Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/fa1310ce-d0b0-3045-97e8-42d1ec21d3df.roa
File:                     fa1310ce-d0b0-3045-97e8-42d1ec21d3df.roa (raw, json)
Hash identifier:          lUv3DyXBEWKTyf/bp1sSG02Lkv8uLxSCvpOb1KOSZZ8=
Subject key identifier:   3E:81:E5:FC:DF:A5:6D:ED:C6:80:BB:6E:FF:49:7F:95:22:C0:EF:DE
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBF472C49201733F9A82C9D50
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/fa1310ce-d0b0-3045-97e8-42d1ec21d3df.roa
Signing time:             Thu 06 Aug 2026 13:11:19 +0000
ROA not before:           Thu 06 Aug 2026 13:11:19 +0000
ROA not after:            Wed 04 Nov 2026 14:11:19 +0000
asID:                     396190
IP address blocks:        70.32.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:47:2c:49:20:17:33:f9:a8:2c:9d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 13:11:19 2026 GMT
            Not After : Nov  4 14:11:19 2026 GMT
        Subject: CN=5e1547e1-4605-4860-ace6-31633fa9407a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:34:90:78:c3:4d:14:73:98:71:53:80:25:
                    44:a4:0f:1a:b1:4d:3c:65:70:a2:29:b8:f2:69:07:
                    69:b7:93:b5:90:89:24:b7:96:cf:a4:3a:b8:66:54:
                    0d:1b:33:3d:a1:58:c3:34:82:71:ed:2f:29:2e:eb:
                    1a:ff:aa:cf:72:e7:72:fb:3b:59:51:61:bf:a7:0f:
                    bb:04:0c:c7:a9:99:60:ab:9e:60:f1:fd:75:2c:b6:
                    46:d3:82:ab:8e:64:73:4b:d7:f6:77:9b:dd:d0:e4:
                    9d:8e:ac:85:c0:5f:42:34:fa:b0:d4:26:0f:63:e1:
                    6f:47:a8:58:27:62:ca:9e:ad:89:ae:97:bb:00:c6:
                    f8:34:c3:a2:df:6b:20:18:58:40:30:ea:19:7c:98:
                    61:91:4c:ec:69:0d:18:33:fb:46:9d:eb:ea:21:a5:
                    78:b8:bb:7a:06:7f:10:8f:bd:60:f9:66:74:b2:f6:
                    f3:f6:67:ef:ec:cc:98:4b:fe:c4:1a:f3:4f:81:f6:
                    9a:49:94:b5:ec:6e:a1:6f:a0:8a:d6:67:89:ea:0d:
                    f1:bb:29:b0:82:53:73:b2:53:0a:3b:58:f8:87:9f:
                    38:1f:bb:b9:6b:e8:fb:2e:70:21:52:64:05:5f:8a:
                    46:58:4f:f2:80:4b:0e:4f:d1:97:80:d4:e0:e1:bf:
                    42:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:81:E5:FC:DF:A5:6D:ED:C6:80:BB:6E:FF:49:7F:95:22:C0:EF:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/fa1310ce-d0b0-3045-97e8-42d1ec21d3df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:d7:ac:bc:8f:c9:3f:90:e1:ce:b7:ca:ef:ab:e7:dc:f2:df:
         fb:af:d4:26:68:dd:9f:b2:6f:8c:59:3d:86:fc:f0:ae:e9:13:
         e6:43:fd:43:3d:83:f1:4d:71:66:d0:77:54:80:87:aa:0e:9a:
         f7:bd:4d:0d:b2:a9:c2:3d:f5:51:77:c9:e4:5c:6a:07:af:c9:
         d3:a9:2e:84:d8:d9:dd:b4:1f:be:9b:c3:94:d1:31:40:2a:f5:
         fd:8f:93:bd:56:73:18:7c:80:65:e5:b6:5b:66:e0:08:47:da:
         b9:9d:cf:f8:a4:04:43:d6:fe:4f:0e:21:8a:d3:ab:79:ca:61:
         77:8f:ad:c6:82:c9:b4:6a:8d:88:cf:d2:59:8a:b2:ee:b9:61:
         11:09:93:c9:56:ec:f2:17:f9:c8:f8:e3:12:ca:1f:ee:f1:14:
         1c:00:e9:e6:00:56:40:55:5a:26:24:76:e4:2d:2c:74:a2:21:
         80:89:ed:6d:88:cd:db:55:7b:9f:67:c3:d3:be:ae:14:fb:86:
         a7:66:48:89:58:9a:f3:a9:1a:0f:62:3c:69:bb:bb:56:2a:16:
         78:93:6c:f3:c2:7f:50:64:1d:61:34:bb:7a:fc:a8:c5:29:3d:
         c6:bf:a5:45:ec:f6:13:33:03:b3:a1:dd:29:db:19:c4:b7:4a:
         7a:a8:89:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 19:04:48 2026 by rpki-client