Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0cff269f-2e77-37b6-8c94-a51216287b3e.roa
File:                     0cff269f-2e77-37b6-8c94-a51216287b3e.roa (raw, json)
Hash identifier:          LjaJinlQD+YoWQGKO67G4ikKE5Ih1f0qMZRnTObS8YI=
Subject key identifier:   7B:8F:08:95:E4:63:4E:A2:25:D9:E4:A3:A2:1F:6A:49:62:47:E3:46
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6F3EBDCC96E690755148F520
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0cff269f-2e77-37b6-8c94-a51216287b3e.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        134.70.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:bd:cc:96:e6:90:75:51:48:f5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=2a76ea02-f414-4c23-be4d-0055115b69d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:97:86:5a:59:db:42:92:10:cd:51:e1:56:
                    a8:72:68:92:1e:db:54:a3:b7:e3:1e:75:13:bb:2b:
                    36:d6:97:85:7d:85:02:94:fa:1e:d0:9c:83:b1:4b:
                    e9:dd:a1:4e:97:b5:da:b3:f5:4b:a1:a6:e5:d3:9b:
                    25:41:a0:c8:1b:b8:0d:58:e7:38:42:89:3c:ec:3b:
                    c2:a9:97:c2:0c:29:d4:79:53:a0:48:a3:cb:3d:5f:
                    fc:9c:71:88:92:ba:e5:43:8f:7a:4a:a3:7d:db:66:
                    d8:52:b6:be:ad:9b:90:3f:90:1d:85:77:ce:df:20:
                    46:94:21:c6:15:f3:90:16:e2:79:e0:08:a1:74:c2:
                    d2:48:59:35:8c:33:f2:e8:e2:e7:f7:f4:bd:b2:5e:
                    38:54:a7:9f:56:9c:5f:22:2f:9f:62:6f:0a:b4:9e:
                    dc:4b:65:b7:ee:55:05:dc:81:c8:69:ae:59:5f:48:
                    0d:66:4b:74:9f:0e:d5:e3:fc:a2:90:e4:87:65:f2:
                    8b:8a:da:07:96:32:68:6a:65:5b:94:ff:11:94:e2:
                    b4:0f:02:9c:86:1b:98:6c:21:1d:50:1a:86:ca:aa:
                    40:85:48:16:24:65:5f:ce:6d:19:b3:b0:42:ef:55:
                    d6:8a:99:ad:c3:c5:9f:99:a6:ea:4a:61:ea:1a:7a:
                    2b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8F:08:95:E4:63:4E:A2:25:D9:E4:A3:A2:1F:6A:49:62:47:E3:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0cff269f-2e77-37b6-8c94-a51216287b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:dc:8b:fc:13:af:2b:35:a5:a2:d0:a5:6b:1d:2b:1e:b0:60:
         cd:1f:44:59:ba:2e:b7:b6:13:54:f7:c6:95:30:9a:1b:70:8a:
         43:6c:fa:bd:53:19:06:44:f6:3d:fc:64:16:b3:e5:e0:fc:88:
         37:f5:c0:b0:b1:de:34:58:e3:d9:ae:bb:63:32:f4:01:8d:cd:
         1a:9a:ac:15:75:f0:4a:12:dc:49:3d:48:01:dd:f0:a7:dd:59:
         13:75:2f:db:86:9d:6f:2b:e9:7d:bd:49:d2:8c:d3:c4:5c:16:
         bd:1d:dc:16:90:bf:76:f8:d0:9e:92:19:aa:40:56:02:4a:30:
         85:3c:6d:e3:21:77:5e:e0:5a:3b:20:4a:e8:85:5a:50:5b:5e:
         7a:20:69:62:b9:54:6e:5a:18:a0:64:e3:99:8a:06:f0:34:56:
         80:ac:fa:56:cd:29:57:f6:29:78:82:d9:13:17:b5:71:ea:24:
         23:78:55:af:1c:ed:3a:ad:b8:c8:ea:9e:0d:00:0a:0d:08:7a:
         28:2e:db:ae:d1:e1:15:13:7c:5c:ec:08:11:90:79:18:a1:e6:
         bd:a4:3d:73:5a:ad:f3:f1:1e:1a:c3:ac:3a:2b:fd:f2:ed:b4:
         85:b8:af:8f:ec:99:e0:f7:65:72:36:55:7b:27:89:b5:51:a7:
         9a:d1:93:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:53:42 2026 by rpki-client