Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1a48fdd-42eb-37f6-a294-a01f7a609dbd.roa
File:                     b1a48fdd-42eb-37f6-a294-a01f7a609dbd.roa (raw, json)
Hash identifier:          jtV4mNncka4mTkq2Ow4jTCgriH29bsr/5OHeq/GLFQY=
Subject key identifier:   D5:AD:43:E7:F3:4F:97:75:1D:3A:7A:DD:A4:FA:64:C3:17:6C:EA:0E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F11A155BAA2CD2CBD60C5A340
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1a48fdd-42eb-37f6-a294-a01f7a609dbd.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        140.91.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:55:ba:a2:cd:2c:bd:60:c5:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=38f26201-8a48-4d79-ba56-d7313efa989a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:65:8a:fd:ed:71:cc:5d:69:d6:98:74:1b:a8:
                    b2:dd:56:b6:0d:70:70:35:9c:95:a2:e4:54:da:db:
                    f8:3b:d6:16:87:f0:36:7d:39:fd:00:35:10:a4:2c:
                    b2:f0:18:7e:b0:04:34:01:ce:c7:3b:d5:58:8e:80:
                    a1:b5:f4:26:55:39:38:c9:67:c9:5e:6e:05:a1:e6:
                    62:d9:f2:f9:0e:d4:dc:d5:ce:ce:4a:27:76:0d:57:
                    24:0c:00:09:73:80:d4:f6:33:3c:17:6c:cb:18:42:
                    27:0b:48:c4:67:02:1a:e8:79:34:e2:a6:8f:50:e0:
                    61:48:e5:04:79:ba:87:16:34:f8:ca:35:4c:a7:76:
                    43:64:b4:87:f9:69:d9:bd:46:ee:70:2c:60:99:39:
                    35:2f:c2:74:3e:49:f7:a6:bb:f7:d1:58:00:e7:d7:
                    2e:e7:0b:4e:81:9e:ed:cf:b0:a5:18:6c:f1:53:0b:
                    fe:9a:54:a1:5b:1d:a5:a6:59:9c:8a:d8:50:28:2a:
                    76:e6:b0:61:6f:43:3c:63:8a:5a:83:36:d9:6e:41:
                    db:4a:fb:b6:4c:50:4d:07:6f:63:31:0c:a4:8f:a2:
                    12:17:6b:99:17:22:cf:c5:04:62:61:2b:53:79:cd:
                    e0:8b:1d:37:1f:6f:36:d6:c8:90:8b:6c:1c:71:81:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AD:43:E7:F3:4F:97:75:1D:3A:7A:DD:A4:FA:64:C3:17:6C:EA:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1a48fdd-42eb-37f6-a294-a01f7a609dbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:69:fb:8c:bc:db:da:42:e4:b4:1d:3d:a3:c1:3a:55:c9:23:
         be:18:78:b8:bb:1f:dd:cd:73:5a:1f:24:60:37:7b:42:d2:05:
         d3:bc:8d:c0:e6:e5:80:0f:6a:d9:4a:5a:e7:ba:4e:c6:57:5e:
         53:71:04:ba:a7:b1:a4:5d:6c:1a:66:0f:21:0e:11:22:79:90:
         79:ca:ac:6e:3d:ba:7a:32:f6:d7:bf:70:d8:40:e7:dd:3e:4d:
         84:b9:53:29:f1:98:05:57:f7:f7:09:45:ec:52:2f:16:5d:88:
         52:21:52:a1:33:50:91:b8:3f:62:00:ab:63:61:52:62:53:35:
         dd:09:bb:fc:b6:51:61:b5:17:71:95:85:a5:35:de:64:d3:27:
         0e:8c:fc:99:0e:84:64:d8:1e:33:2e:4a:44:cd:28:be:ee:5b:
         d0:75:55:86:99:2e:38:76:86:11:24:ad:d1:9f:7f:8c:2c:c1:
         8d:55:59:c6:4f:36:66:ad:46:50:09:a6:77:f0:ec:74:f3:14:
         05:c0:a7:d8:1f:35:eb:50:40:d7:9e:9e:f3:d5:7c:0d:ad:dd:
         11:8d:8d:71:0d:19:60:de:99:34:7b:d3:be:52:86:42:98:07:
         34:07:b2:ff:15:83:90:cd:c5:3d:8f:7b:b4:b8:0d:70:6d:09:
         b7:d6:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:02:49 2026 by rpki-client