Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b4d20767-190d-3a57-9240-c782ac842360.roa
File:                     b4d20767-190d-3a57-9240-c782ac842360.roa (raw, json)
Hash identifier:          p/7j5EhC2mq1pdGDvK+NdyHq8B7JE7L6sG70ba6omhU=
Subject key identifier:   CA:B0:D7:5D:90:51:56:6C:4B:EE:F0:B3:83:D8:C2:B3:3A:65:30:40
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CB981D40DA0D0EA5665C2BDA0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b4d20767-190d-3a57-9240-c782ac842360.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        140.91.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:d4:0d:a0:d0:ea:56:65:c2:bd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=61b1a99b-59a9-446f-bda5-6655f1a37077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1b:da:e2:13:c9:5f:cf:a3:ef:34:41:a9:d1:
                    30:8a:a3:3c:db:02:6d:1e:50:46:8d:46:03:8d:1d:
                    45:a0:b4:b6:bc:20:c1:a4:cc:2d:13:1b:7f:2a:dc:
                    4d:c4:9a:54:84:1b:36:2e:e8:78:50:4c:b9:1a:ae:
                    1e:31:88:ee:23:79:08:b3:14:c6:32:9c:c6:67:61:
                    c4:53:8d:d1:fd:9f:01:6e:88:58:21:46:62:9e:ba:
                    9c:39:49:cb:19:52:b0:27:d7:d5:6d:a2:d3:28:f5:
                    3f:a7:c6:5f:d5:ca:1b:0e:be:0d:6d:50:92:e3:5f:
                    be:32:18:83:7b:c1:12:83:7d:f6:4c:12:36:04:74:
                    af:8f:ea:1d:c6:c5:b0:63:78:38:32:3a:13:9f:a1:
                    21:a1:08:83:a2:da:59:d5:01:24:d4:e6:76:a1:33:
                    54:96:c1:3a:d6:94:ba:08:2f:5c:aa:06:66:7c:ee:
                    8f:8a:8b:16:a3:d1:40:43:5a:1b:ca:a0:c6:0c:1b:
                    95:3b:39:8a:81:01:f8:40:67:6a:ae:c9:15:89:79:
                    ba:a6:d4:75:e8:3b:60:e1:f1:c5:bb:ba:69:b7:ed:
                    63:73:f2:73:c7:03:61:3c:07:d3:76:85:10:5f:c5:
                    45:4c:40:3b:5a:5a:24:69:d3:40:3a:01:04:e9:72:
                    ed:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B0:D7:5D:90:51:56:6C:4B:EE:F0:B3:83:D8:C2:B3:3A:65:30:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b4d20767-190d-3a57-9240-c782ac842360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a6:d6:0b:1d:6f:08:1d:ef:31:c9:24:2c:03:9a:ef:c8:12:
         17:fb:db:82:95:95:53:14:23:4b:bf:57:47:f4:25:fb:fd:3f:
         1d:19:b2:4c:d5:84:78:6c:70:7e:91:6e:70:cb:1b:e3:fa:e2:
         39:0d:f5:ce:12:98:07:06:48:f0:70:b6:da:52:43:91:5c:db:
         e5:84:d9:53:4f:60:27:8e:79:5a:da:bd:d7:f2:0b:5b:f6:50:
         d1:8b:56:c1:99:1d:a9:02:d4:1c:c6:2b:92:03:f2:14:0a:c4:
         ce:1f:8c:29:52:83:be:59:b7:19:41:72:c7:e2:d1:4a:62:f3:
         7f:fb:6b:e9:47:4d:63:f8:1a:d9:41:5e:02:ec:b7:24:94:7f:
         f5:f1:03:b9:89:6f:c3:63:c8:16:f7:3f:2f:8c:52:44:5b:aa:
         8b:e3:35:0e:a2:b4:78:58:58:35:1d:6a:16:c7:1b:a2:de:52:
         9e:65:f2:b1:2d:5e:97:95:83:57:b9:c2:16:f3:a3:ca:dd:08:
         7a:6a:6b:99:1c:d0:a6:5f:11:62:ba:bb:26:f1:d0:e0:74:b1:
         ef:5d:ea:cf:d3:e5:bb:8f:be:6c:53:ec:48:d4:09:8a:d6:fc:
         19:e2:1d:9e:b9:02:90:48:92:6e:6d:21:08:ed:0d:8d:2f:e8:
         e1:51:2e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:31:57 2026 by rpki-client