Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fe2b1f63-1194-3d0d-94b4-8df099da6153.roa
File:                     fe2b1f63-1194-3d0d-94b4-8df099da6153.roa (raw, json)
Hash identifier:          6s3jrq5qgeOsugOtyIpqG5DSEpV07PWvTAj5yvJOSVE=
Subject key identifier:   BC:B4:B3:B5:6C:FA:68:FF:9C:F0:A8:5F:31:DD:34:B5:D4:E4:90:13
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584E885A4928AB2CC7A6B491D1C0
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fe2b1f63-1194-3d0d-94b4-8df099da6153.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     3695
IP address blocks:        70.36.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:49:28:ab:2c:c7:a6:b4:91:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=2a2ce93f-9c65-4d3b-89b7-b113e1d925e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:44:25:04:e2:c6:c3:6a:1e:46:dc:fd:f1:
                    ac:5d:35:7e:73:57:4a:ec:bf:09:36:f8:71:a6:81:
                    b8:de:a9:64:0c:01:59:6f:c4:28:45:94:02:ca:2d:
                    ef:6b:13:14:cb:96:e5:27:1e:2c:cb:24:e7:d5:82:
                    fe:0d:2f:50:77:41:d0:2e:13:c1:e8:41:a0:37:c8:
                    91:c0:f2:bd:35:03:a6:be:ae:85:cd:15:62:92:88:
                    55:9f:ed:e3:1e:89:b3:7a:a0:ba:42:40:18:5c:b6:
                    b1:a8:9d:e6:69:a2:3a:82:5f:7a:0a:62:a1:3a:0c:
                    8f:f1:b1:76:04:16:de:4c:3f:7f:4a:d8:7b:5d:af:
                    98:57:99:07:ef:3b:99:1a:d5:ec:2b:1e:76:4b:a5:
                    a3:9e:39:e3:b7:d7:49:16:36:dd:7d:4e:8b:ca:d7:
                    b1:ae:db:52:ab:e6:83:96:31:17:97:db:0d:54:42:
                    e6:6b:8c:25:55:3b:48:d6:a4:82:75:b1:1d:73:b1:
                    2e:60:83:f6:ac:7c:57:92:bd:ca:63:a9:b9:d4:a3:
                    7b:29:a0:66:ef:b3:eb:94:37:3d:a9:fe:0b:ba:3f:
                    72:88:2d:d6:88:aa:b0:42:ae:2e:0c:94:25:de:47:
                    bc:ef:04:a5:01:cb:da:61:1e:d8:3d:ff:bd:ea:43:
                    f1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B4:B3:B5:6C:FA:68:FF:9C:F0:A8:5F:31:DD:34:B5:D4:E4:90:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fe2b1f63-1194-3d0d-94b4-8df099da6153.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:11:5c:1e:41:80:3d:c1:64:90:c6:93:96:fe:3c:ba:9b:2e:
         26:05:25:3e:a8:d4:0c:6e:6d:c4:bd:e4:bd:d7:e9:e3:3a:77:
         5f:27:96:84:da:8e:1f:f8:98:81:66:50:db:44:2d:bf:44:67:
         9a:96:2e:76:46:a2:fc:45:f5:5b:f5:c9:36:9d:26:48:75:50:
         e8:f1:14:33:15:a2:2b:bf:a0:f2:6b:53:14:df:fc:23:3f:7b:
         72:97:a8:71:fe:6b:22:ea:a0:cb:0f:c8:f7:de:9c:35:da:9a:
         9c:bc:ec:e4:d5:58:e6:10:6f:f6:a1:08:9d:19:f5:a5:68:0c:
         cc:4c:3a:f1:ba:e0:ea:6d:c6:cd:e8:e6:f0:e8:f8:f7:01:6e:
         b1:61:cb:8f:81:c3:d3:f8:96:d8:08:d9:db:84:c5:cc:05:f7:
         f8:81:fe:69:9e:1e:92:95:2a:27:e7:ae:56:16:c2:76:e6:3c:
         92:da:19:b8:54:9e:6f:4b:49:eb:0c:a3:82:ab:b2:a8:07:8b:
         e7:4d:1c:04:2c:5a:3e:96:87:77:a6:65:01:a0:b7:e2:de:e5:
         8f:4c:6a:c8:76:47:15:80:6f:2a:e9:54:c1:f3:e5:b6:77:8a:
         6b:68:7d:c2:8c:49:d5:ea:a3:8c:97:15:cd:cb:d1:46:55:e9:
         11:c0:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:26 2026 by rpki-client