Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/803797d3-4169-3147-bacc-6a400b59eb13.roa
File:                     803797d3-4169-3147-bacc-6a400b59eb13.roa (raw, json)
Hash identifier:          9bLqjP20/vMhxbq5CVKUQO39bNEfAR/bVTlL/wAxF/Y=
Subject key identifier:   02:AB:38:36:07:CE:E7:C9:91:DD:B2:E6:5C:F2:BB:AA:E2:D9:94:7A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E78FF74BA35D165F0BD721EA0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/803797d3-4169-3147-bacc-6a400b59eb13.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     31898
IP address blocks:        140.91.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:74:ba:35:d1:65:f0:bd:72:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=bacc219c-55a6-454e-8bdc-0f10069c83c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a9:db:08:22:3c:a3:c0:91:1b:49:ef:c4:02:
                    ed:8f:d0:8c:6b:d3:9f:d3:2b:b7:5c:de:d7:b0:98:
                    3d:4c:63:ff:9e:01:df:03:14:c2:cc:e3:9d:0f:59:
                    7a:93:aa:ce:0a:25:e9:7f:af:b9:e3:11:44:82:17:
                    9b:01:f7:ce:e7:f3:64:3d:e9:03:05:35:d5:9e:3c:
                    68:39:61:64:84:9f:56:4c:36:eb:0b:f6:09:00:7d:
                    9e:3b:5c:04:cd:f5:ee:2a:fd:ff:ae:69:fc:b5:d1:
                    9d:27:5d:66:d7:86:fc:cb:df:ff:c8:27:f3:74:06:
                    3e:ad:15:2b:ca:b1:ea:97:06:06:90:41:58:05:e3:
                    9d:39:3b:7d:38:64:c1:04:67:7e:0f:10:c9:48:1d:
                    99:4a:5a:1b:ef:cb:52:63:55:43:01:65:a6:c8:cc:
                    78:c9:86:18:73:af:8f:5f:72:2a:bc:5b:c3:c5:73:
                    a5:c2:76:df:14:70:f3:31:44:08:64:df:86:9e:f9:
                    c8:18:2e:0e:f0:3a:5b:cc:81:4c:fa:9c:0e:f6:83:
                    67:48:82:57:8b:2a:9e:19:a3:8b:bb:e3:49:ca:03:
                    f0:d3:79:f7:15:e6:5a:3b:6d:2a:03:8b:8d:dc:2e:
                    de:17:23:13:c1:0d:e4:d4:a5:9d:96:83:c5:39:f3:
                    43:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AB:38:36:07:CE:E7:C9:91:DD:B2:E6:5C:F2:BB:AA:E2:D9:94:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/803797d3-4169-3147-bacc-6a400b59eb13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:87:88:bf:2f:25:32:63:3e:52:f1:da:21:55:e2:0f:e4:ef:
         13:b4:68:c6:ed:09:30:79:ef:60:03:d2:60:b9:42:c2:a5:29:
         4b:7f:5a:30:d9:7e:a5:ee:da:94:f0:dd:38:bc:0a:ab:c3:af:
         4a:a2:85:eb:da:70:45:31:df:1b:7e:40:57:2b:c9:48:9a:77:
         6f:ab:8f:2a:ca:97:d9:62:dc:3b:46:f8:4b:4c:48:ac:62:11:
         ef:05:12:66:6a:46:0f:f8:90:8d:ba:27:9a:c3:6b:82:05:2b:
         8b:16:c2:39:a2:21:d8:c3:dd:c2:3f:e8:6f:00:c7:ce:36:05:
         37:f4:40:ae:e3:18:2d:f4:82:31:e1:d0:ca:fd:93:a0:1a:4f:
         27:7e:78:6d:b5:61:64:9d:51:9a:0a:ea:1a:22:20:24:d7:18:
         9c:96:f5:c5:8e:49:71:37:ec:2f:be:d5:dc:45:5f:86:3e:ca:
         07:85:39:c6:b5:d8:a6:fc:c5:eb:aa:3b:9b:6c:da:09:df:ac:
         b5:48:c2:38:73:5d:96:0d:59:a5:48:7b:a1:7a:5f:f9:b2:20:
         2e:5f:c7:00:c0:5d:77:56:67:d4:10:8d:c4:e7:b6:cf:56:82:
         83:54:0d:8a:6f:6f:7b:c0:a5:95:70:9b:52:a9:36:ba:02:4c:
         0b:05:78:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:50:37 2026 by rpki-client