Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6ec7a0a6-0eea-3945-934b-c3f5eb0b95c1.roa
File:                     6ec7a0a6-0eea-3945-934b-c3f5eb0b95c1.roa (raw, json)
Hash identifier:          InLqUjBVtQKGrFz/67Sp9dMxUF5cPpPg8r1Dw06piVk=
Subject key identifier:   5A:FC:B4:91:7D:0F:BE:C1:44:5D:9D:3F:4B:B4:43:AD:EB:C5:2B:1B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E84B78575FE13D9DEDDB29300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6ec7a0a6-0eea-3945-934b-c3f5eb0b95c1.roa
Signing time:             Thu 16 Jul 2026 13:44:59 +0000
ROA not before:           Thu 16 Jul 2026 13:44:59 +0000
ROA not after:            Wed 14 Oct 2026 13:44:59 +0000
asID:                     2763
IP address blocks:        160.34.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:b7:85:75:fe:13:d9:de:dd:b2:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 16 13:44:59 2026 GMT
            Not After : Oct 14 13:44:59 2026 GMT
        Subject: CN=c63bb9d3-c77c-415b-b211-76cbb917bd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:5b:32:20:89:7b:37:07:b8:92:d6:c3:e7:
                    1e:eb:a2:35:97:fa:56:81:74:23:b0:c8:20:c3:85:
                    da:03:da:5f:ff:e8:99:ae:56:f7:20:0e:73:94:28:
                    1e:a0:bd:e1:91:56:4e:51:1c:dc:44:3b:0a:e1:dc:
                    da:68:00:e1:1d:98:98:3c:2e:25:b8:f6:aa:74:10:
                    ce:4a:c3:a5:75:95:05:16:ce:0d:59:56:ad:e0:03:
                    de:b8:43:0b:30:14:06:1f:9a:c0:dc:0b:22:7b:fe:
                    66:d8:46:91:52:9f:0a:a0:97:df:6a:c1:b8:97:5b:
                    c0:cb:bf:31:d2:9a:fa:3a:6d:4d:29:e8:d3:b0:36:
                    f1:84:f3:36:54:20:55:0c:ac:a7:05:30:8f:73:b3:
                    a4:78:3f:b6:67:59:b3:14:07:0a:f5:4d:99:28:b4:
                    21:87:c3:bb:74:ec:a6:76:76:52:58:3e:e9:a1:3a:
                    9b:98:3c:d1:ce:f8:b5:97:bb:b3:59:30:42:78:d6:
                    5c:3e:62:31:51:e6:2b:fa:4f:16:66:64:08:95:20:
                    28:10:0b:f9:29:b3:21:99:2a:4e:08:e3:2f:fb:be:
                    d1:be:d0:22:9b:6d:2d:45:f2:51:54:74:43:77:2d:
                    ec:7c:1a:c5:44:d4:9d:2b:da:87:3c:3e:cb:19:fc:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FC:B4:91:7D:0F:BE:C1:44:5D:9D:3F:4B:B4:43:AD:EB:C5:2B:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6ec7a0a6-0eea-3945-934b-c3f5eb0b95c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.34.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:51:24:9a:91:ca:dc:0c:f4:63:09:86:23:76:11:9f:31:c4:
         f1:64:bc:e9:2d:fb:bf:e8:13:af:7a:41:67:c8:bb:f7:43:f5:
         67:df:70:1e:1f:93:d7:8c:80:06:41:aa:bb:1e:7f:03:97:3b:
         c8:c3:46:1f:0a:ad:b9:40:ca:ce:db:f6:bc:e2:64:f2:e6:31:
         a2:87:d5:62:9b:4d:06:63:ad:9e:96:d1:28:d0:96:a2:b1:d4:
         49:b5:71:d9:eb:c4:70:3f:2c:58:fc:84:4e:37:b2:bf:f4:5e:
         28:f8:76:09:46:d2:95:7a:d6:2f:99:48:a5:66:3f:9b:38:50:
         db:42:39:df:05:06:33:6b:01:90:30:c8:7f:de:98:b5:90:8a:
         3c:e8:d4:f6:cf:d1:a6:b4:55:d2:c9:12:55:c5:e4:89:e4:86:
         b2:02:54:77:b7:c3:09:c7:87:72:c5:b7:6a:21:2c:2a:b6:f3:
         dd:2c:56:43:e0:c9:f3:95:1c:21:b6:27:84:75:31:79:30:5f:
         36:6e:bb:d8:b9:58:0d:1b:68:4c:f4:b6:44:e5:64:10:e7:12:
         a8:26:a8:78:d7:a1:b1:bc:89:dd:76:4b:d4:f9:51:91:a8:46:
         25:11:01:35:05:08:2c:86:da:7c:2b:f2:6f:0e:bf:a2:c7:f7:
         01:09:b5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:32:36 2026 by rpki-client