Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3aee60c-17be-3d6e-a062-eace2af95bd4.roa
File:                     c3aee60c-17be-3d6e-a062-eace2af95bd4.roa (raw, json)
Hash identifier:          4lPUchNB98bcoy5/YOrecN/WmzDTvyu0toqCZxZAF6c=
Subject key identifier:   2C:A3:C5:54:FF:04:BD:1E:96:27:78:34:4B:AE:85:10:22:7A:BF:4D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6C6F7661E96B1B4C7BBFFF80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3aee60c-17be-3d6e-a062-eace2af95bd4.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     31898
IP address blocks:        64.181.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:76:61:e9:6b:1b:4c:7b:bf:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=2cfd74fa-23c1-42cc-9e78-a8ef5dc88fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5f:57:15:d9:a5:cd:79:07:24:c9:c6:0d:d8:
                    1f:fe:85:20:74:94:ff:d5:24:fa:8d:40:e9:29:4c:
                    ae:06:9f:bc:c2:f8:7e:de:3c:a1:d1:ab:57:67:e6:
                    ea:bf:fa:7b:ec:9b:d7:cc:8b:04:83:86:45:de:4d:
                    11:f0:9b:5d:38:37:75:7b:85:84:29:6e:c0:c3:68:
                    84:db:86:09:2a:94:5f:dc:45:af:3d:a7:ae:4c:69:
                    0c:d1:0f:da:d5:ed:01:4b:42:61:1e:4f:96:8b:f3:
                    3f:33:ed:ee:3e:b9:fb:a4:78:8c:39:da:6e:0f:a7:
                    01:f3:af:85:90:b9:4b:d3:a7:44:cc:86:95:8e:f9:
                    ea:32:56:02:ad:77:31:6c:22:a3:e2:55:26:5e:a0:
                    70:73:e2:46:cb:99:5e:66:d0:95:d7:13:37:e6:85:
                    67:0b:4f:d3:4d:be:8f:32:97:c2:85:93:61:77:53:
                    81:a6:b9:09:9d:e9:a3:d9:f8:64:3e:ee:28:7d:02:
                    b3:8d:2f:47:e4:4c:fd:1c:b8:51:a6:41:09:6b:af:
                    e9:bf:e6:12:11:bb:fe:2b:b1:6c:ba:df:f3:fe:c4:
                    6c:bb:e8:11:2f:e6:bd:b5:24:78:73:2b:79:2e:ae:
                    eb:5b:b0:48:91:65:2a:e4:fe:39:62:3c:c8:fe:31:
                    36:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A3:C5:54:FF:04:BD:1E:96:27:78:34:4B:AE:85:10:22:7A:BF:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3aee60c-17be-3d6e-a062-eace2af95bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.181.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:52:26:1b:09:4b:f0:c5:95:49:29:13:99:f7:b8:0d:a1:6b:
         39:8a:fa:ae:95:f3:d6:cc:e8:ca:ce:9b:c6:1e:49:ad:32:90:
         8d:ce:b2:23:58:d8:49:36:78:18:75:22:f8:25:23:c4:42:bf:
         c9:47:5a:b3:8c:ce:e1:93:17:7f:09:51:68:9f:02:46:c7:b0:
         bf:69:93:80:01:42:28:16:ad:f7:51:d4:cc:dc:51:ad:bb:20:
         c5:ef:7f:89:e2:26:dc:7e:92:d8:6b:f3:f3:f4:db:14:b2:54:
         82:db:24:9c:62:dd:d3:0d:c7:40:c9:82:23:5a:38:da:60:66:
         d6:fb:df:65:77:fa:0a:e4:78:9c:71:d3:54:b7:07:1d:43:ec:
         c0:9f:46:2e:8f:7f:2d:c5:7f:6f:39:cc:96:04:fa:c0:7b:9e:
         81:a1:45:65:cd:2e:96:cc:e2:b5:b6:62:a4:ef:d3:ed:e2:83:
         70:dd:b2:46:c6:3e:95:8a:f6:39:d7:8a:ff:a3:9b:2d:3f:c1:
         ae:82:7b:c9:4a:c9:a8:77:1d:87:7a:e4:e1:ee:7d:dc:37:cb:
         58:b5:00:93:7f:e9:0d:05:f3:52:fe:8e:96:ef:44:1e:2b:aa:
         7d:8d:a8:50:9a:7a:a7:b7:6c:b7:9f:3b:f4:93:33:57:7a:0e:
         b7:08:43:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:45:37 2026 by rpki-client