Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/78502f4a-cb42-394e-a2ff-238350ff7066.roa
File:                     78502f4a-cb42-394e-a2ff-238350ff7066.roa (raw, json)
Hash identifier:          DICgCdRCCDNGtWmYveWDGKhBobMHSxn1+wtCYT7j30I=
Subject key identifier:   A8:76:45:86:B5:8A:FC:C4:BE:BE:E4:AA:0A:F2:84:22:16:72:A9:C1
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584E37646F97AE9DDFA2285BF900
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/78502f4a-cb42-394e-a2ff-238350ff7066.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     395793
IP address blocks:        70.39.164.0/24 maxlen: 24
                          70.39.191.0/24 maxlen: 24
                          70.39.229.0/24 maxlen: 24
                          70.39.241.0/24 maxlen: 24
                          70.39.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6f:97:ae:9d:df:a2:28:5b:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=c2094a40-0495-49f8-93c0-2fce5187f34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:0d:b3:15:7f:cf:a7:13:f2:10:2a:17:76:
                    dd:1d:d8:31:be:68:b4:29:93:68:d7:40:ab:47:33:
                    d8:6b:f6:44:45:2a:dc:a1:1a:9d:18:82:25:a3:2d:
                    13:34:94:7c:02:dc:17:1e:b4:30:9a:5d:56:63:6f:
                    ec:2f:06:bd:83:bc:93:ee:d4:9b:c3:9b:db:28:88:
                    85:c5:dc:4c:97:e2:d6:0e:a9:eb:85:f3:e3:7a:ab:
                    b2:98:ee:77:f6:fd:49:d7:1f:c6:3b:f4:29:c0:f2:
                    39:b9:98:c2:62:05:2c:21:27:e4:7c:64:d3:55:4a:
                    bb:05:66:03:1c:6b:60:59:f3:64:d4:fb:4d:0c:85:
                    b5:89:f3:ff:a4:fe:b6:f6:31:9f:8c:70:a7:2d:be:
                    b5:0c:e2:fa:b4:a5:19:51:46:39:af:93:54:83:09:
                    b0:fb:f9:f1:48:6b:ad:6c:da:bf:cb:20:e6:c4:8a:
                    e9:61:4f:55:2f:2b:19:11:66:16:f7:ca:53:67:be:
                    f8:9a:63:3b:b2:c2:df:1d:51:0d:b4:8c:e7:41:9d:
                    23:01:d2:af:4a:96:7e:07:03:be:8e:04:d9:cf:06:
                    d3:9f:f8:b9:37:c1:18:34:3c:c8:a3:f3:94:6c:ed:
                    c2:12:71:c8:55:52:65:b6:6d:47:87:9c:43:37:e3:
                    7b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:76:45:86:B5:8A:FC:C4:BE:BE:E4:AA:0A:F2:84:22:16:72:A9:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/78502f4a-cb42-394e-a2ff-238350ff7066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.164.0/24
                  70.39.191.0/24
                  70.39.229.0/24
                  70.39.241.0/24
                  70.39.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:77:56:43:67:53:49:67:dc:f0:28:90:f1:fc:ba:9f:1d:6c:
         40:c8:13:74:2e:cd:bb:ca:99:9f:49:a3:b1:66:5d:fa:b5:40:
         55:5f:27:3e:e9:ce:9d:69:0f:73:5b:aa:98:7c:ba:11:aa:ce:
         36:e4:ce:38:1e:56:83:b6:a6:c1:9b:d9:dd:df:36:13:c9:1e:
         69:8a:4d:17:9c:2a:19:50:fb:8f:ff:c3:ea:b8:b3:ae:b2:1f:
         cf:ae:d5:dc:70:15:50:cf:b7:60:12:55:2b:9d:4d:37:58:dd:
         1a:28:4b:f7:92:b6:a5:d1:b7:f8:93:33:0f:db:b7:e7:20:8d:
         48:68:03:a7:88:a4:4f:ed:54:5c:16:fc:7c:6c:fb:cb:5f:d7:
         44:a8:90:e1:92:1d:34:6f:3c:fd:35:46:3f:2e:61:37:b1:a4:
         73:81:3f:07:73:d9:47:76:cd:b6:09:e0:07:31:0f:22:d0:1e:
         29:63:79:3c:8b:b9:03:13:d0:c4:ff:a6:81:5d:7a:e8:ad:09:
         bb:04:0a:80:43:42:a2:a9:7a:ae:0d:20:0c:f7:e8:06:ac:67:
         9d:a4:75:c8:93:e1:ab:a8:b8:df:4d:56:5e:0e:9a:ff:6b:a4:
         68:43:d7:2e:0a:88:d4:2c:72:2c:ff:9b:ec:d7:db:0c:20:a5:
         ae:de:fd:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 20 13:23:14 2026 by rpki-client