Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa
File:                     2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa (raw, json)
Hash identifier:          wFiTt74ztx+HVXLymL25UpuxBqoSNccnvpRQnZkaFSg=
Subject key identifier:   A6:30:B8:E0:04:29:5F:F1:F9:BB:78:1E:B1:8D:07:42:E3:CE:DC:AC
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584DA8158399234E06CACFE44880
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     3695
IP address blocks:        70.36.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:83:99:23:4e:06:ca:cf:e4:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=22122e5e-caf6-4255-815b-2bfbe70127b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d7:4e:1c:aa:33:67:e1:19:21:35:75:4d:aa:
                    3d:5f:55:9d:35:a4:93:a7:9a:09:a8:15:8d:3a:61:
                    45:42:e7:20:44:13:bf:0c:22:f6:5c:42:fe:bb:9b:
                    b1:5c:c1:27:d9:a1:67:d9:45:96:6f:38:25:64:6a:
                    54:89:9f:58:ff:7b:d9:32:af:55:24:0b:cf:62:f5:
                    b7:9a:04:73:ff:11:f4:82:50:26:fd:c1:cd:96:6e:
                    4a:03:ae:53:e2:f5:a3:ee:fd:e5:45:69:07:d0:b3:
                    ff:49:4b:85:da:53:5c:19:2c:9c:0e:ea:74:aa:16:
                    8a:41:a5:1d:0b:83:88:89:2e:e9:8a:b5:50:9a:03:
                    56:b3:2a:0a:24:78:ae:7a:cb:e1:b8:df:13:90:45:
                    78:e0:89:f8:b8:9e:eb:cf:75:8b:97:99:6a:39:29:
                    c8:c2:3e:c8:ce:3a:ac:93:1e:4c:7f:f9:4e:42:08:
                    57:1b:11:5c:b8:6e:fd:20:c2:9f:0e:d7:ec:fa:9a:
                    d4:a3:83:b0:56:02:04:13:69:c1:f1:82:59:7b:15:
                    da:79:41:2f:db:54:03:cc:bf:c0:85:d5:8c:fd:61:
                    c2:5e:4b:db:72:91:54:a6:50:6a:73:90:3f:00:64:
                    b2:51:67:96:24:be:a4:4a:2b:e6:42:fb:e7:80:e2:
                    17:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:30:B8:E0:04:29:5F:F1:F9:BB:78:1E:B1:8D:07:42:E3:CE:DC:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:cd:fe:33:c0:37:cf:1b:bb:91:1e:06:60:86:a5:38:d1:ab:
         2f:52:9b:16:4c:a4:b8:b9:2c:aa:1d:d8:14:d7:79:89:f5:77:
         9a:0b:3d:d0:61:cf:6f:2b:71:96:09:aa:35:5e:d1:7d:86:80:
         49:a3:a9:44:4f:c0:a6:f1:ea:22:b8:b9:c0:9f:a7:04:2c:de:
         9c:49:cd:87:1f:ab:3c:19:62:e4:99:18:28:37:14:1f:35:b7:
         8c:80:b4:33:ea:57:d8:5e:7a:8d:e2:fc:7a:32:73:5a:e9:b1:
         c8:46:7a:08:4a:99:24:e3:2a:15:e2:fd:d1:ff:c6:28:bc:63:
         ff:80:d7:5a:d9:5b:ac:43:67:25:9d:8c:9c:59:b3:e6:6a:9a:
         cf:47:f0:8d:26:5c:28:aa:ff:8e:54:b5:15:26:5b:3c:81:71:
         9f:da:46:29:c3:1f:52:13:99:2a:6d:d0:83:36:bc:be:98:72:
         e0:74:16:fd:c2:f4:61:a2:51:e6:a1:7c:44:7f:17:03:70:d8:
         15:db:2b:2e:c0:dd:dc:b5:89:0a:9c:2f:58:36:a7:94:a3:ef:
         0c:64:c1:31:fc:eb:eb:c8:6d:17:35:0f:aa:72:7f:e2:14:2d:
         44:4d:f5:32:41:15:02:74:ad:aa:2f:7f:d2:1a:93:e2:01:05:
         a8:53:1b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 08:12:04 2026 by rpki-client