Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/bd9e7ce5-e62e-3ef3-81a9-aad2be7b50ff.roa
File:                     bd9e7ce5-e62e-3ef3-81a9-aad2be7b50ff.roa (raw, json)
Hash identifier:          nSbDZWomPvoAJRUgirGMR0oqABQs0w3KirDqxDTbxO0=
Subject key identifier:   25:06:C9:AD:14:8A:D3:94:16:59:11:63:8B:9B:94:C4:F6:8D:E0:E9
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584DA8158401BF2BEBEBC7C16D00
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/bd9e7ce5-e62e-3ef3-81a9-aad2be7b50ff.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     3695
IP address blocks:        70.36.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:84:01:bf:2b:eb:eb:c7:c1:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=ec95ae88-d3f8-44d8-8ff1-c26166c41c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8f:e0:1a:8d:ee:b3:2c:f5:9d:62:62:c3:a4:
                    c0:04:e6:6f:41:99:1c:82:6c:30:42:01:39:ad:00:
                    10:aa:a3:82:d3:4b:26:1a:ab:2a:28:54:1c:71:36:
                    45:37:6e:18:ba:bc:14:23:45:53:3c:6d:ae:7e:9e:
                    ef:ae:a5:7b:7d:08:da:49:8a:51:5e:72:1c:30:37:
                    ec:58:e7:b1:42:d6:a4:0b:01:fe:78:dc:34:14:e0:
                    c7:c8:23:d9:57:5d:86:ee:cc:82:3f:3e:2d:d7:55:
                    c8:3c:48:b9:18:fe:b9:80:bc:ea:f4:da:36:11:d3:
                    b3:db:84:80:88:67:5a:52:fc:ed:82:ea:85:63:f2:
                    46:5d:bd:9c:db:3d:4a:b8:b7:37:ee:f8:a9:68:06:
                    f9:ac:9a:ec:58:02:0f:0b:2b:49:f1:4a:0a:bf:ff:
                    2d:17:33:03:de:eb:7f:3f:c0:f8:e6:f2:24:d9:06:
                    83:fc:2b:13:ed:b3:e8:20:09:2f:1d:b7:ba:21:c7:
                    ba:90:b9:09:fc:bb:bf:c4:58:cd:2e:29:1e:25:a3:
                    a0:5a:9f:7b:24:de:72:66:ae:75:48:e2:62:fb:0f:
                    dd:4a:5c:9d:af:cf:6b:d9:c6:96:e3:19:e5:32:f5:
                    be:ef:23:fe:d9:29:97:8e:ee:2e:22:bb:24:13:4f:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:06:C9:AD:14:8A:D3:94:16:59:11:63:8B:9B:94:C4:F6:8D:E0:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/bd9e7ce5-e62e-3ef3-81a9-aad2be7b50ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:66:a6:82:5d:0e:0b:10:33:71:82:4c:ca:11:24:33:b5:a7:
         96:bc:5d:76:e4:0b:9d:92:b7:90:ce:64:2d:75:1d:3b:6a:8b:
         1a:ce:8c:71:99:42:59:15:e8:e3:e4:38:d7:c4:e8:1c:55:f1:
         2f:23:67:92:6f:87:ad:a1:f0:de:64:d6:94:80:f6:c9:29:d9:
         e3:17:5a:8a:fc:a8:db:42:23:69:d3:aa:2f:b7:43:29:85:00:
         7f:e0:a9:04:ea:3c:02:40:49:9f:5a:68:db:b2:5d:ac:ca:dc:
         77:d7:68:96:88:39:28:68:e2:c2:df:a3:00:f5:a8:33:fb:60:
         6e:a1:f6:01:2e:7d:a1:b2:0a:4e:85:d7:e8:c5:b7:1a:35:02:
         62:a5:96:74:4a:39:9e:43:a5:d5:05:6d:33:1d:7d:a0:46:73:
         56:4e:b6:6b:94:64:8b:93:55:e2:5b:25:74:86:b3:bf:d2:60:
         13:b8:55:05:f1:13:c9:fc:b9:eb:c1:f6:f7:e9:79:97:9b:56:
         1c:34:f0:95:a6:eb:a5:ff:82:22:73:10:cc:b2:b4:3a:a3:5e:
         d9:ae:a5:bb:bf:99:70:12:17:e1:7c:77:d4:92:ee:5a:98:1e:
         d4:80:94:15:f3:fe:b2:00:75:e3:59:c7:05:29:ad:1b:0a:b3:
         e8:7e:09:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:44:46 2026 by rpki-client