Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96c799e9-230d-35b1-8b2a-9b08e603343c.roa
File:                     96c799e9-230d-35b1-8b2a-9b08e603343c.roa (raw, json)
Hash identifier:          7FF8hMalS4Xr5MU0INk+sjmhwXOXJ3qNBcITuzkhTzM=
Subject key identifier:   9D:F6:94:06:6E:27:A9:5E:30:FE:27:F2:F6:93:87:60:80:FE:62:C8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6DD4D3ADEE9F592826B7AD10
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96c799e9-230d-35b1-8b2a-9b08e603343c.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        134.70.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:d3:ad:ee:9f:59:28:26:b7:ad:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=57fe2e50-6de5-4c59-9854-753f6482983f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:4a:fc:71:34:c8:7d:ba:60:fb:82:eb:7c:
                    c9:30:d4:ec:8a:0b:df:4c:16:78:c8:4f:65:fe:6b:
                    ed:6e:e0:74:76:31:1c:9f:f5:8b:e0:71:a5:c7:c9:
                    17:4a:16:68:21:af:85:32:6d:bd:9a:51:d9:70:fe:
                    64:68:91:6e:73:df:c0:ad:7a:1c:37:7e:30:32:08:
                    76:4d:48:9d:18:bc:ed:9f:d0:74:55:9b:b8:f3:45:
                    2a:69:b3:57:c1:0d:33:b7:ca:07:ef:4e:30:e0:2d:
                    17:0d:c0:61:71:2f:e8:4b:cf:18:71:c2:8a:57:10:
                    42:c5:ed:c1:41:3c:13:34:d4:3a:e7:c4:63:83:f7:
                    9c:6a:b0:c1:51:1e:2c:f3:4d:c6:dc:4b:11:cd:c5:
                    7d:93:38:e1:77:00:32:ae:47:e8:cf:ba:41:07:de:
                    40:07:25:c3:f0:cb:70:9b:2a:c0:ee:48:d9:e0:db:
                    57:b0:5f:64:ca:4e:9b:ae:ad:63:6b:ec:4b:e6:84:
                    c4:f4:83:c3:c1:42:78:7d:43:12:f1:fc:6d:5b:f2:
                    d1:fc:1f:4e:df:3d:5f:15:c0:f8:60:61:51:d8:a1:
                    79:4b:44:8d:9b:8c:57:04:d4:d1:8a:bb:87:69:e5:
                    48:63:9b:55:d6:70:70:f4:6d:68:8b:7a:79:16:83:
                    2a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F6:94:06:6E:27:A9:5E:30:FE:27:F2:F6:93:87:60:80:FE:62:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96c799e9-230d-35b1-8b2a-9b08e603343c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d2:ca:49:8c:1a:d1:a9:e4:fb:c1:04:f5:f9:b6:0a:fe:33:
         68:bb:7a:8c:c0:2c:dd:e8:58:d2:81:c2:6b:1a:2d:60:df:20:
         1c:23:58:57:5f:23:4f:4e:98:e7:83:1b:02:8c:56:fd:7a:4f:
         84:85:35:fc:60:61:5c:82:54:46:22:0f:c2:c5:19:76:5a:2e:
         6a:2a:5c:2f:77:7f:b0:7a:c8:dc:e5:ac:a9:0a:91:bc:e9:18:
         66:94:19:16:bc:07:68:eb:c1:a8:27:a3:aa:61:58:58:07:5d:
         b6:47:75:e9:de:c2:97:a4:ec:6a:1b:89:87:63:c2:db:08:1c:
         a9:7c:b9:cd:30:28:42:72:bf:c5:da:e9:b4:93:d7:5b:8b:c4:
         b6:54:eb:79:ba:ed:b5:6e:09:4f:df:32:f2:92:0f:d2:c1:7c:
         ff:84:a3:f3:2d:44:a2:cc:03:c2:f7:43:ad:13:78:4e:91:99:
         83:7e:b1:8a:ea:2e:a2:22:22:62:55:79:d1:5a:6f:cc:3b:83:
         d1:e1:a1:b2:95:2b:81:e4:12:68:4e:01:df:3b:c3:79:cf:ea:
         a4:2b:fb:d4:b9:8e:00:5d:88:c7:e0:7d:41:f3:70:53:d1:e6:
         19:5d:d7:85:50:83:80:7a:22:cf:5e:bf:e6:d0:6e:37:83:fb:
         79:6f:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:53:49 2026 by rpki-client