Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d70d48ec-6a4a-3a72-81ee-ee358b039af7.roa
File:                     d70d48ec-6a4a-3a72-81ee-ee358b039af7.roa (raw, json)
Hash identifier:          9G8Eed/FJmXsN2TG/sKGYmbbTtqQDLuBuRbSqIC8YaY=
Subject key identifier:   42:E2:11:97:67:E1:79:92:2C:3D:F2:39:26:C2:1E:9A:7D:09:F6:E7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8651429B34884555C696BEC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d70d48ec-6a4a-3a72-81ee-ee358b039af7.roa
Signing time:             Thu 16 Apr 2026 10:43:37 +0000
ROA not before:           Thu 16 Apr 2026 10:43:37 +0000
ROA not after:            Wed 15 Jul 2026 10:43:37 +0000
asID:                     2763
IP address blocks:        156.151.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:51:42:9b:34:88:45:55:c6:96:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 16 10:43:37 2026 GMT
            Not After : Jul 15 10:43:37 2026 GMT
        Subject: CN=a23b96da-9294-45fd-b10e-0a9db851e4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:cf:6c:06:f7:9f:a5:dd:2a:96:d2:22:86:
                    51:b2:66:14:d0:a1:b9:be:1a:b9:9e:cc:9d:a2:3f:
                    88:03:88:0d:45:be:73:14:53:38:10:af:9f:c6:d1:
                    87:f9:ce:cb:be:d0:ed:f3:cf:65:58:6f:ee:b4:2e:
                    e3:6d:8c:2f:01:a0:4c:53:d2:27:e9:33:3e:36:89:
                    ed:d7:b9:99:3e:d3:f7:45:c2:b2:e7:08:cd:22:f8:
                    7f:1a:b5:b6:fd:0d:f2:2f:59:94:c1:09:34:3f:0e:
                    fc:83:20:80:73:88:a3:83:60:05:70:79:31:de:67:
                    68:35:79:ee:e5:0c:67:34:61:d8:b7:e9:40:3e:7b:
                    35:aa:53:25:21:75:9a:60:3b:c7:20:b8:e2:fa:b4:
                    e5:ba:18:2e:f4:c5:6e:2b:f3:20:4c:eb:83:90:95:
                    fc:13:23:5d:75:16:ec:1e:70:1c:79:9e:b0:4a:21:
                    be:6b:67:37:4d:4a:88:95:f6:21:aa:b0:db:ae:73:
                    bc:52:fc:73:cf:bd:84:2e:22:9c:78:4d:48:76:db:
                    e2:b1:9f:52:87:79:b5:15:c2:96:bc:44:bc:28:ee:
                    77:50:c2:4d:45:34:1d:33:b7:6e:e1:08:1b:be:49:
                    d9:2d:0a:01:95:2f:7c:aa:66:2a:ba:9e:a2:73:39:
                    79:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E2:11:97:67:E1:79:92:2C:3D:F2:39:26:C2:1E:9A:7D:09:F6:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d70d48ec-6a4a-3a72-81ee-ee358b039af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.151.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:24:27:75:d1:a9:61:fd:6c:b5:7a:7a:d7:47:9c:21:ec:7d:
         cc:fc:89:f8:9f:f7:84:b7:49:9a:f5:a7:51:6f:ff:b2:22:65:
         d7:02:87:9b:3a:df:ac:99:79:bf:00:fe:26:cb:02:1a:2a:9f:
         b9:76:aa:39:c5:9e:9a:66:f0:f4:f2:c3:0c:c7:68:a3:79:0c:
         19:5d:0f:d5:fb:17:b2:15:09:46:37:80:f7:81:25:21:17:4c:
         65:e4:9e:1f:bd:1b:8e:cb:5b:a0:e8:02:b0:3f:84:71:2f:9a:
         1f:86:c4:e6:f5:15:4f:23:d5:88:8e:c0:a1:e2:c7:ac:de:b2:
         b3:58:3e:87:f5:a0:2b:ad:55:55:82:e1:b2:16:c9:30:d0:03:
         bd:34:fd:7d:9b:dc:d7:c6:b1:c7:32:7f:35:0d:a1:7f:87:c6:
         91:bc:df:b0:85:ef:17:c8:b9:f8:76:be:20:59:42:c8:c2:2c:
         04:da:6b:bb:f9:ee:1b:a7:02:9d:86:43:be:78:b2:4c:05:d4:
         72:b9:37:6d:b7:9a:6c:9a:d4:14:4f:13:8c:94:cc:f1:01:79:
         e0:98:eb:12:b7:31:37:ce:e0:49:08:b2:93:a9:be:98:5b:3e:
         bb:09:e6:21:47:64:46:3a:9e:06:41:16:1c:bf:97:ce:ab:9f:
         7f:7e:6d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:58 2026 by rpki-client