Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0dfcb1e-ba9f-3e7b-9f92-4ed1127986e9.roa
File:                     f0dfcb1e-ba9f-3e7b-9f92-4ed1127986e9.roa (raw, json)
Hash identifier:          MWcDQeMH78PKpyT1z2BVJQksX4nP5DITOwjjojdFsQQ=
Subject key identifier:   38:17:74:B5:60:2B:D5:A2:EC:28:1D:20:05:72:11:E4:F1:75:CA:F3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE6FD09BADA38414F4F760440
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0dfcb1e-ba9f-3e7b-9f92-4ed1127986e9.roa
Signing time:             Mon 18 Aug 2025 23:26:31 +0000
ROA not before:           Mon 18 Aug 2025 23:26:31 +0000
ROA not after:            Mon 17 Nov 2025 00:26:31 +0000
asID:                     31898
IP address blocks:        134.70.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:fd:09:ba:da:38:41:4f:4f:76:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 23:26:31 2025 GMT
            Not After : Nov 17 00:26:31 2025 GMT
        Subject: CN=c745c5d8-3cd3-4731-a8de-478c9e23d006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d1:53:93:2f:d0:48:ca:78:f4:50:85:03:1a:
                    ce:03:73:94:f8:88:eb:ab:9e:61:b9:ef:2e:e0:66:
                    72:44:99:ee:ca:a3:66:a4:39:7e:10:c9:33:a7:ee:
                    27:1b:79:69:4b:1d:48:83:09:36:46:88:03:10:d0:
                    1d:ef:e2:9d:78:83:4e:1d:e4:34:02:de:78:4f:f6:
                    5c:f6:a8:52:c5:08:84:00:4e:ce:fb:d1:25:ba:fc:
                    08:22:37:c5:d0:f0:49:41:45:eb:f2:e8:58:e5:cd:
                    72:a3:d3:35:ef:4f:e4:0b:c4:3f:c6:22:b4:46:e3:
                    f0:00:87:28:4a:f4:09:a9:60:b2:eb:01:39:89:df:
                    c1:57:42:91:a7:69:e6:fb:e2:a2:cf:83:c6:18:61:
                    4d:ba:c9:da:37:c0:b5:c4:40:ec:0a:35:d5:2e:5c:
                    dc:43:64:ed:80:8c:a8:11:75:54:68:8a:5f:29:b1:
                    49:18:40:a1:98:29:9e:5f:4b:7b:23:31:18:e6:ba:
                    49:cd:37:42:00:ec:8f:5d:fc:12:e0:41:46:b0:b2:
                    e3:8a:58:81:18:2d:9d:da:7c:aa:78:b0:d7:c2:38:
                    8b:15:5f:0c:13:42:77:c0:e4:ad:f8:af:bb:fb:5a:
                    53:50:e9:96:5a:0f:55:cd:7f:a7:b4:28:f4:db:52:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:17:74:B5:60:2B:D5:A2:EC:28:1D:20:05:72:11:E4:F1:75:CA:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0dfcb1e-ba9f-3e7b-9f92-4ed1127986e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:90:7d:c1:75:42:9e:af:2e:8d:dc:b2:c9:06:db:d1:d8:3e:
         ab:9c:41:af:54:18:ec:19:41:0e:67:d2:86:f3:d8:b6:51:b7:
         66:ac:04:04:a9:f9:c6:b2:29:f2:6d:6a:9f:17:23:9d:76:b3:
         72:30:1d:19:3e:3c:88:1e:01:79:38:d6:fe:56:1b:e2:7d:bb:
         66:8b:30:69:2a:46:b8:c4:a7:79:fd:10:ca:98:13:d9:9a:f1:
         01:ce:8e:05:f5:7a:59:f3:e4:69:ea:3f:5c:b0:a2:e5:e7:e9:
         83:8c:7b:77:b2:40:a4:fc:66:e5:39:2b:49:ce:ed:39:f3:b4:
         2a:08:91:ec:75:a9:8a:63:f5:7b:9b:e2:82:7c:29:e6:2c:90:
         ba:ad:c4:f6:00:52:5f:cd:69:47:52:f5:94:30:86:72:25:82:
         85:04:b9:66:d9:1b:6f:11:fe:54:ea:33:04:39:4a:72:ee:32:
         cf:59:78:28:1f:d7:33:cf:fe:fe:ec:4d:cf:e9:25:19:3e:9a:
         ca:d5:7f:93:5a:7d:fc:ae:c8:68:5b:a7:fa:1d:27:28:c9:c8:
         d1:79:4e:ad:db:18:0f:c2:e4:d0:fb:be:b2:be:b0:a0:92:16:
         4c:f3:f7:14:3f:9a:a5:10:86:ae:06:b8:80:e5:46:12:80:64:
         20:48:cd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:23:21 2025 by rpki-client