Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa
File:                     ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa (raw, json)
Hash identifier:          kMsvQHyQ072NtnUv1MKJOEQvYa2GtiVxBXWSprx8U8c=
Subject key identifier:   26:3C:DD:4F:B0:4A:BF:80:BF:1C:0E:AF:E9:F4:06:53:1F:A8:16:8D
Certificate issuer:       /CN=e2135eb7-dbed-4351-942d-90483acb1b22
Certificate serial:       010D0C9F4328584F963868B7EB181DD29E664D20
Authority key identifier: 2F:4E:F1:A1:A1:22:CC:D4:F6:68:2F:88:E4:78:E3:AE:CF:1D:AB:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa
Signing time:             Thu 22 Oct 2026 13:00:13 +0000
ROA not before:           Thu 22 Oct 2026 13:00:13 +0000
ROA not after:            Wed 20 Jan 2027 14:00:13 +0000
asID:                     174
IP address blocks:        208.64.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:96:38:68:b7:eb:18:1d:d2:9e:66:4d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2135eb7-dbed-4351-942d-90483acb1b22
        Validity
            Not Before: Oct 22 13:00:13 2026 GMT
            Not After : Jan 20 14:00:13 2027 GMT
        Subject: CN=d7130578-94db-48f9-be6b-3518fe21a515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6d:a4:04:8c:93:87:49:43:80:d1:e0:ee:99:
                    20:71:3c:8f:78:ed:1e:a0:20:7e:d0:2d:c9:95:0f:
                    3b:05:36:68:74:54:37:8c:a7:fe:4f:cf:0d:d9:1c:
                    0b:88:28:9b:36:91:22:46:c2:dd:c7:32:1b:ec:c9:
                    0a:58:96:f6:2f:7b:11:9c:bd:4f:d7:1d:b0:59:cc:
                    0d:21:26:35:ae:a9:40:ce:8e:c1:7f:86:18:f6:25:
                    43:cc:24:0c:89:82:bc:54:7b:ce:e8:bf:c8:73:a9:
                    21:51:55:23:05:a6:7b:3b:17:84:fe:f7:78:a1:79:
                    58:d2:a9:a0:89:d9:b0:4e:8d:f4:a4:af:25:ea:77:
                    b1:57:9f:01:79:fe:cc:8d:5f:0b:71:55:9c:21:87:
                    8c:61:a7:50:19:05:19:a4:44:78:74:90:d9:37:6e:
                    51:67:4a:2c:ce:ce:73:27:33:29:93:ec:b5:21:ef:
                    87:4d:b6:93:7a:1c:07:49:9f:e3:5b:a1:d9:a1:6b:
                    c2:41:f5:b4:36:4c:52:58:74:94:5f:28:33:b5:7f:
                    d7:30:96:26:69:83:23:30:48:6a:c1:f5:39:5d:fb:
                    1c:19:ae:de:44:6e:e0:a6:f2:e1:de:af:a8:79:9b:
                    7b:14:a2:c3:f6:7e:a5:10:be:ca:8a:22:b4:a9:b4:
                    56:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3C:DD:4F:B0:4A:BF:80:BF:1C:0E:AF:E9:F4:06:53:1F:A8:16:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.crl

            X509v3 Authority Key Identifier:
                keyid:2F:4E:F1:A1:A1:22:CC:D4:F6:68:2F:88:E4:78:E3:AE:CF:1D:AB:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d3:6f:68:2d:3b:2a:37:23:1b:69:23:2e:1b:5b:eb:4d:ab:
         99:9a:ac:6d:81:9c:e2:84:f2:1d:e9:96:8e:ba:f7:d1:86:a7:
         0f:a5:9e:af:d6:78:2b:60:e4:64:94:f6:b3:86:d3:5a:25:be:
         42:2a:17:1b:2d:38:27:45:c0:76:68:1e:4b:0b:9c:e8:6b:9c:
         29:52:92:da:4a:5b:72:d2:80:c6:8b:1a:4c:ee:2e:0a:72:cc:
         b7:6f:44:c0:31:76:bb:fd:44:ae:34:dd:bf:20:6c:4b:91:5c:
         6d:2c:ed:46:6d:1c:91:49:b4:f3:9e:59:eb:4f:dc:4d:77:f3:
         ea:e1:e9:58:0c:f2:df:ed:d6:54:67:45:3a:7f:9f:77:ca:e3:
         c7:59:f2:c5:91:28:e7:86:e4:6e:3e:ba:17:35:59:34:17:58:
         ca:b9:99:47:b7:cd:68:0b:64:91:9e:b0:a1:71:88:d4:fa:3b:
         9c:84:0f:dc:bc:97:d5:ae:a9:10:cd:5f:14:26:26:ad:d1:9b:
         63:58:03:f7:78:6e:c1:1c:ab:d9:82:4b:c1:57:1d:59:c1:82:
         80:91:75:dc:16:60:94:66:1b:c4:d6:07:69:9e:f5:86:c9:17:
         97:44:25:93:91:6e:92:74:bd:f8:51:e0:b8:71:46:52:96:a0:
         36:44:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:42:28 2026 by rpki-client