Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eabdfb94-44da-37b2-8197-9839e295f327.roa
File:                     eabdfb94-44da-37b2-8197-9839e295f327.roa (raw, json)
Hash identifier:          +pIai2VntVYJbtZgKZeMc7BLYHOnV+aFfr6ZbkgSIyA=
Subject key identifier:   D2:C7:93:7A:7D:E4:77:16:CA:31:00:EF:81:5A:2F:F2:F8:EB:30:89
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAE571C17D3149D47CED92540
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eabdfb94-44da-37b2-8197-9839e295f327.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        132.226.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:1c:17:d3:14:9d:47:ce:d9:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=50509bbc-bcb6-4aef-bd54-a13f0342c9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:4f:3d:06:46:a1:55:ad:3d:b4:fd:5a:c7:
                    a8:42:4b:70:b0:f1:d6:c4:14:da:99:59:00:37:1a:
                    04:be:62:55:b4:ec:5d:1d:84:ec:25:de:eb:e3:14:
                    66:48:7b:76:75:90:57:39:80:2b:78:9b:c9:ea:d7:
                    28:03:43:c0:f6:6e:9e:3d:1f:3f:35:ce:e4:f0:71:
                    82:df:13:58:60:3c:5a:d2:91:a9:81:9a:e6:7c:4c:
                    06:8a:f2:c9:a8:d8:94:8e:0d:0c:5a:7f:9c:b8:c0:
                    94:6b:a3:23:b5:92:46:df:8b:84:b0:77:8c:b1:66:
                    41:ef:3f:f6:da:be:24:de:24:ac:1e:b7:66:46:e9:
                    eb:6f:23:8c:b8:57:40:bc:1b:00:f8:9f:50:2c:a5:
                    b0:63:5e:1e:54:a6:11:a1:7c:f7:55:b1:d5:d2:04:
                    25:06:7d:dc:c8:c5:2a:81:83:b3:3d:ce:f6:0f:95:
                    23:98:a1:66:24:84:1a:c5:19:b0:d4:53:86:d2:f6:
                    95:dd:79:07:44:cf:4d:28:8a:7d:ae:c4:4d:4a:a6:
                    89:82:76:c9:70:90:03:b5:9a:e1:e2:35:f5:0f:41:
                    85:e7:7d:f0:07:6d:72:86:6a:a4:fb:04:e9:c7:2d:
                    88:c7:ca:46:89:e8:f8:97:d2:b6:5c:c9:69:cd:da:
                    07:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C7:93:7A:7D:E4:77:16:CA:31:00:EF:81:5A:2F:F2:F8:EB:30:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eabdfb94-44da-37b2-8197-9839e295f327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.226.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:68:83:65:ca:e9:51:32:14:b7:f3:9d:7f:2d:72:c7:24:2f:
         63:9c:da:17:c5:e0:97:ad:a8:48:7d:b7:06:23:b2:49:f6:a1:
         99:b2:fb:93:c5:eb:53:7b:e2:c2:1e:f5:c3:6e:0d:55:54:46:
         67:55:fa:d8:6d:3c:6e:a1:76:00:8e:e8:62:8a:86:78:ad:9c:
         45:9b:45:51:8f:b0:dc:f2:39:95:8a:a9:1c:8a:3f:16:88:f5:
         4f:cd:38:5b:4c:be:37:c2:f2:a8:ab:a3:ac:01:59:70:7a:a9:
         50:cc:1b:91:a8:79:0d:dd:8d:1d:d5:5f:b5:a8:2c:1e:17:2a:
         08:71:39:cf:c2:50:0a:99:58:d6:f1:90:b4:c2:94:3d:1a:1f:
         3a:64:08:86:73:0a:4d:5f:c7:d6:a3:e8:70:d6:a5:eb:ec:ef:
         3b:66:15:98:ea:7d:f9:8a:8b:fe:a9:61:d8:a3:97:f8:42:84:
         93:e2:43:45:a3:41:12:e8:cb:51:37:ac:5d:43:b3:0a:14:74:
         d4:fd:3e:85:5b:5e:5f:99:0d:40:9e:78:c6:7a:09:ec:91:6f:
         5a:32:2b:35:d4:4d:c8:df:9b:91:fd:48:b9:23:00:aa:e1:e7:
         59:89:01:3c:e4:19:10:6a:57:70:a3:9a:59:8f:9d:05:19:8c:
         b7:2a:90:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:04 2026 by rpki-client