Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa
File:                     0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa (raw, json)
Hash identifier:          2OjZXKaU2tyUX0TR1/zfAAFIoiYs3zwyf2T4tQgc3UE=
Subject key identifier:   74:E0:61:C1:47:E4:8B:40:8D:39:F3:AE:E3:E7:11:62:19:FF:FB:01
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F093D0EFF71A79045453D4C00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        192.29.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:0e:ff:71:a7:90:45:45:3d:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=cca47410-a3d0-4d1f-8565-a5dd29f8a60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:91:f4:49:15:4e:e8:a6:95:c4:11:17:00:fd:
                    7e:38:4a:70:9e:88:32:13:9b:12:41:c8:3f:b7:3f:
                    33:02:0e:fa:2f:c3:eb:a1:87:49:06:dc:68:d5:ea:
                    8b:56:54:b3:ff:10:87:3b:f2:80:aa:fd:37:ea:22:
                    61:39:1f:e4:f0:fa:fc:2d:17:8b:ec:38:4b:b1:46:
                    de:a2:42:ef:93:aa:c5:83:53:e0:eb:33:d9:0b:f0:
                    0a:51:b0:56:65:2f:27:3e:9c:c7:5c:dd:da:38:a1:
                    42:ab:9f:3b:92:2a:72:6a:36:be:66:a7:10:e8:d2:
                    57:da:35:5b:10:03:82:3a:d3:b8:43:c9:dc:4e:46:
                    ce:4b:6f:89:77:5c:f6:ce:53:ee:48:80:f7:eb:8a:
                    67:fd:47:03:02:0e:42:a1:6e:ed:9e:3b:25:5d:14:
                    b6:e8:41:5a:3d:31:02:d6:ec:1c:b7:7c:ca:03:60:
                    ea:e6:a7:60:2b:7b:76:ce:69:5d:59:06:6e:93:58:
                    47:a7:57:41:1e:e5:98:c1:e5:fa:24:e2:e0:c5:92:
                    c6:e2:19:ad:c3:75:f9:6b:43:f3:b6:a2:b6:d8:21:
                    8b:54:fc:14:05:0c:ba:b4:9b:ee:c3:74:3d:ab:09:
                    1b:38:3c:d0:88:2f:0c:2b:ab:08:27:87:6a:0c:21:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E0:61:C1:47:E4:8B:40:8D:39:F3:AE:E3:E7:11:62:19:FF:FB:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.29.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:90:01:7b:1d:dc:60:23:df:bb:ed:dc:46:33:16:7b:e2:c5:
         5e:6b:90:80:14:06:82:f4:83:83:7c:b2:50:48:e5:da:ad:44:
         64:45:5a:16:ab:9b:cf:31:66:e0:6c:76:a8:a9:87:c0:e3:c3:
         72:52:95:9c:55:01:51:17:71:d8:43:ab:1d:b6:ce:23:11:0f:
         c5:2a:ae:91:3b:59:91:0b:bf:e9:0f:96:85:f2:33:ae:3b:61:
         3a:70:ff:7e:65:71:e7:a4:e0:1f:23:ce:f6:f8:93:ec:0e:85:
         6c:71:ff:e7:6b:52:36:76:c5:60:c9:c9:0c:ec:3a:dc:eb:6c:
         a3:a2:78:65:02:31:a3:e0:8e:b3:37:6d:a9:3a:86:29:c6:75:
         cc:33:4f:71:b4:2b:e4:74:60:84:9a:09:ff:48:ab:e5:03:12:
         23:e1:24:f3:e4:b6:98:d2:9f:25:a1:5b:ba:be:19:de:7c:08:
         c6:46:5a:8e:66:e3:92:cd:71:cb:7e:ff:f3:3f:7b:77:f7:55:
         93:c0:02:db:9b:10:3a:30:ce:f2:2d:1f:82:5f:06:48:2d:99:
         c8:d4:9d:5d:e6:8f:ec:54:5c:d1:75:9d:7b:eb:88:4a:cd:4a:
         b2:94:c2:c0:8b:9f:dc:7a:08:a3:37:83:5e:11:af:63:17:48:
         db:aa:58:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:38:17 2026 by rpki-client