Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b49aba7d-63a7-3d71-a116-db80a4fd932a.roa
File:                     b49aba7d-63a7-3d71-a116-db80a4fd932a.roa (raw, json)
Hash identifier:          Ph0YFkwazyDsOeABGzL4sKyrBW7C/gj4EgQQX7pfghc=
Subject key identifier:   F1:C5:BC:CE:99:B2:5F:41:F8:06:FF:5B:44:38:BE:41:74:2D:B5:F2
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAFBC82622244F419D22906A0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b49aba7d-63a7-3d71-a116-db80a4fd932a.roa
Signing time:             Thu 29 Jan 2026 14:00:40 +0000
ROA not before:           Thu 29 Jan 2026 14:00:40 +0000
ROA not after:            Wed 29 Apr 2026 13:00:40 +0000
asID:                     31898
IP address blocks:        151.145.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:af:bc:82:62:22:44:f4:19:d2:29:06:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 14:00:40 2026 GMT
            Not After : Apr 29 13:00:40 2026 GMT
        Subject: CN=bc901821-ea5c-45a4-8070-99d0bc2c5547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f7:6f:bc:60:0a:10:a2:06:4e:ff:c4:ba:d6:
                    6f:27:dd:be:2d:61:50:b7:52:81:d7:c6:f7:00:ec:
                    6b:df:c6:9f:07:8b:ed:1e:d8:1c:05:09:f4:2c:5e:
                    7e:01:41:0b:49:7f:26:ba:16:23:cc:58:fc:41:14:
                    5e:32:c8:5a:08:75:e8:2f:81:99:ac:77:86:3f:54:
                    3a:0c:48:ff:1f:4f:6d:55:f7:83:d6:de:ad:75:5d:
                    64:07:09:b5:f2:f1:f5:ce:dc:e4:b2:81:d1:2e:9f:
                    8b:ff:69:60:90:69:a1:71:12:a8:1c:c7:ab:40:00:
                    8b:95:49:18:3b:6c:ef:dc:1e:46:f2:25:48:f1:09:
                    ea:1b:a3:ba:43:68:23:66:c8:53:58:d3:1c:be:10:
                    ca:fd:3e:5b:ea:94:de:96:02:9a:a0:ec:4d:a8:c0:
                    7d:1f:06:91:59:e2:6b:18:94:8a:66:45:81:ea:b4:
                    a7:6f:0d:8b:b7:17:98:c4:c3:40:ff:e8:10:de:6f:
                    e5:58:1c:8c:1f:a3:8c:44:21:34:88:21:b3:54:70:
                    49:17:45:94:ae:60:d5:5c:2a:f1:6e:07:bf:be:10:
                    1a:aa:22:81:1b:ce:ef:9d:97:d4:17:79:b7:93:ea:
                    5f:1b:0c:de:ce:8c:f5:7e:04:b7:0b:02:87:d0:ba:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C5:BC:CE:99:B2:5F:41:F8:06:FF:5B:44:38:BE:41:74:2D:B5:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b49aba7d-63a7-3d71-a116-db80a4fd932a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.145.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f5:77:8e:db:47:da:4c:ad:72:4d:b3:b7:76:70:c6:6c:a7:
         a6:cd:fe:ca:e5:c7:21:0c:bc:fd:7d:8a:2f:4c:fe:58:ba:b4:
         c0:43:4b:a4:57:3c:b8:74:ab:65:aa:54:94:6a:9a:68:d4:c2:
         94:46:ce:1b:f5:f4:18:10:74:58:7e:c9:39:1d:c5:e3:d5:ec:
         25:9c:7b:c1:aa:8b:b8:8b:29:81:3f:82:3f:c0:6d:8c:b7:1f:
         93:e4:b2:fb:d6:3f:4f:57:2a:7b:71:cc:b3:62:35:14:08:01:
         97:a4:a7:da:85:f9:e4:e5:a8:31:be:2f:bc:43:53:5c:ee:73:
         07:b6:45:96:9e:d2:04:44:97:27:0d:70:46:69:ac:c9:0e:aa:
         16:4f:82:1f:4e:bd:d5:a6:a3:d5:f7:6c:ee:ac:a4:84:65:b6:
         f5:0c:55:05:71:b3:90:e2:57:df:d7:27:e1:f2:89:13:f9:32:
         8d:bc:ed:7f:a7:73:a3:14:98:e9:a2:e7:c5:b6:2a:bc:b9:e3:
         8b:a9:e6:80:db:f8:b2:02:91:0e:e4:1d:cc:77:80:60:b3:20:
         ea:73:3d:35:00:cf:d8:c8:ef:60:3d:0b:dc:c6:ab:d6:0a:97:
         67:1d:51:18:36:3a:7b:65:cd:fd:e0:cc:0a:f8:85:88:61:75:
         a9:f1:e1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:21 2026 by rpki-client