Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dad64623-3749-3342-b0df-74cdbe160a48.roa
File:                     dad64623-3749-3342-b0df-74cdbe160a48.roa (raw, json)
Hash identifier:          hWZlbDbB36EXfvsv9OTIPjXI4K7nkv7Bqx7bE3c5elI=
Subject key identifier:   3D:78:72:5B:BF:9B:52:2A:E7:E5:92:92:A9:2A:31:70:5D:C5:84:9D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAFBC765FEAED43F9E7726E00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dad64623-3749-3342-b0df-74cdbe160a48.roa
Signing time:             Thu 29 Jan 2026 14:00:40 +0000
ROA not before:           Thu 29 Jan 2026 14:00:40 +0000
ROA not after:            Wed 29 Apr 2026 13:00:40 +0000
asID:                     31898
IP address blocks:        134.65.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:af:bc:76:5f:ea:ed:43:f9:e7:72:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 14:00:40 2026 GMT
            Not After : Apr 29 13:00:40 2026 GMT
        Subject: CN=88dfe63a-6596-4f46-a7da-04e079dc1a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cd:bf:a3:58:3e:a7:58:cb:72:f2:20:1b:57:
                    3d:d5:f0:41:f5:18:5b:e1:9c:84:53:22:b5:9c:e8:
                    a3:cd:ec:80:17:20:26:93:28:7c:98:86:5d:c7:69:
                    e8:7a:7c:26:cc:db:18:87:cd:25:f8:cc:fe:12:e8:
                    a2:5f:3c:df:71:67:c2:06:97:e3:b1:5f:fe:18:f7:
                    3d:a9:3c:eb:93:52:c9:74:54:cf:1a:cb:20:d4:69:
                    03:f3:35:ab:2b:b9:79:b9:34:9c:08:30:e9:22:ad:
                    17:4d:67:b7:8e:7b:35:57:34:10:af:93:54:c2:d9:
                    63:35:fb:c6:01:38:52:d6:fa:f3:0c:a9:04:3c:b5:
                    fa:e3:91:32:3d:bc:c2:dd:6c:81:15:1c:9b:5a:e0:
                    2a:48:12:89:22:83:1c:32:f1:b4:fa:bc:ce:04:c8:
                    60:05:56:33:c2:ab:02:5c:27:a9:22:cc:e4:3c:7e:
                    c5:86:1d:7c:21:aa:a9:f5:81:9a:8d:d3:8d:83:3f:
                    58:72:fe:2b:f9:1f:be:c8:a7:6f:66:99:c9:9a:b1:
                    c7:0f:f0:35:cb:05:d0:d3:9a:cb:9c:fe:87:73:b2:
                    1c:a4:27:5f:65:70:dc:81:18:3c:24:9b:6e:a6:ab:
                    d3:84:b3:af:7a:61:1f:45:49:fb:a6:94:01:86:0b:
                    6b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:78:72:5B:BF:9B:52:2A:E7:E5:92:92:A9:2A:31:70:5D:C5:84:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dad64623-3749-3342-b0df-74cdbe160a48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c4:1d:09:fb:8c:c1:24:78:57:2d:56:d0:39:7b:3e:b9:0a:
         11:ff:a2:30:ca:d6:46:a7:2b:82:ad:50:24:68:b5:6d:1e:a1:
         1b:23:ad:3b:e8:e8:74:5d:cf:ab:0c:e5:af:11:59:ee:32:88:
         52:ac:75:31:b0:dd:bf:c5:40:b7:b8:56:bd:2b:49:63:b8:f7:
         19:cb:de:33:22:f4:cb:61:4d:b7:31:2c:6c:98:f0:4b:ed:87:
         6f:e4:a7:6e:fc:28:d4:cf:c6:3f:f9:e6:b0:bd:de:33:02:32:
         74:ae:fa:99:f9:c8:e5:80:37:22:97:cc:f2:ef:eb:93:ff:2b:
         48:b9:06:55:07:bd:54:db:b9:f1:33:b3:e9:77:c1:78:91:08:
         f4:fc:eb:a8:2f:70:ce:21:4a:6e:2b:df:9f:63:d3:9b:08:8c:
         78:d9:bd:45:70:5f:97:f9:9e:58:91:07:30:b3:e3:78:c6:fa:
         2d:a0:90:1c:9e:d0:76:8e:4a:6c:a8:db:e6:d6:62:d9:02:94:
         75:35:65:c6:82:b4:a9:0b:4a:61:e6:65:da:30:dd:ea:cb:8a:
         5a:19:14:42:61:1e:d0:95:d4:c3:39:b9:46:cb:0a:95:c2:88:
         2a:70:f8:85:97:c1:30:99:4f:c9:6b:7f:18:37:51:bc:50:22:
         b1:ac:b8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:31:48 2026 by rpki-client