Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f794eda1-98e0-3ea3-b805-5f854043bd39.roa
File:                     f794eda1-98e0-3ea3-b805-5f854043bd39.roa (raw, json)
Hash identifier:          IHTk9anr24W7kqBFBkQoBTzW1aO3jmIGQYpXuhpbl50=
Subject key identifier:   86:24:89:BB:99:C6:63:AC:38:56:28:34:3A:D0:15:52:EA:A9:4C:FD
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E7A64D07150F4FB2CB74A3280
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f794eda1-98e0-3ea3-b805-5f854043bd39.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     31898
IP address blocks:        140.91.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d0:71:50:f4:fb:2c:b7:4a:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=01ac1edd-425c-47f3-9db0-ee95ab5bedf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:55:9d:bf:7a:47:ef:1d:11:89:76:cc:f2:b6:
                    74:c6:b6:1b:cd:4e:f5:0f:46:5e:b5:03:b2:96:74:
                    03:a2:53:a3:ed:41:e4:30:99:07:c2:c8:36:98:9e:
                    7d:cc:1f:10:16:55:dc:c8:0a:70:e9:72:ce:64:17:
                    0c:68:aa:f0:c0:cf:23:8b:c2:af:73:9c:8c:21:db:
                    fe:d5:51:5a:96:59:86:10:e6:4d:81:3e:94:99:e5:
                    53:56:f8:f6:70:d6:44:c6:e8:a0:c1:34:41:08:7a:
                    0e:ce:7a:2a:e9:07:06:bd:2e:d1:34:e4:7a:08:a3:
                    f8:87:54:27:bc:ce:0c:a6:cf:93:7c:75:16:fc:54:
                    ab:66:ae:3c:6e:06:31:a2:89:01:7e:e0:e3:35:b9:
                    1d:47:f3:24:ea:de:7f:85:7e:6c:0c:02:71:52:3d:
                    70:86:2a:17:c9:59:cc:bd:10:93:41:5a:10:3f:4e:
                    c0:12:9b:22:cc:67:67:38:27:ee:76:b2:c3:31:29:
                    44:b7:7d:5c:9c:de:21:9c:7e:d8:bd:72:08:eb:70:
                    f7:00:89:c2:39:a6:f9:06:3d:bf:99:9f:46:ea:8e:
                    fe:44:16:c7:21:3d:d4:81:a1:53:5f:5a:c1:28:19:
                    7a:3e:c3:f6:1d:64:fd:5b:6e:07:b5:8a:4e:1f:a1:
                    f6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:24:89:BB:99:C6:63:AC:38:56:28:34:3A:D0:15:52:EA:A9:4C:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f794eda1-98e0-3ea3-b805-5f854043bd39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:30:85:ae:57:69:68:4d:c4:ad:b8:87:14:2c:ac:e9:bc:ac:
         0f:57:b7:8e:1d:98:49:a5:32:aa:96:47:69:67:cf:08:a0:93:
         1b:08:fa:8b:0e:55:db:89:28:5a:42:37:d3:a3:6c:d0:be:94:
         d8:a0:b7:c3:c5:52:94:b3:d9:2e:6c:5d:24:85:db:74:fb:c2:
         95:ef:ca:6e:4f:11:21:49:67:97:23:ed:88:24:3f:5b:96:12:
         66:fe:ea:1f:14:5f:c7:b6:ab:46:7d:57:7a:78:b3:44:a6:61:
         4c:86:65:db:5a:c0:75:71:0f:58:9e:47:00:2e:11:f7:6a:55:
         7c:76:28:53:24:9b:5c:85:60:82:bf:ec:56:9f:c4:2c:d0:36:
         1c:1d:5e:69:fa:12:9f:26:f2:80:4a:f4:94:0f:be:02:ec:ff:
         0e:c2:89:b1:c7:fe:c4:9e:48:51:27:8f:bb:81:b9:34:b7:3f:
         7f:e7:14:82:7c:3d:20:04:69:87:23:bf:54:db:05:22:96:d6:
         5c:89:7c:af:fa:60:27:9e:02:51:19:34:ed:ba:27:0e:72:74:
         43:c5:2d:7a:05:09:02:39:09:71:87:09:d9:06:88:15:b8:9d:
         7b:fb:92:da:f6:9b:ef:a6:f8:b4:2c:cf:80:3d:ac:0c:96:10:
         10:45:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:49:03 2026 by rpki-client