Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8f7e660-fe04-3fb4-b8af-c0b56ed3bdfa.roa
File:                     a8f7e660-fe04-3fb4-b8af-c0b56ed3bdfa.roa (raw, json)
Hash identifier:          hSLcQ3NoZy9lesaEIpyheT6Dt9wKGbQlBcu88a33XgU=
Subject key identifier:   EE:A4:23:A6:B4:33:45:E6:E5:39:64:88:B7:72:62:27:1B:3F:15:74
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAA273360AFB6DCE1F92BB480
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8f7e660-fe04-3fb4-b8af-c0b56ed3bdfa.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     31898
IP address blocks:        134.70.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:33:60:af:b6:dc:e1:f9:2b:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=5c133209-2c20-4e3b-9151-7c19eb328d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ef:02:96:d3:de:8f:92:52:51:50:49:ed:ab:
                    2c:4d:72:51:01:df:a7:d3:61:77:e5:63:70:64:75:
                    e9:6d:fc:5d:bc:aa:ee:57:99:69:b8:cd:64:63:aa:
                    68:4f:2d:72:d9:11:74:47:2c:33:3e:bd:9c:a3:8e:
                    09:e0:d2:50:a4:19:a6:e2:e7:27:3c:6f:d1:72:6a:
                    cd:2e:2c:0e:64:19:c1:76:bc:64:1a:6e:e0:0d:bc:
                    22:d0:1f:6f:f4:2d:73:9d:b9:8e:3b:c8:86:6d:79:
                    b0:a1:8d:7e:cf:8a:b3:9d:7a:76:0f:c5:5c:29:21:
                    3c:5e:a3:d9:ef:1f:8e:48:6b:1d:a1:5f:0a:77:1d:
                    cf:e2:4f:ea:b5:c1:db:86:e3:15:3d:7c:ac:87:ab:
                    e5:88:81:0f:a3:d5:e8:94:09:4c:31:be:91:7b:5e:
                    07:d4:30:f9:0e:56:cf:8a:17:c3:27:4d:bf:9c:a1:
                    ec:15:c8:bc:f2:d6:ff:42:cb:94:10:fb:d3:a1:56:
                    8e:30:07:b7:b8:1e:6b:d9:24:24:b9:65:80:09:53:
                    79:a1:9e:d4:36:5d:00:97:36:d0:94:e9:5a:e6:1c:
                    94:aa:4d:61:7b:a8:61:8c:aa:dc:47:57:ab:e8:52:
                    27:34:55:4d:7d:a2:a7:01:f4:e0:1b:3e:4d:4b:c9:
                    c5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A4:23:A6:B4:33:45:E6:E5:39:64:88:B7:72:62:27:1B:3F:15:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8f7e660-fe04-3fb4-b8af-c0b56ed3bdfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b8:a5:97:94:92:0c:50:e9:e3:04:11:f1:20:5b:e8:ef:81:
         7f:92:1a:b7:de:00:f2:fa:d8:f2:58:2f:b9:d4:b5:c2:9b:1b:
         a3:76:45:e1:d1:f3:c0:df:36:0b:65:e7:57:cd:dc:12:05:41:
         91:d1:6d:b9:df:4c:86:d5:d3:4e:6b:83:36:81:68:66:ee:95:
         a8:f2:b9:bd:32:9a:ca:75:c1:27:93:b5:7d:a8:2c:d9:c5:19:
         1b:fb:be:c9:19:27:33:b5:44:42:20:35:74:94:85:02:7e:69:
         fe:1d:8a:af:d0:d4:c8:c7:74:75:13:a5:9f:72:1d:14:1c:dc:
         f2:88:73:dc:57:6d:1e:20:50:e8:ff:61:ec:74:49:9c:7f:84:
         f8:ff:81:dd:f3:fd:87:35:e8:e7:3f:47:22:ce:ab:82:65:e9:
         ba:b3:86:59:04:d5:a7:b1:9f:ed:2b:c5:d7:85:65:a5:49:00:
         0f:18:ab:58:7f:34:d9:e2:29:45:2a:14:1e:4b:f5:36:58:ce:
         c9:96:91:52:18:87:4f:c1:ad:27:3f:a6:e4:fd:8d:ad:00:3c:
         97:74:a0:0f:a8:46:06:c0:8b:4f:4b:92:34:7e:9d:c0:ad:93:
         6e:26:4e:18:b7:54:da:d5:3d:88:c0:8a:d0:d0:18:7b:4c:0b:
         eb:db:09:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:26:28 2026 by rpki-client