Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5b61813-4abc-3ab9-acc3-b5057712a353.roa
File:                     d5b61813-4abc-3ab9-acc3-b5057712a353.roa (raw, json)
Hash identifier:          mW+RC7ZUs2R2CZmCIePAjhM1d44AYHWBTaFmWdXAxcI=
Subject key identifier:   96:7B:93:24:6A:E6:71:51:B5:5F:F4:A1:CF:CE:13:74:AB:A9:85:3B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE8C5EBF3DB4FB2F47E246540
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5b61813-4abc-3ab9-acc3-b5057712a353.roa
Signing time:             Tue 19 Aug 2025 14:47:05 +0000
ROA not before:           Tue 19 Aug 2025 14:47:05 +0000
ROA not after:            Mon 17 Nov 2025 15:47:05 +0000
asID:                     31898
IP address blocks:        134.70.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:c5:eb:f3:db:4f:b2:f4:7e:24:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 19 14:47:05 2025 GMT
            Not After : Nov 17 15:47:05 2025 GMT
        Subject: CN=424e9873-ac0e-4e89-bdf7-9689f5c71b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:99:ba:7c:ae:ee:7b:42:68:63:c8:80:2b:4d:
                    87:bd:5c:09:23:ec:f8:57:75:4d:85:65:c3:77:b5:
                    d3:a1:d1:3e:2a:39:bf:a7:2a:14:a9:b3:ee:ee:66:
                    20:77:cd:19:10:d3:9e:c2:a8:1f:ec:ff:d8:77:4d:
                    11:b8:7a:58:75:7f:38:a1:4b:1d:2f:7f:87:ff:5f:
                    44:85:4c:fe:92:6e:92:29:6d:8b:25:02:7e:4b:3b:
                    13:5d:84:3d:27:29:ba:50:07:29:08:dc:5e:2c:a6:
                    69:22:a4:01:22:b9:cc:b8:8d:fa:aa:f2:65:de:ef:
                    72:37:4d:d0:7e:f9:ab:06:e7:07:71:5e:7e:de:28:
                    ad:af:a5:af:7b:6e:45:76:a8:45:44:35:e9:e0:50:
                    75:aa:fe:ad:09:5f:67:e0:67:00:d7:7f:88:15:62:
                    83:be:39:81:cb:a7:cf:f5:b1:3d:d6:97:9a:f8:bd:
                    57:7b:1d:de:51:5a:2b:e0:f1:24:7b:db:ab:3c:87:
                    de:55:6a:3c:7d:cc:33:f8:92:02:4a:b6:3a:82:c4:
                    c2:a6:b1:76:39:da:47:5a:4f:c0:7a:d8:15:94:07:
                    c1:13:ad:61:3a:0c:02:a1:2d:82:e6:4f:fc:05:05:
                    8d:a1:e3:fd:fa:8f:c3:ae:a5:9e:a1:f7:ca:9b:a2:
                    27:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7B:93:24:6A:E6:71:51:B5:5F:F4:A1:CF:CE:13:74:AB:A9:85:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5b61813-4abc-3ab9-acc3-b5057712a353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:44:ea:3b:3c:6b:8c:ba:18:1c:71:2f:be:bb:9f:ba:a9:fd:
         9a:d3:37:8d:6e:7f:1f:45:0b:1b:81:0e:38:0f:02:01:2f:87:
         6f:7f:ad:90:8f:ef:14:30:40:cf:c6:83:cb:8a:2b:cf:16:e2:
         b5:8f:a5:da:71:72:ee:a9:91:39:42:ba:56:fb:f8:b7:03:86:
         0e:29:a3:57:84:b2:46:e2:4f:15:01:55:47:a1:66:96:c8:3b:
         32:41:7d:a8:59:c3:12:cf:8e:16:06:ac:79:cb:73:d2:34:5b:
         9f:89:f6:7d:39:b6:b3:a0:72:6e:b5:5e:0d:8f:f6:d5:02:84:
         8d:eb:a1:8d:e7:2f:16:55:7e:3f:7b:70:0f:bc:4b:06:33:a8:
         3f:44:b1:ad:0f:e9:d7:47:f9:51:84:f5:e3:5a:21:dd:8a:18:
         be:ec:cd:0d:91:8a:df:31:0a:19:b7:7d:ff:1d:a4:12:d3:70:
         ed:49:74:c3:4d:b2:a6:d3:1e:84:39:ce:19:f8:f3:f3:58:72:
         54:92:7e:57:31:33:25:ac:39:c9:ea:82:0a:a2:81:13:0e:27:
         2b:78:23:36:c0:74:73:8c:31:83:d6:a0:de:7f:fe:6a:e9:70:
         fe:4b:02:e7:c0:84:39:30:52:48:9b:4d:9f:62:54:b3:1f:b1:
         56:50:da:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:31:28 2025 by rpki-client