6f:
         a4:57:09:24:88:2f:5d:c5:c9:29:12:63:6f:e7:58:eb:6a:b9:
         52:b3:41:ae:83:8d:a1:ea:8c:50:39:22:88:63:de:19:ed:92:
         ed:ff:00:46:43:0e:79:e1:e3:ce:27:3f:21:ef:79:cb:e2:3f:
         32:b3:7d:06:c0:8c:4e:f0:8f:c1:08:24:8d:62:6c:1d:70:87:
         c1:af:f1:b5:39:98:cd:36:1e:15:f7:b6:73:ff:6a:f0:3e:35:
         a2:3b:aa:21:f9:5b:7f:fe:ae:f7:42:85:b0:c1:88:4c:55:88:
         7e:5b:ac:dc:8d:85:6d:4d:01:1d:de:49:22:c9:ee:59:18:fb:
         04:ca:c3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:49:36 2026 by rpki-client