Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dee2789e-147b-3eea-a473-3daf900e1bba.roa
File:                     dee2789e-147b-3eea-a473-3daf900e1bba.roa (raw, json)
Hash identifier:          dQjKkJKS5+b+4x07eKdP8q5K1dy9BXkqZytpU5GpP9A=
Subject key identifier:   0D:B8:94:E8:07:DD:98:11:2F:8D:E7:6D:47:0A:8C:CA:B3:3C:C0:9F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F4972F856C845262BA0569B00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dee2789e-147b-3eea-a473-3daf900e1bba.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        131.186.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:f8:56:c8:45:26:2b:a0:56:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=953b5010-94b2-477d-a1f6-5500a0b6005e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4b:16:2b:6e:ba:3e:57:bb:3a:39:3e:a5:52:
                    b8:01:2e:16:1b:24:90:82:f9:a7:be:a3:fa:55:f5:
                    c1:77:e6:11:3d:4b:74:61:55:d8:57:0b:fa:55:45:
                    9a:c3:35:e4:5f:5b:a8:f5:e6:fd:5b:3d:e8:3a:0e:
                    04:5f:bd:7b:0e:58:9c:cb:ad:e8:c0:19:42:b9:bc:
                    d7:4c:96:3b:53:00:a7:54:51:24:7e:c4:8a:0c:18:
                    27:9f:3b:4f:e0:1f:3a:c6:92:28:ad:df:39:e6:ec:
                    26:4d:44:4f:f7:60:10:df:44:c0:d2:a2:ba:56:94:
                    46:54:1f:14:6b:f2:33:f0:2e:1b:be:4f:59:85:c3:
                    69:14:0e:31:8b:96:f1:fc:3f:dd:47:ee:4d:0a:be:
                    1e:70:b1:f1:f9:99:9f:b8:ca:c5:a7:e7:44:df:85:
                    b4:65:00:8c:d7:ed:7d:18:35:2c:96:bf:d2:7c:ee:
                    04:b3:a7:fb:08:0e:bb:59:f5:35:59:bd:28:06:39:
                    99:36:55:f4:82:89:3e:86:89:91:c4:61:5d:81:09:
                    89:fb:b5:bc:87:0d:e4:b2:78:0a:c7:d1:92:52:6e:
                    84:c2:92:fd:e4:7c:be:02:bb:9d:16:8b:06:ce:d4:
                    53:41:af:d4:10:88:3f:9a:23:d2:fa:03:26:a3:85:
                    7b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B8:94:E8:07:DD:98:11:2F:8D:E7:6D:47:0A:8C:CA:B3:3C:C0:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dee2789e-147b-3eea-a473-3daf900e1bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.186.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:dd:fe:48:ba:47:f7:5e:6f:77:93:eb:60:f8:d5:db:d0:e8:
         53:91:ee:b9:8f:b1:f6:a2:c7:59:a6:a5:5e:09:a0:23:e8:38:
         73:76:14:86:e2:d1:12:c7:ab:fb:9c:15:84:ec:47:e2:03:99:
         ad:05:34:3d:c8:9e:70:8c:29:9e:10:ff:27:77:ba:96:21:31:
         53:70:ec:1a:ba:6f:a8:15:a9:2d:62:1f:db:36:28:19:e7:5b:
         e1:8c:d6:c2:e8:d6:21:0d:08:d1:64:52:62:c8:36:7f:9e:45:
         94:b6:59:eb:40:8f:35:f5:82:0c:8f:81:5a:f7:2b:1d:2e:83:
         de:ef:73:af:dc:ac:42:f2:09:8c:ff:9f:b7:be:e6:de:37:36:
         75:e5:66:54:c7:e6:55:80:bf:08:4c:e1:4e:95:7f:20:d7:04:
         4f:c2:8a:85:25:72:2d:c9:70:99:37:2c:77:cf:26:6a:a7:0e:
         a3:c1:fb:a2:52:d1:6a:ca:e4:ff:94:05:cb:0c:9e:77:94:30:
         95:64:2f:1c:0b:0a:b7:f2:72:00:32:63:74:cf:6c:c1:13:71:
         a4:ea:ea:92:57:a7:32:de:6c:5d:5a:6c:bc:3b:65:da:29:80:
         28:b3:47:c4:b1:1d:4f:b7:e3:37:0a:92:57:09:c0:e9:71:00:
         4e:b5:76:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:31:21 2026 by rpki-client