Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa
File:                     98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa (raw, json)
Hash identifier:          GXxsnOJE2xBO4OmaTvmjK59mlLQsq9etGLy4aMWbK5U=
Subject key identifier:   C0:A1:F4:55:F4:76:71:D3:BE:88:C9:C1:04:AE:B4:C1:14:3D:68:76
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6F3A199C70D1132A7B55F000
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        192.29.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:19:9c:70:d1:13:2a:7b:55:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=ed1129dc-dff4-4a0f-965b-b0be0f62f1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:15:c3:b4:af:64:e0:0f:1e:94:c1:10:d3:ed:
                    ac:f3:a6:45:33:c3:37:6e:c1:7c:e7:3a:af:93:e7:
                    bc:c4:9d:9f:96:5b:80:32:97:a6:ca:39:da:38:47:
                    9a:0c:39:f8:f5:12:49:40:60:49:cf:d3:65:e2:3c:
                    19:89:d9:45:c7:4d:af:24:a1:60:01:05:b5:bb:10:
                    a5:13:74:20:0e:43:8a:39:df:0d:95:5c:cd:d9:0b:
                    95:a6:83:21:42:3e:c3:a9:b7:75:20:2d:0f:82:d8:
                    d3:a9:9a:19:62:bc:ef:23:17:ad:c0:ed:8f:e3:2c:
                    ed:99:51:9d:5c:06:9e:a9:c4:e9:0d:27:51:87:af:
                    0c:15:ce:ed:11:4d:51:68:72:b7:65:29:27:1d:dc:
                    17:f5:6a:b0:e7:ca:5a:42:dc:dc:fd:7b:3f:4c:04:
                    7f:ac:a5:80:2b:60:ee:e5:04:fe:75:7d:f2:92:c5:
                    db:67:23:7a:33:d5:e5:bb:40:11:06:46:04:5a:4f:
                    40:1f:ac:66:1f:ac:23:53:fd:b0:7a:6e:61:77:c6:
                    52:e1:65:c9:f7:43:dd:09:9f:40:8d:b6:28:61:3d:
                    44:87:be:4a:24:b3:83:a2:60:fe:fe:0b:51:ee:06:
                    f5:64:47:3b:ed:ac:9b:11:bf:76:35:d4:37:d5:e0:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A1:F4:55:F4:76:71:D3:BE:88:C9:C1:04:AE:B4:C1:14:3D:68:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.29.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:98:d7:26:3f:60:8b:e9:fa:a3:14:18:74:95:cd:74:3c:57:
         60:47:82:9d:d6:55:fd:5b:c6:41:e9:bb:1d:20:32:a8:05:c0:
         ed:2f:c4:d4:4f:f6:43:5b:24:a1:db:28:8d:be:de:61:1e:fb:
         d7:15:87:ae:fe:e4:45:60:e7:84:37:51:87:6d:33:20:b9:d1:
         ac:9d:59:1a:b4:15:ad:07:85:96:d1:7d:22:43:93:1f:4f:c8:
         97:45:53:b5:5c:19:7d:84:c0:fe:17:b5:91:3a:2f:9c:17:a8:
         32:c9:e8:6d:4f:1f:3b:01:08:53:d9:7b:a1:c3:8e:2a:05:42:
         c3:93:a4:f8:e7:93:86:56:59:80:e5:cc:91:bd:d0:f9:a6:97:
         84:d1:da:b7:3e:d0:13:9b:94:2e:8f:24:36:ec:5b:5e:aa:46:
         7e:3c:8e:b2:bc:79:23:b6:0e:2f:d1:a0:3b:cc:e5:d3:a3:9d:
         09:cf:32:62:55:40:04:61:07:1f:c2:66:af:24:bb:d7:d6:42:
         26:0f:af:6d:b4:3e:5a:fe:9f:56:b9:e6:4e:ca:b3:c4:96:bb:
         40:37:43:44:ee:7b:dd:0a:00:08:ff:4c:a3:bb:fe:78:74:94:
         a0:81:0b:3f:33:56:64:76:20:b0:08:01:24:ba:03:00:ca:ce:
         7e:75:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:46:43 2026 by rpki-client