Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bba32fee-771c-335b-9470-3846133327bf.roa
File:                     bba32fee-771c-335b-9470-3846133327bf.roa (raw, json)
Hash identifier:          067KEGRTPrnuYuWHXZJpbwo/qHfXkbZqq6WWo8AWsfI=
Subject key identifier:   FB:B7:82:C0:F5:EA:BF:61:EA:93:F4:3F:95:59:31:56:03:08:5B:DD
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E7A64F83D91EB37380FF04980
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bba32fee-771c-335b-9470-3846133327bf.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     31898
IP address blocks:        163.192.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:f8:3d:91:eb:37:38:0f:f0:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=a12e7eae-c1bb-43dc-98ed-53d8384d81c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:22:33:21:1d:f3:3a:eb:b2:fa:d4:94:11:1c:
                    2e:b7:68:45:e0:ec:61:ae:8f:6f:b2:60:70:12:a5:
                    51:2d:3a:e3:98:8a:d5:59:9d:5c:f5:3b:94:91:68:
                    63:e8:5d:3a:08:47:a2:c4:ca:87:b7:69:22:83:01:
                    ac:d4:80:fa:8e:0c:7d:87:ba:96:80:05:ac:24:63:
                    05:df:e8:20:33:2f:7e:84:59:87:79:00:f8:7c:07:
                    37:a0:dd:56:84:d9:79:02:0d:ea:f2:ad:2e:89:e0:
                    d7:4c:a1:5a:bd:e9:ed:fa:0d:c9:d5:01:6e:1a:87:
                    1d:60:4e:64:b4:37:09:3a:26:81:8d:ed:f3:8a:05:
                    1a:8e:71:02:36:1f:76:77:2c:3e:15:6b:f4:ea:cb:
                    c7:93:be:48:44:06:d0:20:c8:fa:54:20:bf:d8:eb:
                    30:b9:cd:f8:63:e5:df:a8:2d:87:bf:48:b9:a3:2d:
                    de:8f:93:d3:98:3e:1b:2a:47:a4:c8:3c:7e:a7:83:
                    47:11:21:e8:ec:54:1b:c1:75:6c:5a:8b:7c:bd:c8:
                    18:dd:e6:90:4c:18:1f:b9:07:76:5c:c9:1b:db:43:
                    d8:28:c1:de:73:2a:73:61:bd:50:1a:64:42:07:f7:
                    b7:91:c2:95:06:74:93:df:5e:99:67:49:f5:ba:01:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B7:82:C0:F5:EA:BF:61:EA:93:F4:3F:95:59:31:56:03:08:5B:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bba32fee-771c-335b-9470-3846133327bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.192.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:9e:93:ab:ca:80:de:db:96:14:99:9d:5a:b2:02:6e:1d:f2:
         88:b0:1f:ea:1d:5d:d8:92:d3:e3:36:69:a4:91:e6:fe:c2:cd:
         a9:78:16:1f:49:fd:95:65:51:50:40:62:f3:29:6d:fb:0c:b3:
         a5:25:05:02:0b:86:73:8d:43:aa:97:1e:29:21:fd:cb:90:f7:
         6a:61:87:4f:a6:e9:34:03:0c:ab:89:a0:5d:47:fc:7e:0e:6c:
         6a:6a:ea:d1:f1:af:c4:73:46:15:a5:57:f3:eb:21:79:bb:39:
         41:9e:20:0d:ed:7a:01:f9:77:74:ac:cc:b5:57:e2:ec:47:76:
         37:a5:55:93:91:c7:04:74:8b:a1:1f:0c:51:87:fa:3b:58:26:
         fd:32:ea:4f:1b:79:14:9f:19:96:6c:15:a7:de:4f:53:8b:bf:
         57:9c:8b:0e:2e:1b:37:64:fb:eb:5e:56:eb:14:04:df:5b:43:
         79:54:b9:65:d0:e6:73:05:14:fe:99:b6:d0:a9:20:40:ba:7f:
         61:82:8b:e2:f2:13:13:53:67:db:f4:3a:e0:38:14:e7:cb:45:
         10:38:87:9c:7a:1f:f9:95:8d:0a:f6:74:98:72:34:76:b9:38:
         b7:1a:ff:56:05:a2:60:bb:7e:e0:5a:0f:db:9e:87:5c:9a:a3:
         ec:d7:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:50:39 2026 by rpki-client