Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa3a4ad3-66f3-3a26-9fd0-a9f490912204.roa
File:                     fa3a4ad3-66f3-3a26-9fd0-a9f490912204.roa (raw, json)
Hash identifier:          guKxOFHX/fVoJ/TgeDKlxBOPX8OxNfqweT55BkcpdSQ=
Subject key identifier:   F5:9F:2F:2D:5C:D2:50:F7:0F:09:A1:38:DB:E6:C5:2D:4A:98:49:1E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6B0A0D26142473D251EFD8E0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa3a4ad3-66f3-3a26-9fd0-a9f490912204.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        134.70.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:0d:26:14:24:73:d2:51:ef:d8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=7facc9a7-d4d2-4e7a-9d8b-7649e9cab14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cc:22:b9:bc:37:a3:67:eb:a6:1a:17:d7:a6:
                    7a:c1:54:57:3d:f5:58:58:8e:70:6b:a2:70:6e:42:
                    6f:33:d2:e4:b4:57:e7:a9:b7:af:7f:25:8c:f6:5b:
                    66:50:c1:72:dc:1b:76:30:8e:48:71:41:8b:cc:e8:
                    c5:2a:e0:98:5d:96:06:82:83:32:77:fd:79:fe:c7:
                    9f:76:7f:50:b8:c2:57:31:63:aa:d6:9e:c5:ab:d5:
                    6d:91:55:c7:a1:a5:f4:d4:83:70:65:08:bb:98:04:
                    7d:d5:7b:b8:bf:7f:e9:5a:39:24:47:6e:22:12:ee:
                    94:a3:43:f5:59:45:a0:2a:0e:67:a1:a2:f7:79:c3:
                    50:9e:09:f9:3e:44:59:ec:01:fe:cf:72:bc:ef:6e:
                    1b:f5:6b:1d:6d:68:21:78:25:90:ad:84:8a:38:6b:
                    6f:b5:ac:41:87:e3:92:3a:76:b9:51:12:ae:4c:56:
                    d5:e1:7b:81:29:4a:58:e4:93:7f:45:29:98:43:65:
                    3f:6a:6a:71:c3:b5:cf:bc:93:57:83:0d:d7:35:10:
                    dc:b9:d1:55:e1:43:8d:e1:08:0b:9c:88:b6:d9:90:
                    69:28:5e:c9:d4:e0:4a:a1:3f:64:f4:68:9e:23:ac:
                    00:32:48:e3:bd:bb:ee:06:5d:46:b5:66:27:9b:1f:
                    d9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9F:2F:2D:5C:D2:50:F7:0F:09:A1:38:DB:E6:C5:2D:4A:98:49:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa3a4ad3-66f3-3a26-9fd0-a9f490912204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:71:22:4b:31:2a:5b:c2:1e:50:56:46:1b:14:97:ba:50:ec:
         45:57:67:8e:19:51:4a:5d:7e:c7:b5:ce:93:44:ad:70:31:db:
         c9:00:88:7e:e9:80:66:5a:02:ab:ce:97:4a:f4:f9:f3:94:ea:
         43:14:1d:bd:ac:f0:9c:bf:34:82:3d:39:01:15:40:e0:26:00:
         bc:4c:98:66:ff:83:38:15:41:9d:59:0a:e4:a3:85:af:d5:d5:
         b8:b3:94:44:c4:63:07:9b:54:2c:a4:26:76:fb:fb:fa:b1:13:
         99:fa:e8:59:ae:44:8a:cc:09:af:92:9a:00:18:45:35:1e:e4:
         9f:2f:02:62:61:ba:a7:75:a8:23:91:db:86:10:02:70:be:21:
         b7:7c:b1:fc:43:56:73:2b:3d:e7:7e:5a:4f:7a:e3:59:46:f7:
         9b:95:13:84:1f:4c:d1:0f:31:b5:bd:0d:1f:2a:54:7e:39:f6:
         c9:62:b9:88:41:52:29:a2:ca:08:cd:2d:e3:00:10:05:ab:f1:
         0d:75:71:d6:a2:c4:88:81:91:51:4f:5e:4f:01:5a:64:72:53:
         a1:db:8d:ee:af:09:f8:c2:04:12:82:1f:d6:a8:e6:f7:62:a5:
         b8:4b:e2:62:59:bf:6e:ba:42:0d:88:19:ad:46:27:8f:40:e5:
         3f:91:e2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:49:07 2026 by rpki-client