Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315c96-ceb9-3a3c-8310-30e6fadf5466.roa
File:                     e8315c96-ceb9-3a3c-8310-30e6fadf5466.roa (raw, json)
Hash identifier:          ptlhdqpeS6+40J6/leOb/81Sj7rl063LJvxjD7k2X74=
Subject key identifier:   34:25:C6:2F:48:14:E3:20:4E:FD:29:6C:AF:CF:B3:3E:CF:A8:83:01
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E5FDF72D5B0E8192929786580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315c96-ceb9-3a3c-8310-30e6fadf5466.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        152.70.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:72:d5:b0:e8:19:29:29:78:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=f2a9977d-6d8c-4c97-a3c6-eaf0b64460d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:a7:b0:0b:64:f6:ea:18:43:fe:08:fd:fa:
                    3e:5a:59:df:b2:27:08:8f:cf:aa:9d:55:72:a9:bf:
                    7a:74:ca:dd:54:c3:85:66:82:a0:7e:b2:64:c9:b3:
                    56:7a:ed:87:8b:1a:87:40:a4:d5:eb:7f:f7:b9:4d:
                    28:d2:b4:2e:49:2f:f7:47:bb:4b:2b:02:90:63:be:
                    b1:89:a4:f1:6b:29:58:c9:3f:21:10:64:c6:fc:d6:
                    0f:ff:71:a3:50:df:72:02:e5:10:b8:dc:e4:6f:11:
                    74:0f:17:a9:ce:51:85:fa:2c:f2:b5:08:13:4e:12:
                    e1:95:58:a2:ea:67:4c:31:d8:f7:59:b5:ce:a6:46:
                    ac:87:26:c4:b6:af:e7:be:b1:8c:ee:9b:f6:d5:e0:
                    36:66:1f:8f:9a:17:d1:aa:dc:f9:5d:ce:98:f7:72:
                    61:05:f8:a9:dd:2a:16:42:e5:60:0d:6d:c1:8b:35:
                    8f:e9:44:23:52:0b:c0:7f:f9:e4:9b:02:17:0d:03:
                    fc:43:5b:ac:06:b1:c8:6c:b1:78:ab:f5:37:45:59:
                    f3:b5:bd:ee:c8:c5:50:02:1e:1a:e7:50:f2:09:65:
                    23:47:af:d1:da:e2:96:34:5a:1e:ed:97:41:ba:87:
                    f3:5c:e0:17:ca:65:ac:59:31:69:eb:d7:3d:f9:99:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:25:C6:2F:48:14:E3:20:4E:FD:29:6C:AF:CF:B3:3E:CF:A8:83:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315c96-ceb9-3a3c-8310-30e6fadf5466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.70.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:1b:db:9c:6f:49:37:c8:1a:4f:a0:42:ba:be:9f:bb:4a:0f:
         a3:3b:c6:1d:0d:11:e2:b7:f8:f6:ce:c6:79:fa:95:25:a3:1a:
         8f:92:31:cc:c6:80:14:a2:72:15:d9:10:fa:24:06:d8:6d:d4:
         31:2c:95:b0:e7:fd:12:8a:86:ca:c3:0a:a3:c7:6e:c7:cb:1f:
         89:a0:a3:3d:82:c7:21:3b:b3:4a:e6:f8:0e:02:db:ce:ff:77:
         5e:de:59:43:3a:4c:23:c8:68:8f:b5:b4:b8:d4:1d:a9:04:c5:
         5b:f8:1b:56:f5:fb:e9:e2:65:e5:a4:c1:f2:5a:87:2a:74:ca:
         c7:31:db:01:c9:19:e5:8e:23:ff:fe:d9:94:be:a2:b7:08:31:
         e6:6b:90:90:d3:3d:e4:79:93:35:78:d3:39:c2:63:a3:19:01:
         76:3c:c5:d9:06:38:ae:ee:15:d2:85:e6:67:87:d3:0a:8e:c8:
         3f:35:93:e3:db:d2:59:10:18:5a:03:e4:25:9b:d7:51:fa:5e:
         f5:b4:0c:f4:b3:38:26:d8:6a:64:a4:73:62:d0:b1:81:da:c3:
         50:cd:29:45:51:27:02:35:49:be:b6:f7:91:13:a9:a2:83:a8:
         45:b9:c4:e5:db:06:ac:40:00:2b:56:9c:3a:ec:ed:fa:ef:f8:
         51:bc:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:49:13 2026 by rpki-client