Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f7e48bfb-cf28-31f3-a9cf-51ae54022d47.roa
File:                     f7e48bfb-cf28-31f3-a9cf-51ae54022d47.roa (raw, json)
Hash identifier:          yoCQpr+R4WnRNfk1C3iDYVQK/m1L5lzNX3op0Lqt34Y=
Subject key identifier:   3B:8A:02:D7:27:75:B9:3B:35:82:52:97:B9:D4:E3:CA:FE:34:A6:3A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CACF1B753D30F2A1F1D73FB80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f7e48bfb-cf28-31f3-a9cf-51ae54022d47.roa
Signing time:             Wed 28 Jan 2026 14:00:36 +0000
ROA not before:           Wed 28 Jan 2026 14:00:36 +0000
ROA not after:            Tue 28 Apr 2026 13:00:36 +0000
asID:                     31898
IP address blocks:        134.70.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ac:f1:b7:53:d3:0f:2a:1f:1d:73:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 28 14:00:36 2026 GMT
            Not After : Apr 28 13:00:36 2026 GMT
        Subject: CN=84e0386c-359b-4360-b7dd-97baa5187e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d4:fa:30:33:88:9f:5e:42:e3:7c:a9:6b:d6:
                    12:67:28:1e:e9:e4:11:48:01:7d:fa:ec:f3:56:6b:
                    88:cf:2b:b4:b3:34:ec:aa:b6:c6:e8:47:09:a2:7f:
                    b2:fd:e0:b3:97:2a:7c:0b:e2:39:70:51:c7:0f:67:
                    59:82:64:19:40:0d:62:bf:13:ee:f4:fa:a6:24:82:
                    e3:e3:a4:91:54:08:5e:50:39:c5:b4:af:27:93:de:
                    ef:f3:d4:7c:4f:6c:bb:da:9f:43:62:ac:85:1c:2b:
                    3b:bf:94:6e:2d:21:37:55:45:6d:b0:b6:fa:64:78:
                    2d:ba:37:13:47:2b:2b:d6:47:fa:f5:dd:78:f0:61:
                    d5:07:44:1c:b6:c6:fe:00:87:ef:23:37:7c:8f:cf:
                    c4:da:1b:50:81:92:b3:67:5c:ac:b5:88:d5:2f:ae:
                    1a:75:c6:b7:81:de:8b:a0:ff:ea:5a:e5:e4:86:f7:
                    8c:5f:7e:a4:02:11:a0:b5:a5:04:8d:79:3d:13:df:
                    dc:e3:07:44:c3:8c:2e:af:c3:d6:a8:98:61:b3:d6:
                    47:ae:b2:52:bb:b4:5d:f8:91:fe:1f:28:2e:ec:61:
                    1c:69:f4:16:10:5b:a8:34:53:a4:5d:d3:09:6b:a2:
                    38:2d:8b:b0:92:57:ad:3e:a9:ab:fe:30:4a:90:68:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8A:02:D7:27:75:B9:3B:35:82:52:97:B9:D4:E3:CA:FE:34:A6:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f7e48bfb-cf28-31f3-a9cf-51ae54022d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:43:43:6c:7d:ea:7a:9b:35:b8:6b:da:57:ec:cd:8d:08:59:
         d7:2e:ee:60:22:b1:6e:bb:57:85:25:99:0e:48:8d:66:e2:32:
         7e:df:d0:35:61:31:06:98:d5:6a:c5:62:fd:21:74:05:2d:c3:
         65:9e:38:3a:22:31:46:8a:ca:d7:2d:bb:ec:3d:58:cf:b7:97:
         50:d2:f8:4e:e9:a8:7e:3f:d5:02:e0:90:07:99:2d:d8:ac:69:
         db:b3:2d:45:ed:32:4f:cb:58:71:d7:a1:78:dc:38:4c:c0:82:
         73:03:f3:6e:3c:57:26:63:90:8e:c6:0a:53:de:ea:7b:0c:2d:
         d1:bb:10:6c:5c:6d:1c:c6:39:9a:dd:98:ec:48:3b:f4:87:84:
         4b:6e:32:83:72:9a:cb:5a:cc:6c:0c:d3:ff:a9:4f:01:28:03:
         d8:72:a0:dc:13:f5:91:67:02:46:c3:85:68:ec:f8:ae:cb:5b:
         de:e7:b6:8a:77:66:ef:7a:5f:04:a0:f3:4d:84:56:ff:aa:2c:
         52:52:a1:f2:0e:aa:38:c8:ea:a2:00:00:b1:3a:e1:89:7f:bb:
         a9:09:ba:a2:1c:f5:1e:19:6a:6b:0d:3b:4c:ed:95:4f:46:21:
         42:09:89:11:1b:b4:0c:10:b8:39:ea:8b:b6:19:ea:4f:1f:2c:
         a6:00:a3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:43 2026 by rpki-client