Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/dffe03ae-d1a0-30d8-b959-4a08e6f46f04.roa
File:                     dffe03ae-d1a0-30d8-b959-4a08e6f46f04.roa (raw, json)
Hash identifier:          fHzHHNZJDl7TIj1/6V5EUDB2ZyV61WSyqz9oQSXR6iQ=
Subject key identifier:   07:AB:CF:97:9D:84:9C:87:29:D3:B1:FA:2F:9A:2E:61:FE:0F:94:FD
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584F15CD08CFA493484F51AFE400
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/dffe03ae-d1a0-30d8-b959-4a08e6f46f04.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     393559
IP address blocks:        156.70.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:08:cf:a4:93:48:4f:51:af:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=5e503183-3ae3-46c7-8a4a-41bb1b59eeea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a4:28:c1:72:83:43:1b:13:f6:55:99:3c:e0:
                    27:f5:07:34:ed:7f:54:6f:3d:47:f1:b4:4b:24:e6:
                    0e:ce:ea:89:a7:85:c8:ea:d3:99:ec:0f:85:c8:3b:
                    ee:75:7b:e5:e8:61:aa:f8:b7:a9:e4:f9:8a:9c:e5:
                    13:f2:5c:8c:b5:1a:92:58:18:91:81:7a:3b:3c:a9:
                    c3:5f:0d:29:a9:81:dd:62:4d:5d:24:d4:1c:0c:7e:
                    36:1d:dc:1d:5b:e4:51:45:fa:68:f2:db:b1:0a:28:
                    90:c4:26:89:4a:d0:04:9f:e8:d3:9b:4c:64:2b:65:
                    72:3b:53:10:b3:45:4a:46:d6:19:12:4d:35:3b:b1:
                    b5:17:66:4a:c8:28:4d:e8:85:7d:06:01:f9:40:d7:
                    cf:59:6e:5f:38:79:ca:3c:10:e7:15:ab:90:67:68:
                    4e:d9:47:6b:c1:bb:80:5c:1e:bb:61:01:3e:ce:55:
                    03:2e:f1:b1:04:94:cc:99:54:a4:47:3f:76:22:2c:
                    74:07:a8:9f:ad:3a:c1:44:00:2b:d5:d5:5b:0e:11:
                    52:dc:5a:6b:15:a9:56:47:f0:3a:3b:58:e9:21:39:
                    53:9f:b1:f0:41:6d:0b:aa:99:7b:ed:32:be:3c:03:
                    76:68:e4:c9:35:58:4f:90:7d:1f:e2:cf:ce:5f:80:
                    7b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AB:CF:97:9D:84:9C:87:29:D3:B1:FA:2F:9A:2E:61:FE:0F:94:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/dffe03ae-d1a0-30d8-b959-4a08e6f46f04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.70.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:13:2f:52:73:79:10:57:07:17:b7:60:2b:1e:bc:74:c6:ab:
         82:82:2d:e1:41:94:12:50:2e:a7:62:03:c0:57:23:f4:26:6d:
         08:d6:9d:8d:eb:2c:4b:68:36:3a:b1:5d:37:34:69:07:c6:1f:
         e8:36:17:14:b5:48:83:d3:ba:b0:a8:22:c8:a4:39:d7:3b:2f:
         04:5a:a9:d2:6e:48:8c:72:c8:b2:22:8b:5e:1e:83:09:73:cd:
         fb:8c:59:c2:c8:e5:a6:9d:66:6b:3d:82:9a:15:40:c2:d6:5e:
         dd:61:54:3d:6a:31:f4:4a:07:79:1b:c3:a2:8e:05:5a:d8:43:
         c8:39:ea:29:38:12:bb:78:ba:3f:ed:c9:f6:9f:d5:94:5e:8c:
         07:f5:83:f3:ef:54:b1:02:17:e4:6f:69:98:e5:81:5e:26:26:
         54:c0:17:4c:67:d5:a6:c8:23:9d:2e:38:51:1a:94:9e:bf:8b:
         7f:38:f8:0d:92:c0:37:62:2c:ba:37:90:ea:19:5d:09:e7:c6:
         4c:9b:a1:7f:67:e4:95:6c:90:ef:ef:f4:e8:8e:18:e7:fb:17:
         e5:d5:c1:b4:89:06:21:a1:dd:35:32:54:4f:47:7c:bf:e7:89:
         95:f3:64:b2:dc:85:35:ae:ce:c7:4b:f9:d5:32:a0:81:8a:0a:
         0c:c5:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:57:21 2026 by rpki-client