Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b6f6770-e46a-3534-bfee-23f2d9adf3f2.roa
File:                     2b6f6770-e46a-3534-bfee-23f2d9adf3f2.roa (raw, json)
Hash identifier:          9lj9PnbZuRLi7ZdDPugV7bD/xDLdmjda5JH2pDLxYSM=
Subject key identifier:   45:74:6C:B0:BE:3C:E7:E1:9C:78:78:60:9F:F1:6D:F1:A4:1E:59:6E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E66DA10D6DF56F901B5E49084
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b6f6770-e46a-3534-bfee-23f2d9adf3f2.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     31898
IP address blocks:        152.70.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:10:d6:df:56:f9:01:b5:e4:90:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=62daf1df-2e11-469e-8f10-e3fdb7b4b01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e1:93:dc:13:a3:2d:dc:7d:f0:7a:fc:7e:60:
                    4b:1e:1f:a6:62:ee:53:16:40:bf:11:a0:b0:96:71:
                    b0:b1:bc:96:25:a2:53:0f:09:e4:73:d1:d8:29:44:
                    28:4d:c1:e0:7f:95:bc:90:18:b7:64:90:03:87:74:
                    e8:fb:df:20:7c:97:e7:75:ff:82:2f:54:48:bc:bc:
                    69:07:74:cd:0a:bd:c5:bf:0a:47:9a:c8:b5:55:f2:
                    34:e6:50:fe:28:47:e1:a7:62:82:d5:07:b8:64:58:
                    4f:0b:22:5b:69:76:61:97:ea:c5:bb:99:97:02:33:
                    1c:c8:60:cf:21:68:16:b1:a2:d5:d1:3e:6d:0d:1e:
                    a3:4c:f4:7a:26:9d:1d:cc:a9:7c:9e:00:f7:c6:86:
                    90:a4:60:1d:a6:81:92:db:9d:85:26:2b:2a:45:ec:
                    16:69:04:b2:6c:39:31:c8:2e:cf:6a:89:5c:f8:37:
                    36:2c:98:22:b3:a0:26:c2:3e:85:bc:f0:bc:1e:9f:
                    90:24:07:12:59:97:29:63:f7:65:92:50:a3:9a:8f:
                    11:f1:6c:dd:07:04:1f:3a:46:86:f9:e6:45:0f:c7:
                    74:bd:9d:ab:10:66:99:40:24:27:42:a9:72:77:ff:
                    da:c8:6a:64:36:90:fb:4d:44:b1:c1:3a:ce:4c:54:
                    49:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:74:6C:B0:BE:3C:E7:E1:9C:78:78:60:9F:F1:6D:F1:A4:1E:59:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b6f6770-e46a-3534-bfee-23f2d9adf3f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.70.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:94:cd:7a:e3:5b:b7:74:42:7b:bd:ff:13:fa:c8:5a:eb:7c:
         44:bd:d1:57:c2:8c:a1:8c:6d:b7:de:43:2f:4b:fc:61:04:49:
         23:3f:54:12:04:f7:8a:ef:35:00:b4:c4:d5:95:e0:1d:a5:26:
         fc:c2:80:19:f4:f9:2e:91:b8:79:11:c6:9a:8e:72:9f:57:ef:
         34:8c:4f:1a:9e:4c:65:52:c2:81:35:3e:85:d2:27:c1:6f:98:
         71:9e:b7:c1:36:36:a3:27:31:4b:b5:58:df:74:cd:39:4a:60:
         83:5f:37:98:b2:e3:02:5d:a3:df:9c:ca:13:87:55:75:73:df:
         87:47:00:a0:f3:e2:39:92:8d:9e:32:6c:0d:37:96:73:1c:4e:
         cf:c6:a1:96:93:65:8d:d2:2f:6f:06:b9:b2:74:b2:03:ba:d2:
         ee:26:68:43:ff:75:32:5b:4d:57:0f:03:d6:c6:d1:4a:65:5c:
         0a:2e:a7:38:61:ac:72:8d:25:b5:a1:11:87:0d:6b:02:23:00:
         9b:72:59:bf:d9:66:89:37:bf:5c:29:68:7f:8f:31:b5:8d:1e:
         c8:e0:60:1f:50:fb:d3:b2:a4:ed:8a:ea:0e:46:6c:d7:90:a8:
         b1:af:d1:15:e0:30:8a:32:81:45:4b:4d:62:e1:87:c9:a3:2b:
         be:0f:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:45:42 2026 by rpki-client