Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/9b4cc6dd-c54d-3718-9282-ece89447c50b.roa
File:                     9b4cc6dd-c54d-3718-9282-ece89447c50b.roa (raw, json)
Hash identifier:          DCwQUPrQy6Ji+N+DAEwzmoNyeWAx7Sr8PrGWW/RHR9k=
Subject key identifier:   28:DB:67:07:E1:D7:96:C3:24:40:50:F5:C4:07:0C:48:04:FE:BD:E8
Certificate issuer:       /CN=e751f735-1712-4284-af50-5bd135a0234b
Certificate serial:       010D0C9F4328584E2AD468D622BFD94E65A97340
Authority key identifier: C6:5C:8A:D8:B8:B2:4E:4C:1C:C3:54:5C:2F:D1:63:CF:40:68:B9:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/9b4cc6dd-c54d-3718-9282-ece89447c50b.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     8075
IP address blocks:        70.35.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/e751f735-1712-4284-af50-5bd135a0234b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/e751f735-1712-4284-af50-5bd135a0234b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:68:d6:22:bf:d9:4e:65:a9:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e751f735-1712-4284-af50-5bd135a0234b
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=adbb871f-abe3-4ce7-8f46-4953d4c02e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:39:5d:e0:ce:8e:bf:3a:40:95:0f:d0:8c:1d:
                    d3:c2:98:65:e8:79:69:25:ff:3d:82:f7:0e:4e:90:
                    03:76:38:04:25:63:6f:76:86:ef:39:28:53:cc:5d:
                    6e:50:84:e3:78:19:c7:b3:72:b8:82:6d:67:ff:a1:
                    f5:72:f3:d6:54:dd:e6:36:7d:b3:de:e4:7b:53:56:
                    fa:36:2a:dc:b3:02:58:3d:02:ca:2f:88:7c:0b:1d:
                    cc:ef:4c:25:24:62:55:48:60:9b:a0:ae:8e:63:69:
                    6c:70:0c:38:b7:a7:05:7c:08:ff:16:a6:82:ea:0b:
                    57:2f:ba:37:a8:0a:89:4a:8f:47:74:65:0f:1a:87:
                    96:2c:da:80:69:15:d3:6f:fe:9f:1a:d0:c3:1c:38:
                    35:aa:24:95:31:d1:ee:05:ba:10:11:d9:7c:4f:d1:
                    ea:9a:e1:4e:44:de:56:fe:3f:39:96:b1:44:af:f8:
                    3d:ca:19:f9:fb:db:93:07:d6:1b:4e:6f:99:b6:96:
                    00:4a:68:94:02:2a:5e:93:b6:27:db:12:5b:84:c0:
                    31:5b:06:e1:49:a9:a3:f8:df:3d:6d:6b:c5:12:2f:
                    b2:cf:e9:fa:db:22:cb:3c:6f:0f:fb:0c:13:12:52:
                    19:9e:6b:77:0f:09:b7:ef:5b:21:66:ea:94:ab:3a:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DB:67:07:E1:D7:96:C3:24:40:50:F5:C4:07:0C:48:04:FE:BD:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/9b4cc6dd-c54d-3718-9282-ece89447c50b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/e751f735-1712-4284-af50-5bd135a0234b.crl

            X509v3 Authority Key Identifier:
                keyid:C6:5C:8A:D8:B8:B2:4E:4C:1C:C3:54:5C:2F:D1:63:CF:40:68:B9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:d1:fd:e2:84:71:e2:f6:84:b9:54:54:e9:b0:58:c2:2b:a2:
         01:ff:d0:2a:8b:a2:28:1f:07:9a:3d:33:f7:29:72:22:8e:3c:
         13:60:cb:26:5d:f4:c1:3d:7b:d8:f7:fa:f3:6e:d6:ae:cc:70:
         37:42:67:1b:27:5a:e3:a9:2d:82:db:de:8d:06:19:ab:ff:42:
         49:bc:eb:68:49:21:88:41:b0:fc:c4:bc:42:18:09:6a:09:8d:
         4d:b7:a1:c4:c8:14:a5:7a:0e:88:10:71:22:13:4e:a4:d9:c2:
         ba:58:a2:6d:60:4e:99:b1:64:9a:b8:e5:4f:4c:34:57:b4:26:
         45:f0:65:49:5a:86:a8:70:a3:01:27:0a:f3:d4:21:94:b8:c5:
         4a:74:2b:e8:37:f5:55:e6:49:25:25:76:f0:c7:ce:df:4c:fa:
         ec:b5:ad:c8:d6:f0:2b:2e:79:94:76:e3:b7:96:40:56:c0:f0:
         de:83:29:ee:c2:f4:e5:10:09:b3:3b:81:95:3e:33:ee:49:ae:
         36:a2:95:dd:2f:58:4c:66:f8:58:8b:f2:72:66:be:9d:dd:bc:
         43:f1:1e:a6:94:25:08:80:c5:34:75:26:5c:6d:44:55:f3:73:
         f3:15:aa:67:3f:ed:e5:9f:b4:3d:e1:06:c3:5c:6c:cf:17:80:
         1d:d6:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:30 2026 by rpki-client