Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc395f9c-9c64-3285-ab1c-407a5cd68c05.roa
File:                     bc395f9c-9c64-3285-ab1c-407a5cd68c05.roa (raw, json)
Hash identifier:          gtHs0/ICl2wbdhPrkI8VMm1e9UHuv/mpmoUGZ8W+Pkw=
Subject key identifier:   59:20:7E:54:E8:1A:D3:B5:CE:3F:5C:A3:F3:67:79:C6:B0:65:8E:5E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE6B60BF77C7F296C50928A40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc395f9c-9c64-3285-ab1c-407a5cd68c05.roa
Signing time:             Mon 18 Aug 2025 21:03:29 +0000
ROA not before:           Mon 18 Aug 2025 21:03:29 +0000
ROA not after:            Sun 16 Nov 2025 22:03:29 +0000
asID:                     31898
IP address blocks:        134.70.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:b6:0b:f7:7c:7f:29:6c:50:92:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 21:03:29 2025 GMT
            Not After : Nov 16 22:03:29 2025 GMT
        Subject: CN=88162157-b25e-4d44-9b70-ff1cc4aa5a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e8:b6:83:3f:66:60:c3:65:83:03:41:da:78:
                    51:7f:48:a4:be:ad:f0:bd:8d:e6:51:b8:1d:64:b9:
                    a9:82:39:bc:53:70:06:cf:3c:d5:da:ff:3b:04:96:
                    37:9c:e0:e4:01:75:4f:12:9e:8b:2e:b8:4d:62:76:
                    18:b8:74:96:b2:84:b6:52:d1:b8:28:e3:7b:f2:09:
                    55:39:6f:34:64:fe:71:24:9c:68:d3:60:76:60:ec:
                    39:b5:aa:c2:d9:1e:dc:28:5e:c2:29:31:b8:16:f1:
                    92:b7:21:e5:30:8f:74:ba:b4:21:97:c8:1f:08:a4:
                    41:1d:72:e0:59:02:62:fd:d5:0b:c2:54:8a:d7:ee:
                    7f:74:47:9e:d9:41:37:b8:a6:66:a4:fe:0d:da:6f:
                    1c:ce:96:7b:f2:cf:96:7d:2d:c0:23:d0:bb:f8:61:
                    e9:76:44:8a:f7:ac:1d:3e:34:15:ad:cc:a6:80:c7:
                    5e:03:a0:d6:f8:c3:60:0e:46:7e:0e:3a:b2:ac:f1:
                    92:cf:2b:5e:68:6b:54:b9:94:ad:02:60:17:f4:e3:
                    64:1c:ed:20:2c:f1:44:2d:49:6e:4d:bd:95:c5:69:
                    a8:d9:dd:7b:2b:f8:94:1b:e7:5c:9b:be:40:bb:e4:
                    0e:89:b5:cf:ae:a5:ea:58:7a:67:25:c9:c7:b3:55:
                    35:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:20:7E:54:E8:1A:D3:B5:CE:3F:5C:A3:F3:67:79:C6:B0:65:8E:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc395f9c-9c64-3285-ab1c-407a5cd68c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:3c:03:8d:7f:14:e5:2c:c5:1d:01:e9:95:67:32:fc:3d:47:
         d1:94:8d:39:73:28:25:cf:53:63:0b:4f:74:bd:b1:3b:ec:a5:
         31:a4:c6:4f:45:76:8e:21:29:39:9f:12:a9:0c:36:10:37:a8:
         d2:77:ab:bb:9b:5d:02:af:73:7f:9c:c6:10:8c:1b:25:35:10:
         4a:cb:3c:5e:b0:f8:ec:64:82:dc:39:37:78:62:41:9a:a5:1e:
         4d:52:ce:81:51:ec:37:2a:f9:0b:15:6a:a0:92:87:51:02:f8:
         2c:47:f5:b9:1f:9c:05:d8:43:27:5f:3b:83:d2:7a:03:25:c0:
         fc:0c:94:ae:15:11:37:b5:a8:0c:b9:36:8b:bd:6f:af:e7:15:
         bd:3f:5e:0e:ec:8b:a0:00:38:dc:c2:f2:3b:ef:30:dc:2f:c8:
         37:a7:cf:46:da:72:95:2d:f6:19:ea:8c:74:9e:af:ee:67:34:
         6a:a0:17:dc:63:44:01:f5:e3:cd:6f:4c:e8:87:9e:0c:e9:57:
         09:67:bd:0e:b0:b8:aa:bc:fc:86:43:36:31:c7:51:a6:b6:9b:
         53:4c:8e:60:16:20:b0:86:d1:a9:fa:e8:57:05:da:6f:fd:27:
         8e:91:fd:27:5f:ff:e3:ed:6e:3e:97:7a:f8:e3:4e:1d:dc:c5:
         1a:8a:56:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:20:56 2025 by rpki-client