Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ee7983e0-21b7-318a-a916-99282813c486.roa
File:                     ee7983e0-21b7-318a-a916-99282813c486.roa (raw, json)
Hash identifier:          s9WPRNyozisgZqcZKXfhL8zt/J0mlIfm9xgkzzGY4nU=
Subject key identifier:   0B:5A:CD:91:0C:F4:D3:A7:E3:10:40:F3:86:5D:C8:B4:64:76:F4:D8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E78FF8905BB423095E046E040
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ee7983e0-21b7-318a-a916-99282813c486.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     31898
IP address blocks:        134.70.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:89:05:bb:42:30:95:e0:46:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=6b6550bf-19d3-49de-aa07-966648df70a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:d5:11:ce:f6:79:b3:07:81:00:4a:ce:dd:
                    5a:4d:ba:37:db:e0:ca:b0:41:74:e4:92:4d:48:01:
                    8e:a2:8a:75:59:3b:27:e8:53:cd:b5:ca:35:0f:df:
                    2c:a4:4f:97:dd:1e:f0:3e:84:d6:1c:5f:43:16:29:
                    74:74:92:c0:df:62:cc:19:5b:4b:4c:02:c3:03:3c:
                    e9:72:ca:77:69:d6:6d:ec:59:d7:79:46:7c:09:bf:
                    b0:73:6a:3e:a9:83:2a:ae:4b:ef:5a:ab:0f:5c:e1:
                    2d:55:87:71:63:b9:0a:cd:ba:a8:e8:f2:f5:73:e3:
                    9b:6f:53:11:c1:3c:22:e8:5a:06:f7:40:e4:f2:25:
                    3e:35:82:9f:08:8b:62:93:c2:0f:7b:26:98:4e:63:
                    ed:20:59:f2:12:08:e1:51:71:74:c2:5e:9f:a4:9c:
                    69:ce:30:15:d7:ff:0f:f3:85:c2:d4:41:66:cb:e1:
                    35:15:b4:53:13:2a:4b:b3:23:0a:de:45:f3:6b:23:
                    f5:f0:27:90:4d:fc:3f:b6:53:1c:f9:25:fc:c2:40:
                    db:fb:28:0f:d5:9a:12:85:ab:02:a0:7b:32:be:37:
                    85:9c:3a:28:9b:92:85:e0:03:15:67:45:9b:16:e0:
                    be:40:4c:fd:d9:48:80:14:e8:17:c9:c8:0b:ec:0d:
                    54:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5A:CD:91:0C:F4:D3:A7:E3:10:40:F3:86:5D:C8:B4:64:76:F4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ee7983e0-21b7-318a-a916-99282813c486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:21:3c:61:7c:87:fa:df:91:86:2d:15:1d:58:13:63:fa:23:
         e5:56:c7:2b:df:38:1b:1e:15:e5:11:66:ce:4d:0a:03:36:33:
         2d:ad:fd:a2:57:6c:f2:7e:c4:b1:24:92:0c:4c:7f:ea:70:9a:
         ab:70:30:60:4b:ed:b8:0a:f0:12:37:17:c8:d6:94:ed:49:29:
         bc:9e:c6:7e:35:a4:b5:0c:f4:77:92:b4:69:c1:4f:d4:a7:11:
         a3:98:29:b8:a8:fb:2b:37:e0:2e:e8:97:a2:f6:c6:dd:eb:75:
         c0:67:1d:6f:95:45:fb:12:e7:24:44:ae:11:0a:30:83:08:0c:
         e9:98:ac:20:07:2c:b7:21:48:49:2d:6c:19:49:37:04:62:e3:
         4c:08:68:4d:8c:6f:f1:60:51:65:bf:73:eb:89:04:05:25:d9:
         7d:6f:0b:3e:4e:39:b1:d1:79:3b:d9:42:42:51:4e:21:42:57:
         3f:4d:10:33:4a:a5:fb:1d:c3:9a:86:16:d9:a6:5f:2f:c2:c0:
         b6:d8:cd:74:aa:0c:b5:c3:76:52:cf:79:ba:83:9c:97:d9:83:
         f0:c7:fa:76:1a:8b:b4:d8:1b:6a:52:dc:b5:96:e8:42:24:ca:
         84:f7:4d:03:79:de:96:a0:23:b3:46:40:32:6b:8d:7a:32:35:
         b9:44:2b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:51:29 2026 by rpki-client