Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88199164-f863-3c85-b087-9369d6dcdee1.roa
File:                     88199164-f863-3c85-b087-9369d6dcdee1.roa (raw, json)
Hash identifier:          xdY9fajxG8s2C7TN7tS7POP3upImW8dsxl35n+T4p+k=
Subject key identifier:   9C:27:3C:DA:1B:B3:7D:5B:6B:7E:00:5C:BD:F4:98:41:70:A4:66:DF
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DE2B5EF8F02E90C49710A8F80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88199164-f863-3c85-b087-9369d6dcdee1.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     31898
IP address blocks:        168.110.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:ef:8f:02:e9:0c:49:71:0a:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=c01f4861-dd9c-44e8-8166-01ed83b1a2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:8e:f7:28:84:63:04:46:e7:66:98:e4:6c:
                    ea:4e:68:0c:a3:b7:0e:17:6c:99:1b:ea:13:4b:9a:
                    f6:8c:7d:67:5c:d3:77:e8:a0:ca:30:c4:ea:fa:54:
                    51:d1:7b:24:de:e6:67:d7:9c:f1:b0:47:0c:a3:52:
                    0a:7d:9a:58:0e:30:9d:8d:2e:ae:4a:16:5d:a6:38:
                    33:e3:6e:10:a1:8e:87:e6:11:c7:0b:f9:9b:e8:41:
                    fc:0a:09:ab:06:38:52:80:9c:95:5e:a0:c3:3a:3f:
                    0b:96:ab:97:2a:c3:2a:d9:50:67:c0:47:36:90:b6:
                    2e:b2:df:33:e9:22:69:a8:a9:e7:b8:14:8f:c2:9e:
                    d2:ef:a7:a9:bc:28:89:f0:1d:56:05:64:37:8f:de:
                    fa:ed:99:be:90:ed:1c:15:53:a9:d9:f9:0b:c8:2b:
                    a4:af:68:b6:51:b5:4d:20:eb:56:25:88:96:31:15:
                    54:c5:a9:f3:ec:d6:e5:f6:92:4b:13:11:e7:3f:5d:
                    12:75:0b:02:00:cd:10:cc:58:32:d6:43:f9:9e:e7:
                    23:00:2e:2f:df:bc:9d:53:34:e0:15:1e:19:02:ba:
                    bc:0e:3c:16:c8:16:9a:ec:0b:64:1e:e2:79:63:7f:
                    8c:da:4f:80:5e:87:60:87:68:92:af:f0:c8:37:3e:
                    34:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:27:3C:DA:1B:B3:7D:5B:6B:7E:00:5C:BD:F4:98:41:70:A4:66:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88199164-f863-3c85-b087-9369d6dcdee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.110.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:89:de:1a:de:58:41:56:ad:42:99:ff:73:19:0f:54:07:b9:
         b5:b1:1c:44:02:7d:9e:9b:cf:92:76:84:d3:54:29:8d:0a:cb:
         e9:0e:50:4f:bc:4f:48:29:81:45:e7:84:27:b2:35:3e:73:3a:
         51:93:1b:7d:05:2c:14:9f:2d:52:eb:81:ea:f8:dc:c4:6d:28:
         37:ed:2d:04:00:16:98:08:02:e2:c7:f0:a8:17:36:10:fa:5b:
         81:99:9e:0e:cc:30:24:02:f4:6f:ab:4c:80:cd:9e:a8:5c:1b:
         e9:c0:b3:e0:25:99:65:9c:7a:59:20:0d:4e:b1:79:a7:cc:16:
         b5:a0:ba:81:d8:ee:47:97:4a:eb:43:3c:d9:b9:60:30:c9:c0:
         49:0f:ce:44:ad:fb:00:bf:96:c3:df:6e:6e:a6:82:87:d2:f8:
         5a:e8:17:70:75:ae:26:19:cb:c7:34:db:4e:03:e8:82:96:d1:
         2c:d2:dc:ac:92:4f:29:39:12:ae:bb:f2:b9:3d:f1:7d:0a:f5:
         4b:f5:c8:cc:6e:25:90:00:b4:d3:83:3c:02:4e:08:5b:c3:d5:
         7a:5d:7b:c6:24:94:8c:33:be:79:b1:2f:58:36:81:32:3b:66:
         d3:2c:d0:c4:41:a2:a1:62:cc:6b:03:f9:ae:0d:f6:8a:7a:0e:
         61:05:26:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:06:08 2026 by rpki-client