Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa2e43c5-b30a-36f1-b150-81c628a59735.roa
File:                     fa2e43c5-b30a-36f1-b150-81c628a59735.roa (raw, json)
Hash identifier:          exbCbtVxERnJgk04xYMZXTR1tvNIMX7zY2gy5DYe67Y=
Subject key identifier:   7D:E4:14:DF:46:7C:B0:AD:8F:F3:08:66:03:67:35:F6:40:E9:1B:A7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CA5F745DFDE41C630BD436F40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa2e43c5-b30a-36f1-b150-81c628a59735.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        134.70.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:45:df:de:41:c6:30:bd:43:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=4556d36b-b5bb-428b-b7f4-d0bf9a9ed289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a3:7a:cb:b3:77:5d:2f:d5:a0:35:10:e4:db:
                    6d:d1:95:eb:96:e1:10:e4:8e:ee:d1:c6:3e:69:0c:
                    ad:1a:74:9a:1e:d0:47:6b:c6:81:5f:a4:9b:86:be:
                    d5:24:3c:22:ab:3a:b7:24:ad:ca:c2:ca:4f:79:37:
                    0b:30:e4:fd:dc:e3:5d:20:fc:d7:00:e2:99:77:af:
                    86:f8:95:ce:83:bb:84:4f:3d:8f:ce:83:b9:d4:b0:
                    8b:d8:80:a5:30:2c:5a:db:3f:3c:ee:de:93:ed:a2:
                    a4:59:f2:9c:eb:07:c3:2a:36:a0:da:97:e4:09:75:
                    0e:19:6a:13:28:b4:30:e8:39:d6:94:93:11:40:de:
                    c9:28:18:8b:3e:80:67:a4:54:47:36:d9:34:19:a8:
                    41:5e:f8:d2:93:89:6c:3c:84:a5:7d:e7:80:87:a2:
                    04:35:94:cc:8d:5f:8a:04:1b:13:f2:9b:22:11:0a:
                    ca:18:91:f7:25:98:55:3e:20:25:61:cf:6b:21:67:
                    53:98:60:cf:a1:bc:a8:dc:a2:91:63:81:a2:e0:46:
                    62:52:e7:8a:b0:41:79:34:8d:59:cb:8c:46:92:14:
                    90:06:c6:f3:13:2f:7d:8f:54:8a:df:08:c4:80:bc:
                    28:a4:ba:c8:f1:a1:a1:fa:c7:5f:c6:ac:58:8b:fa:
                    3b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E4:14:DF:46:7C:B0:AD:8F:F3:08:66:03:67:35:F6:40:E9:1B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa2e43c5-b30a-36f1-b150-81c628a59735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a8:94:d6:66:a4:b5:8f:08:a0:8b:8a:07:75:cf:21:cb:59:
         0a:41:21:43:aa:6e:6e:3e:b6:d4:18:b6:a1:71:92:3f:f8:b4:
         aa:bc:d2:a6:a5:e4:73:4a:b1:f4:cf:77:97:92:d3:39:2d:21:
         58:6d:4a:9c:dd:da:b3:fc:f8:f9:82:cb:49:23:2f:ac:ce:3f:
         02:e4:32:df:d7:a6:e3:e6:7f:7d:46:9f:80:56:78:85:4e:75:
         cf:a7:4f:3a:05:af:c3:38:73:7d:8b:ca:74:87:14:39:c8:54:
         81:98:15:3e:13:cc:af:ab:c6:0b:a4:4a:04:1f:7b:6d:9c:dd:
         ec:5c:2b:b8:33:07:81:00:33:d3:8a:34:c5:d7:f0:b3:a1:f3:
         4e:99:47:f5:36:7c:55:a1:8d:94:ad:1f:ec:c4:9a:fd:a5:cc:
         9b:b8:89:81:04:8a:86:8b:e2:40:66:fb:12:09:07:5b:91:e2:
         0b:81:79:a3:ba:b0:f6:07:92:8a:02:de:2f:50:d9:f1:ef:11:
         51:36:a5:9e:f7:e7:f4:7f:b9:d4:ee:86:d9:cf:28:fb:0a:64:
         ff:0b:ca:d1:8d:3d:7c:15:b9:e6:9b:34:15:d9:36:85:51:d1:
         3f:8e:ba:da:da:64:35:3d:5d:92:00:5c:3c:30:7f:c4:e8:d5:
         c6:c2:d0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:20 2026 by rpki-client