Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/191f70a9-426f-3c7a-800e-db0b3c8e7a41.roa
File:                     191f70a9-426f-3c7a-800e-db0b3c8e7a41.roa (raw, json)
Hash identifier:          TcxUwM5wu0V/lWtrxiE148m+9kp1GUfY/X5RsY7nLE4=
Subject key identifier:   D5:63:BF:ED:6A:CC:56:53:03:85:8B:E7:11:73:4D:E9:6A:7E:BA:7D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D86957A1F2C997964C487BA00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/191f70a9-426f-3c7a-800e-db0b3c8e7a41.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        132.145.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:7a:1f:2c:99:79:64:c4:87:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=be730a2c-5c80-4a50-ac61-93d89d71efad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:86:42:30:f9:4f:c3:f7:ed:26:2c:20:5e:46:
                    76:63:95:5f:c3:ce:45:d6:3a:5e:c6:cf:cf:b6:be:
                    ea:1a:c8:b1:0e:14:ab:ed:6e:ce:65:f9:fd:6b:3c:
                    53:fc:52:e8:5b:b0:6f:e9:a1:5b:7d:03:df:7b:fd:
                    3c:91:18:8d:f4:cf:41:32:f7:c4:1b:86:4c:f9:7d:
                    c3:f0:47:29:63:20:4c:6d:0d:96:ec:1a:a4:2c:c7:
                    f0:f9:69:8f:b4:62:c5:ae:f3:a4:ff:5b:46:2d:df:
                    c0:0f:e3:db:78:87:21:42:88:89:e9:2a:3e:a9:d7:
                    6f:f8:4e:65:45:71:f6:12:08:5c:5c:38:a0:5f:4e:
                    ed:b7:a9:2c:04:4e:13:a8:0c:b3:79:09:99:9f:7a:
                    31:7c:23:4d:d8:b0:45:09:34:2c:2e:5a:f0:15:7e:
                    26:90:08:4c:f0:9d:b2:dd:d8:b6:89:46:36:11:8e:
                    20:3d:4a:46:70:c9:05:f0:61:0b:9d:ba:9f:9e:63:
                    c3:c3:7f:35:8f:6e:5a:83:08:5a:15:cb:a7:f8:c4:
                    41:91:b5:a8:19:e8:90:55:a9:b2:cc:f2:32:49:43:
                    c0:a3:64:3d:ae:b4:f6:55:5a:4f:c2:8d:86:1b:1c:
                    4e:0e:26:b1:1b:9f:a0:20:22:ad:ea:4e:3f:a6:14:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:63:BF:ED:6A:CC:56:53:03:85:8B:E7:11:73:4D:E9:6A:7E:BA:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/191f70a9-426f-3c7a-800e-db0b3c8e7a41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.145.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:1c:7d:62:55:ed:36:12:e2:ad:97:db:ff:95:8f:a0:2c:24:
         8f:49:f2:f8:f8:94:d0:2a:43:28:74:a5:6f:e7:94:d3:93:57:
         8e:be:9d:2b:68:3a:67:ee:7e:be:a4:40:38:ba:bf:db:9c:be:
         90:23:d2:af:1d:b7:7c:83:3f:e9:7a:72:58:bf:7a:8d:af:14:
         dc:7b:42:0a:18:78:fb:85:be:55:9d:3b:f6:9c:3f:9d:27:c3:
         35:d7:94:c5:74:08:12:bd:9f:a8:26:ee:30:73:f8:99:a8:d3:
         6f:b6:23:b3:73:a9:a0:25:5c:2e:4d:3a:73:59:b3:e5:5e:48:
         16:21:41:21:8d:cb:e6:7a:99:87:7a:61:f9:d2:ea:31:22:82:
         47:5f:e8:5c:62:a4:7b:9c:79:74:d0:25:d3:3b:b2:a7:78:fa:
         e0:59:bb:8c:91:cc:3c:14:80:67:72:d6:1c:4b:29:4d:1d:d9:
         c0:c4:c3:cf:e8:33:1c:d8:0f:19:2c:ec:46:b6:3a:85:b7:b7:
         91:11:a6:d0:37:7a:44:95:e5:82:06:40:92:07:b5:c3:ae:b6:
         1b:30:51:8d:f1:59:b6:86:4f:67:cb:c5:5b:fa:37:9c:c7:2b:
         33:62:fe:3a:66:39:fa:f9:5d:fd:c0:0f:79:2c:04:03:bb:64:
         45:21:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:48 2026 by rpki-client