Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5ff2d25-b424-3efe-a5c7-c8ae9d29b815.roa
File:                     d5ff2d25-b424-3efe-a5c7-c8ae9d29b815.roa (raw, json)
Hash identifier:          EAtXuxowZJvdFAnpPIUhZXOXMEGPdFGmg6na2yX2J+Q=
Subject key identifier:   E2:71:8A:CE:8B:1B:E7:26:95:2F:B7:CC:06:AF:20:77:FE:92:F8:01
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D5F7FA64AEAF82FB433D86300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5ff2d25-b424-3efe-a5c7-c8ae9d29b815.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     46558
IP address blocks:        134.70.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:a6:4a:ea:f8:2f:b4:33:d8:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=fb59be81-e9bb-421f-badd-fb402f443e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e9:d9:aa:d7:89:01:23:48:d1:c9:28:1a:25:
                    9a:23:99:4d:c3:d3:d4:4b:c3:a3:7b:5d:26:c5:70:
                    64:f6:5a:1d:e1:52:ae:5d:f7:0c:d2:bd:fc:04:90:
                    06:20:77:9a:44:6d:b5:de:2e:82:de:30:c0:ed:a1:
                    b2:87:b9:65:e9:33:f1:3e:f6:75:d7:87:21:3d:d7:
                    37:16:bc:d4:49:9c:a2:1f:db:a5:81:d6:75:0a:ba:
                    ad:b3:97:86:dd:bf:2f:49:03:86:3b:09:26:bb:a3:
                    6c:44:d0:7a:eb:65:f6:a3:99:a3:92:bc:b5:a0:45:
                    f7:05:25:07:7d:86:c6:23:de:40:bd:a1:11:e0:83:
                    81:e9:b7:6f:13:1a:25:f9:41:98:1b:d2:84:ea:b0:
                    63:6e:5f:d6:85:1a:52:9b:34:ee:d8:e8:9e:8c:10:
                    10:ef:2a:95:22:83:c9:36:21:47:3d:eb:f0:c3:62:
                    58:4a:ce:30:ef:f7:de:0d:01:1b:d2:4a:33:3b:01:
                    a9:8f:0d:07:96:fa:41:49:97:7b:af:18:da:26:3c:
                    08:a9:9e:41:5c:a7:dd:28:35:65:d4:b2:b7:c5:ea:
                    45:54:b6:75:88:a5:43:6d:6d:e9:51:2a:37:6a:30:
                    15:4e:a0:e4:98:2a:e9:43:c4:57:d8:2b:41:14:0f:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:71:8A:CE:8B:1B:E7:26:95:2F:B7:CC:06:AF:20:77:FE:92:F8:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5ff2d25-b424-3efe-a5c7-c8ae9d29b815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:14:5e:93:4d:fb:a4:de:34:51:cf:15:11:2b:91:2a:c5:be:
         7d:4a:6d:73:59:a2:8d:9d:25:ae:22:cf:f6:7b:56:f1:a6:1b:
         b0:f2:8b:5e:af:e8:bf:50:dc:c2:02:07:15:75:92:e8:8d:72:
         90:63:56:79:aa:0a:b8:5a:e4:53:ae:36:56:d0:29:70:20:5c:
         20:a2:70:38:88:a8:57:21:d0:80:94:c9:f9:bb:1e:de:c5:df:
         58:f6:17:43:e9:0b:76:c8:c9:ed:b7:6c:2f:02:0e:00:57:a5:
         3e:e5:0e:4e:88:cc:ee:ea:e4:34:0a:1d:8d:8c:83:64:e8:36:
         9c:df:2d:69:12:75:92:be:16:69:1a:97:8d:a0:7f:aa:2e:b2:
         95:4e:36:ff:c3:58:4e:0f:1a:42:e8:fe:7c:3a:f0:be:20:4d:
         fd:f9:81:0c:6c:67:98:a5:70:61:9a:ab:55:d3:aa:ea:09:63:
         32:c4:09:58:0a:3a:d2:a5:4e:93:79:bd:7e:8d:9b:21:d8:13:
         a8:4e:dd:30:7b:0d:b1:68:63:9a:74:7e:d1:95:dd:c2:8c:4b:
         7d:2a:be:af:ed:1d:44:e8:ed:a1:df:b9:6e:67:10:df:6a:15:
         a6:e2:55:3e:6b:e2:b7:20:db:97:ea:4c:49:8b:60:d6:71:c5:
         4e:85:f4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 19:32:51 2026 by rpki-client