Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fefa3b84-b268-3640-ba36-19a910258277.roa
File:                     fefa3b84-b268-3640-ba36-19a910258277.roa (raw, json)
Hash identifier:          0JD9j0ENCzgnwOmpyO8PEsKlx1rtuEw1NIQDSk6h9sE=
Subject key identifier:   76:E6:A3:82:A4:76:A5:35:D4:4F:5E:6E:76:38:FC:B1:F9:F6:D8:CE
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584DA81583729C576655789D1DE0
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fefa3b84-b268-3640-ba36-19a910258277.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     3695
IP address blocks:        70.36.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:83:72:9c:57:66:55:78:9d:1d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=a199f2c3-807f-4ac2-9ff8-ba49206ff102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e3:42:c7:f8:f8:18:80:7a:a4:f1:9c:28:f3:
                    fa:94:5a:fa:b4:62:70:47:e7:d1:9b:4f:7a:f9:91:
                    0c:fc:18:eb:1f:ed:1f:91:cb:55:9e:26:ca:f7:93:
                    85:10:10:9e:bc:5a:41:3e:40:bb:c3:43:9d:ba:c5:
                    0a:7e:0d:13:1d:12:86:1e:8f:fd:f4:c8:e5:e9:2e:
                    cf:94:53:cc:c5:54:9a:d7:d4:5d:53:d4:70:ff:bd:
                    28:ab:36:58:0c:0e:0f:81:d3:7c:e2:02:55:a2:59:
                    09:73:2b:41:ae:5d:3e:6b:8a:83:8e:25:31:1d:b0:
                    05:bd:c8:d6:f7:61:59:20:cf:dc:60:79:66:4f:e9:
                    ab:d3:2b:32:80:7b:f4:a9:94:0c:4f:33:91:24:97:
                    11:f4:2d:30:c7:84:81:51:aa:11:aa:1d:99:59:b4:
                    b8:4a:10:3b:67:17:d8:09:4f:89:74:0c:93:d1:40:
                    aa:ba:92:1e:72:31:6c:af:6c:a1:a3:96:76:e7:bb:
                    76:22:9c:28:fe:18:7e:2c:14:8a:99:62:48:da:70:
                    6d:d3:fe:9a:0a:c1:48:72:6a:b2:fb:fb:54:ae:86:
                    fb:50:21:4a:7c:77:64:2d:06:85:8c:b3:dd:04:18:
                    1f:3a:c2:0e:a1:14:30:a4:cb:e4:bc:1f:97:e9:1e:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E6:A3:82:A4:76:A5:35:D4:4F:5E:6E:76:38:FC:B1:F9:F6:D8:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fefa3b84-b268-3640-ba36-19a910258277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:9a:ac:c0:85:4a:89:f1:db:b1:f0:fc:b2:e4:e6:3f:26:6e:
         db:2b:c3:a0:f9:07:28:2c:05:5d:14:16:ce:04:43:1b:b7:e4:
         e8:1b:71:46:5e:d9:86:c2:13:de:5c:b5:cd:de:75:79:df:19:
         c7:58:7b:32:fa:dd:c5:a8:a5:c3:52:0c:ef:38:3f:de:44:22:
         1a:ce:7f:13:19:2f:b4:31:33:b7:da:82:f6:da:f7:3f:3a:a2:
         5f:c7:95:64:e8:39:08:d9:28:c3:3c:98:2e:46:df:32:f6:c7:
         b4:1c:2f:cb:2e:a4:76:17:6b:f7:2f:ac:1d:af:cc:83:d0:82:
         94:ed:cc:7f:57:a1:d6:56:8e:47:ad:96:70:2e:4e:91:db:d0:
         40:2a:39:28:76:17:b0:73:9c:08:49:26:99:db:58:4f:f2:e1:
         2b:4f:49:1b:5e:85:e7:70:99:6a:89:85:94:09:20:38:bf:60:
         ac:98:dc:e5:78:29:ae:75:85:c6:43:9e:e4:3c:07:de:02:97:
         cf:f8:00:62:97:3a:82:0f:98:32:01:37:e6:a4:cd:b8:01:99:
         5c:bf:c6:78:ce:2e:e8:fd:8e:e0:1a:ce:b4:db:6a:c6:c8:54:
         81:d4:df:f3:aa:c6:83:5e:dc:71:a0:8f:98:9f:72:39:ae:48:
         b6:59:e6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:47:52 2026 by rpki-client