Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa
File:                     cdaf3e33-82e0-3076-92c2-d497982c93fc.roa (raw, json)
Hash identifier:          UvHI3bBO1qT8IOtAuKXyDakw57718QMiPmKT3rk4848=
Subject key identifier:   63:79:6B:BF:03:E8:34:CC:F9:4F:CD:9D:83:4F:9A:F3:A5:59:2E:9F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA7886138734140C165694B80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        149.118.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:61:38:73:41:40:c1:65:69:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1a79cf9b-3988-4c76-bf97-2ce3d236e1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ff:e2:03:7f:42:98:97:e9:e4:87:d3:e2:ce:
                    57:ad:ee:c6:ea:ed:91:1c:53:b0:dc:11:e2:5b:55:
                    94:be:06:d8:50:1d:58:e6:7a:d5:c8:64:07:2c:e6:
                    1e:34:9c:be:bf:94:72:d7:68:26:c9:99:b1:97:e1:
                    7e:53:be:4a:dc:73:26:0f:f9:02:b0:03:26:0e:0f:
                    5a:1b:a7:a4:72:e0:0f:32:8a:1d:d5:ce:68:76:f3:
                    ef:d9:77:1b:b8:3c:f3:3f:2b:dc:eb:9f:42:bc:24:
                    7b:d5:b8:56:8a:e4:80:39:2a:93:f3:b0:24:de:1e:
                    1c:96:3b:5d:3c:86:79:96:8e:cd:54:9d:3a:86:d6:
                    a1:88:e1:8a:1b:7f:31:29:f6:7e:ed:31:7e:bf:f3:
                    33:79:84:6f:82:67:c5:49:c4:6f:b2:20:28:cc:47:
                    12:02:cf:d0:1d:22:7e:b8:09:7d:2b:d7:46:6b:d4:
                    4b:4f:a5:23:2e:fb:fb:79:0d:30:a3:21:04:8c:89:
                    89:49:3d:ab:40:e9:ed:45:ad:89:c5:22:f0:96:c6:
                    2f:4b:3e:21:5e:d5:1a:ec:9e:6a:e5:45:db:44:2e:
                    69:29:79:be:ca:a8:f8:59:78:5b:f8:4f:54:33:39:
                    41:17:2a:cd:79:64:29:31:40:d7:ee:2c:a6:6b:b3:
                    08:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:79:6B:BF:03:E8:34:CC:F9:4F:CD:9D:83:4F:9A:F3:A5:59:2E:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.118.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ed:f7:67:f7:fb:f3:58:33:49:d6:fe:25:f6:c4:34:28:aa:
         91:7a:b3:d2:d2:fd:87:46:8f:a5:86:81:27:11:55:b2:51:8a:
         52:08:7b:24:94:c0:b0:44:34:60:48:2b:de:fe:7f:f9:c4:18:
         cb:c0:70:ad:6b:e6:13:84:dd:7e:4c:fe:f6:98:82:7b:36:2e:
         18:80:9a:4b:f4:a7:ac:e8:84:c3:53:01:b6:df:84:9c:4d:6f:
         9d:b1:ae:23:db:df:93:39:1f:9d:37:6c:27:9d:fa:03:9c:3e:
         66:b3:27:a3:18:86:e9:04:d7:88:74:06:2d:45:2c:35:f9:ae:
         07:1c:21:1d:98:e6:d3:cc:6f:99:00:95:80:30:ff:95:fb:11:
         85:f6:67:3f:20:ec:94:1f:58:9f:16:f7:35:d2:32:cb:56:fa:
         46:39:f1:55:24:52:d2:cd:85:e7:e0:df:6e:8e:01:fb:a6:2b:
         45:04:fe:23:3e:78:36:2c:8b:1a:a8:35:c6:a0:73:af:77:fa:
         3d:2c:0e:53:71:e2:44:65:dc:46:6d:53:36:b5:9c:e6:48:50:
         e0:47:85:57:95:15:9d:ae:56:fe:52:3e:42:6b:0b:77:4f:79:
         e6:87:fb:05:1f:3e:06:74:58:6f:09:0c:28:c7:2e:d2:33:f6:
         72:cf:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:32:22 2026 by rpki-client