Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/57c50656-aaf3-3ed9-adc9-8ad6a4bf34e4.roa
File:                     57c50656-aaf3-3ed9-adc9-8ad6a4bf34e4.roa (raw, json)
Hash identifier:          3IOOtovu7QZu3tpJpiy+igsLvq5+Z9uZTC91e56IMSU=
Subject key identifier:   69:BD:E9:8B:8A:05:75:B5:B4:54:38:7D:5A:17:00:B4:19:55:C6:A3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D02178A9A53DB3E2099297900
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/57c50656-aaf3-3ed9-adc9-8ad6a4bf34e4.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        168.110.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:8a:9a:53:db:3e:20:99:29:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=450519a5-b1b6-4ac4-a45c-b2ee37308c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7d:f0:5a:f4:33:7f:dc:c0:e5:77:96:45:e3:
                    5c:65:a2:30:6b:2e:83:77:f1:43:d0:7d:a7:6f:c8:
                    ac:3b:ca:72:ac:62:77:19:05:75:88:fa:5f:58:9f:
                    3a:3b:60:16:2b:ec:7a:d4:de:bf:53:3c:2d:25:d1:
                    78:53:dc:2a:dc:e9:b4:a2:30:42:46:7e:6f:45:f6:
                    40:9f:1c:07:33:d3:ef:92:30:37:c3:9f:00:f3:48:
                    18:82:37:ff:a9:aa:d3:02:84:9b:59:97:96:61:94:
                    27:83:0d:ef:3a:06:07:8b:8f:e6:86:18:33:ce:4d:
                    0e:15:c3:1f:02:8a:d5:49:d7:c1:6e:b6:31:b6:8b:
                    81:87:f9:5b:e4:9d:ca:65:3c:04:c5:12:a4:5e:fc:
                    39:87:2e:e8:3a:4e:b4:94:33:57:53:35:86:18:27:
                    a1:56:22:df:e0:6c:37:ec:83:f3:c3:4f:ae:23:75:
                    1c:a3:c7:d7:b9:b1:24:58:a6:cf:ce:6a:fd:59:98:
                    8c:0a:ff:32:27:25:64:88:74:5f:63:48:0f:28:55:
                    e9:cd:db:87:40:0a:d2:78:b8:52:3c:c3:e4:cf:a7:
                    5e:2b:68:4f:19:93:85:65:92:88:3c:78:4f:9b:04:
                    bf:89:d2:01:a4:28:78:d2:86:16:cb:0b:f2:5f:29:
                    86:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BD:E9:8B:8A:05:75:B5:B4:54:38:7D:5A:17:00:B4:19:55:C6:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/57c50656-aaf3-3ed9-adc9-8ad6a4bf34e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.110.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:96:7b:bb:85:06:8b:4a:ad:6b:99:ad:ab:5d:80:2a:c5:e8:
         50:a2:3a:71:c6:f2:bb:a7:69:d7:3f:ae:d1:9a:c8:90:4e:23:
         1b:90:72:df:06:16:68:17:24:f9:1e:af:10:c9:a0:07:99:18:
         70:16:7c:3f:ae:e4:da:14:fe:20:03:70:0e:c4:54:5e:d3:94:
         6a:e1:06:98:58:0f:01:72:7b:13:96:9e:b5:a4:b6:56:e6:67:
         e7:78:e5:d9:4c:86:0e:e7:ef:bd:14:ee:b4:cf:cd:50:26:9f:
         83:c7:cc:a8:d2:ab:be:1e:92:88:34:e4:c0:44:57:3e:c6:d4:
         aa:b5:07:26:e1:e6:c9:c8:6b:0e:d7:46:77:1e:23:39:67:53:
         09:9d:91:cc:73:91:18:c2:22:fc:45:e6:12:31:fd:d7:71:3d:
         6c:21:62:1c:84:2c:83:a0:70:95:b6:41:8c:65:5f:6d:79:ce:
         40:ba:a4:33:fb:88:5f:fb:d0:e7:0f:92:05:ad:30:ee:38:bb:
         9d:a9:65:7e:9b:99:1c:da:db:1d:fd:e0:a9:5f:b5:53:64:f2:
         de:b9:0b:1d:de:9a:61:21:a2:ed:bd:e3:9a:ba:a6:48:90:69:
         a3:71:e8:33:df:f6:83:75:b8:d8:85:13:9a:64:e8:84:e4:72:
         2a:3e:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:30 2026 by rpki-client