Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f81b5b09-ba5c-36a6-a17c-dd95da481955.roa
File:                     f81b5b09-ba5c-36a6-a17c-dd95da481955.roa (raw, json)
Hash identifier:          KY9bTfuwiRhxd6XStyXmdpldeYBVR492iC+NilnfN78=
Subject key identifier:   A8:4D:EC:D0:BC:E3:D2:97:41:60:C0:AF:5B:91:9C:16:99:11:93:E7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAE5E63BE583DCCD13D5FB480
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f81b5b09-ba5c-36a6-a17c-dd95da481955.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        132.145.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:63:be:58:3d:cc:d1:3d:5f:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=806a808c-3f49-4820-a5b1-f94fe726e12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7f:d5:23:81:78:0f:d6:fe:92:5c:61:a5:35:
                    e3:cb:d4:7b:d5:3e:9b:a5:9b:c1:6f:9c:5b:51:ae:
                    9b:87:91:d9:be:ec:4b:d3:d9:cd:21:99:7d:6a:6b:
                    a4:56:73:27:3a:27:2d:cc:94:f5:75:9b:3b:a7:ba:
                    42:bb:ce:39:01:63:8c:67:72:b0:46:94:07:54:ac:
                    e3:49:d7:bb:e2:74:ac:e9:ea:20:c7:44:27:33:c8:
                    1c:80:ed:ba:31:f9:cc:8d:9d:c2:ff:6f:d0:10:59:
                    1f:d8:82:02:43:51:22:dd:f2:40:03:56:10:7d:d8:
                    49:ec:64:8f:09:61:26:51:41:15:ba:bb:bc:a1:f5:
                    41:fd:95:9a:9c:3c:e9:e5:aa:8d:1f:e3:1d:8b:76:
                    82:69:1e:e3:88:5f:64:ac:eb:fc:29:ff:5a:8b:46:
                    bf:a7:d6:dc:d6:66:fb:b3:3c:68:3d:37:d4:3f:08:
                    bf:e3:04:f5:8a:eb:c8:f3:a4:4e:a3:2b:ad:04:0d:
                    63:08:e8:ad:17:c5:f6:32:ae:eb:55:e2:c5:d3:df:
                    22:03:f6:65:4b:16:58:3e:09:ee:7b:14:46:20:38:
                    18:67:72:1d:64:80:fb:f8:c3:ea:a1:a3:bf:43:c1:
                    7c:b4:eb:1c:9a:64:31:f4:34:b9:db:cb:7d:d6:22:
                    17:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4D:EC:D0:BC:E3:D2:97:41:60:C0:AF:5B:91:9C:16:99:11:93:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f81b5b09-ba5c-36a6-a17c-dd95da481955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.145.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:cc:6d:8f:02:c7:67:42:77:fa:4d:03:af:14:08:8a:d3:0e:
         7f:ea:ae:41:cf:a8:6b:2e:79:76:16:8e:bf:7d:9d:49:4e:1d:
         2f:98:22:8c:16:a2:31:b2:a7:f5:2d:82:34:02:82:ef:31:58:
         4d:0d:15:40:93:9d:e9:52:05:41:b6:a0:ec:a0:36:6c:cb:b5:
         e0:42:05:7f:27:78:62:39:51:8c:56:bf:32:1b:d1:0b:e9:b1:
         f6:07:ec:b6:e7:0c:d1:d8:42:f4:5b:12:a8:5d:50:15:be:87:
         17:61:c7:11:4c:6d:d8:72:dc:f2:80:27:fc:6b:6d:06:fa:8f:
         15:8f:3f:e2:d9:8d:df:7e:84:c1:22:b7:96:e0:cc:61:74:74:
         05:71:39:86:89:02:80:3b:41:0a:3e:b3:4f:55:87:28:28:5b:
         45:96:a2:ea:61:3e:5b:58:0e:cb:d8:b5:64:10:ee:9d:0d:96:
         95:41:b0:c5:ac:aa:80:3c:f9:34:34:49:cc:da:a7:89:97:e8:
         8b:0f:b8:31:c6:97:44:05:2a:60:83:c6:f7:ff:bf:70:2b:26:
         97:a5:13:2c:b8:59:d2:60:38:63:27:a3:5d:ec:06:3d:94:73:
         ef:71:8a:11:85:ca:1e:0f:cf:fc:3d:c7:6d:b3:e9:53:d6:b7:
         0e:ba:ce:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:11 2026 by rpki-client