Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa457798-3258-3e81-954e-dcd26b3ccf18.roa
File:                     fa457798-3258-3e81-954e-dcd26b3ccf18.roa (raw, json)
Hash identifier:          iCdUzCOvZt8/4rbYaYYvTOT6KE9iyzRoQDqfvX7vHqA=
Subject key identifier:   04:34:EC:2F:76:63:98:0D:2C:73:DE:FF:F8:3F:94:3B:54:DB:A4:6A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E7A64CF494F7B860B412ABB40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa457798-3258-3e81-954e-dcd26b3ccf18.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     31898
IP address blocks:        163.192.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:cf:49:4f:7b:86:0b:41:2a:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=fd3f6858-52dd-4373-bdfc-c344d3e07fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:fc:d5:cc:fe:52:a3:31:ef:59:05:c9:3e:
                    b5:b8:fe:58:b1:d4:cc:27:0b:1d:10:1e:dd:84:b0:
                    47:a2:a5:11:1f:f3:25:35:9f:fa:11:39:20:17:68:
                    28:ab:bb:d3:37:9b:1d:e1:8d:25:b3:73:53:85:66:
                    22:16:61:ce:d1:42:cf:c1:6e:68:80:d4:14:d2:1c:
                    d9:0c:06:f9:6e:98:8c:34:c4:e3:75:e8:41:95:4f:
                    6c:3d:7f:78:31:8f:fe:05:6b:17:db:6d:b5:13:94:
                    7e:bf:24:46:df:98:fd:ba:8a:7a:5b:e6:98:bc:94:
                    e0:46:05:54:0a:52:74:ce:7b:8e:83:80:b6:08:c9:
                    ea:a8:69:e6:62:94:80:4f:60:c9:3a:3d:fd:fb:c8:
                    0d:bf:0c:18:5a:95:9f:3c:fb:6b:bd:61:cf:1e:a5:
                    a2:e3:fa:3f:83:1a:6b:f9:7d:25:a0:7a:a1:41:f8:
                    6d:38:a5:f6:85:ff:c1:39:56:56:5f:a8:81:cc:21:
                    0b:2e:3b:66:49:ed:e5:0f:65:f7:7c:de:82:aa:f0:
                    7d:7d:e0:01:bc:14:fd:68:f4:aa:56:d0:be:44:76:
                    c4:10:5c:89:bf:23:12:f0:34:5d:9c:db:45:0c:31:
                    54:3b:6f:d0:38:e1:c0:98:db:96:f6:03:a3:0f:51:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:34:EC:2F:76:63:98:0D:2C:73:DE:FF:F8:3F:94:3B:54:DB:A4:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa457798-3258-3e81-954e-dcd26b3ccf18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.192.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:8a:5a:3d:46:f7:4c:51:da:40:bd:be:d3:54:fc:c3:82:5b:
         0a:a2:6a:c2:f9:eb:6c:3c:c3:03:3e:e5:0d:75:60:47:6e:a9:
         95:16:ae:f0:b2:af:40:24:9a:5e:0c:76:71:8d:48:b4:39:ce:
         22:91:20:35:4a:7d:a6:07:af:53:9d:2b:74:99:83:e2:60:66:
         55:5e:0d:df:af:be:8d:e7:b4:e6:e7:ea:78:63:8e:cd:e0:bd:
         1d:26:e5:96:f3:95:72:3a:26:f9:14:a3:61:21:a0:ef:71:73:
         99:13:95:3e:12:e0:88:5d:48:cc:d8:50:ba:b3:8b:3f:e2:0f:
         0b:7e:62:d2:9f:e4:ea:c6:a0:05:84:41:79:4d:a4:de:c2:da:
         56:0b:96:2b:8a:10:55:a5:78:c7:53:4c:7e:b9:4e:21:3e:4d:
         36:7f:90:7b:86:de:89:07:54:cc:a4:62:fb:10:76:35:90:54:
         85:a1:3c:3c:03:07:ff:6f:6e:23:bc:0c:be:5a:a7:b4:7f:96:
         fd:93:a5:db:af:c8:0f:ad:7d:c8:87:9a:36:90:02:07:5e:15:
         12:a6:d5:7f:1f:2b:a1:6b:8a:ac:a7:a3:57:e7:bf:77:5a:83:
         d1:6c:fc:67:de:f4:85:ca:5b:c1:c7:80:6b:c6:77:37:83:c7:
         0e:0f:98:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:46:32 2026 by rpki-client