Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22dda3a3-27aa-31c6-a458-cd6aaeceaf87.roa
File:                     22dda3a3-27aa-31c6-a458-cd6aaeceaf87.roa (raw, json)
Hash identifier:          vBjU4HI7G8ZBaSki5RdYdGS/JwIondUjFSXNjM1rR98=
Subject key identifier:   C3:74:30:6E:12:D1:D9:E8:7A:D1:EA:B7:21:CA:47:E2:93:D3:F5:00
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F10379A1A6673134FEBA9C200
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22dda3a3-27aa-31c6-a458-cd6aaeceaf87.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        167.126.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:9a:1a:66:73:13:4f:eb:a9:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=e757e6df-e112-4ddf-8cc5-128a434dbb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:37:85:a4:dd:96:52:02:68:3e:73:9c:6a:4e:
                    c0:03:48:a4:24:a1:17:75:b6:d8:91:e3:db:0f:48:
                    d4:12:9e:b1:58:2b:48:40:e1:19:44:f9:c5:3d:8c:
                    c8:4a:de:93:d6:fb:8d:d0:9a:a7:ad:81:c4:cb:bf:
                    41:6a:1f:28:e5:a3:58:1a:a8:70:a5:93:06:2b:38:
                    bd:21:14:46:6b:38:e3:d5:43:1e:a1:55:c4:fb:f9:
                    fb:08:92:f1:94:7f:ea:99:de:36:9d:d8:b8:01:95:
                    5a:64:cd:e8:e4:aa:f9:66:80:d7:7d:26:31:30:fb:
                    6d:0a:4b:bf:2f:b9:4b:a7:30:fb:65:ae:6c:2b:44:
                    46:06:fb:a9:6e:18:41:ab:92:25:60:c9:4a:2c:8f:
                    89:44:2d:e1:b6:73:37:09:ae:78:08:cf:cc:ff:1f:
                    73:a2:aa:15:9a:82:9b:fb:75:d1:3e:4b:45:19:79:
                    2e:4c:9f:5a:8a:31:7a:02:e1:cd:68:47:59:5f:b2:
                    c8:ac:c4:35:cc:85:32:f7:a3:d6:e0:8f:a8:d9:92:
                    7d:ec:e7:9d:03:08:95:45:6e:ed:6e:74:7a:e2:92:
                    3a:c7:32:88:6d:71:16:cc:54:9a:3b:e4:02:82:6a:
                    ba:ae:09:25:84:67:4a:85:49:e4:d1:ee:13:a9:23:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:74:30:6E:12:D1:D9:E8:7A:D1:EA:B7:21:CA:47:E2:93:D3:F5:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22dda3a3-27aa-31c6-a458-cd6aaeceaf87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.126.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:2b:80:5c:4c:29:17:ce:da:ae:0d:48:33:37:4a:1f:57:41:
         86:ff:2a:a4:b4:cd:9b:51:d5:9a:e8:bc:82:41:f1:6e:31:a8:
         94:32:97:cf:c8:85:51:f3:ec:65:c2:ce:ad:37:a4:17:fb:6f:
         d0:15:77:33:32:96:32:28:ef:71:50:69:9f:48:e7:f0:7d:29:
         1d:07:28:34:b7:f8:7b:1a:04:41:f1:a4:44:2f:04:b5:4f:60:
         78:2b:7c:14:d8:21:2b:80:c1:53:75:60:fe:79:24:b5:56:2f:
         16:29:9b:be:4e:d7:ce:45:de:bd:53:a5:4d:51:7f:8e:1c:bb:
         79:49:63:60:83:32:6d:5b:56:54:c3:cb:15:82:b0:e9:11:e6:
         23:e3:c0:da:dc:5d:a5:18:43:03:e9:f3:7a:b9:bc:82:a3:a4:
         e3:19:b5:90:3f:cf:d6:eb:9e:69:4d:e7:e9:95:53:d6:19:03:
         15:57:61:d1:29:e6:40:5d:f7:e9:60:b2:31:bb:ec:a0:81:e5:
         a1:84:7a:41:46:25:d0:d6:02:2c:ae:d4:4c:65:b9:6e:7e:66:
         06:cf:f4:6f:da:ee:65:92:51:b5:2f:8d:8a:4a:8d:94:a4:86:
         33:31:7b:a2:90:10:6a:f5:4d:29:4e:d1:ea:eb:df:7c:3e:dd:
         1e:d3:7e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:39:15 2026 by rpki-client