Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdeec324-a7f1-3ba8-8f03-c9200d2e612e.roa
File:                     fdeec324-a7f1-3ba8-8f03-c9200d2e612e.roa (raw, json)
Hash identifier:          ql0Y+TSnpkHAsQsD2tT0uBc8bFzQ5XEOFpXJQJaXIjM=
Subject key identifier:   BF:6E:84:B5:FC:87:2C:9D:B3:C0:8B:28:4A:F7:4B:94:F4:86:64:1A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F1037A2F096B02D6FFCA14200
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdeec324-a7f1-3ba8-8f03-c9200d2e612e.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        157.151.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a2:f0:96:b0:2d:6f:fc:a1:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=175fe455-9f00-49bb-af8a-8e750f78c437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:34:c1:d9:17:38:3f:c9:77:8d:59:1a:9b:
                    2d:0e:c1:fe:96:f4:d8:1d:6e:26:e9:f5:14:e3:33:
                    79:af:c7:f5:d7:1d:6e:56:81:d6:8a:c6:35:de:10:
                    70:d5:06:f9:59:76:1f:d8:28:3b:1d:a4:2e:39:91:
                    b5:30:66:01:66:2c:6b:38:05:2e:f1:f1:41:1f:4a:
                    38:e4:93:c9:86:86:ad:93:04:8d:3e:8c:3d:15:d7:
                    ca:2c:a7:2b:57:6a:be:bb:56:09:d9:08:5b:4b:0f:
                    29:bf:1e:5b:e0:b9:98:c3:12:ea:d6:f4:d2:53:78:
                    7f:2e:41:c1:dd:dc:ab:1e:1f:b6:d9:97:36:20:a3:
                    e1:ab:b7:36:f8:c9:79:48:94:a3:78:e7:d9:be:5b:
                    58:69:49:6d:a4:7a:1c:81:44:ae:01:32:06:24:21:
                    06:71:6d:79:d7:ef:68:89:72:e3:4c:a5:10:e2:cd:
                    14:70:46:ad:4f:89:ca:b3:4d:af:78:1c:04:03:53:
                    83:af:c4:03:04:28:0a:f7:ed:10:dd:9e:65:d4:2a:
                    23:de:fc:8a:a5:28:1c:78:e9:e8:d0:2a:e8:db:b2:
                    9d:78:89:14:b5:08:b7:bd:ab:db:c4:f4:13:2e:90:
                    b5:43:c6:e6:14:48:57:33:e8:34:36:0a:0f:1b:56:
                    14:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6E:84:B5:FC:87:2C:9D:B3:C0:8B:28:4A:F7:4B:94:F4:86:64:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdeec324-a7f1-3ba8-8f03-c9200d2e612e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.151.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0e:35:dd:59:c7:58:e7:d7:99:16:e3:fa:94:b7:ae:56:04:
         99:fb:0f:ab:8e:11:55:07:fa:75:c7:6b:73:3e:94:9a:8b:47:
         fe:4c:e1:d4:91:87:89:41:74:dd:8d:6b:d1:45:eb:0f:40:99:
         6d:a5:83:ec:f5:c0:0b:87:cd:4f:38:49:c8:bd:c2:88:27:13:
         89:26:1e:e6:b3:91:1f:d3:37:2c:12:58:ff:64:85:76:81:0c:
         a2:8e:bb:bf:33:3b:08:77:6d:56:68:4a:e7:b3:a3:88:1c:79:
         ec:1b:0c:df:0d:86:4a:08:91:d7:f2:66:80:00:cf:03:bf:57:
         85:17:f9:eb:9a:11:18:8a:8c:92:96:f0:fc:4f:ed:70:ec:62:
         84:7a:30:17:5f:7c:4e:98:3a:f5:ce:d7:7a:8c:bc:8d:54:e3:
         8f:e0:84:66:03:6f:7c:a2:24:25:9a:98:aa:e3:8c:86:60:28:
         41:2e:38:2b:6f:44:cc:37:1f:d0:01:fb:5f:56:6b:76:29:a1:
         9c:ac:42:a9:90:6d:3a:5d:3e:08:25:bc:ca:36:5b:9c:35:02:
         4d:2c:c0:67:66:50:3a:6a:ee:b3:7b:16:cf:f7:bd:54:85:19:
         86:f2:47:aa:61:94:b3:2d:c9:1a:bd:83:68:55:6f:37:03:4f:
         89:cd:07:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:51:56 2026 by rpki-client