Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/fa79e04d-bc24-3f54-beb7-a48c9356cd58.roa
File:                     fa79e04d-bc24-3f54-beb7-a48c9356cd58.roa (raw, json)
Hash identifier:          6KjIQUV4NdGnqOYNuMXsOl99FigRL9mG9SRpJJuhcsM=
Subject key identifier:   35:69:D2:35:49:E9:BE:6E:E3:16:A1:E3:00:80:8A:9E:BC:C0:2F:10
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584E736A3BF4503CF0D0547C3A00
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/fa79e04d-bc24-3f54-beb7-a48c9356cd58.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     198949
IP address blocks:        156.70.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:3b:f4:50:3c:f0:d0:54:7c:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=84c0181c-d33f-4f94-b8c9-83c41d9a6c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4b:4f:25:8b:e1:88:4f:eb:51:1c:dd:22:1e:
                    02:bd:8c:c5:22:6c:b2:ad:92:f1:93:f8:a3:f8:1b:
                    14:5f:35:01:b1:5e:d5:f9:f3:26:21:43:51:14:0d:
                    65:43:08:a6:ac:85:f0:0a:bc:1c:14:28:62:d4:38:
                    ce:74:9d:23:f4:be:cf:0d:e5:33:14:46:2f:83:83:
                    92:37:60:28:f1:78:8c:be:0d:76:f7:ba:50:df:dc:
                    79:1a:7a:2a:9e:0d:89:b8:0b:43:81:b4:fe:be:1f:
                    8b:24:15:ac:02:2b:1f:b7:76:06:06:bf:f8:c3:05:
                    28:87:6e:6f:90:74:a6:b8:15:04:f7:e3:a9:4e:85:
                    19:ce:da:05:f2:21:a0:27:d5:30:08:12:f0:f3:16:
                    b7:52:4a:bf:12:17:2a:53:69:61:b8:4e:72:44:da:
                    3d:24:4f:20:6b:97:91:92:b8:a2:81:e2:73:37:2b:
                    8c:07:c6:9c:d7:81:bd:5f:77:04:88:3e:dd:6f:64:
                    71:81:3d:6c:eb:13:86:ce:1f:fd:5b:e8:99:e8:f7:
                    ef:b5:84:b1:94:c8:cb:7d:9c:92:1f:70:da:18:2e:
                    b8:f3:c2:63:00:b6:ec:92:ac:44:f3:06:be:52:62:
                    6d:b0:83:3d:4f:ab:64:21:46:cc:d9:10:1d:0b:35:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:69:D2:35:49:E9:BE:6E:E3:16:A1:E3:00:80:8A:9E:BC:C0:2F:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/fa79e04d-bc24-3f54-beb7-a48c9356cd58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.70.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ff:af:17:16:a9:60:ad:d7:f7:ae:73:36:c4:42:03:41:98:
         23:0d:3d:39:58:81:b3:93:f9:fd:d7:13:ae:fb:53:6a:fc:b0:
         09:40:a5:f6:a1:c7:58:30:1b:b3:f1:e1:6e:26:d4:50:c8:21:
         52:eb:63:dc:8b:28:78:d9:5a:39:a5:dd:cf:4d:37:c3:ea:6d:
         ed:a2:bf:67:6e:e1:64:3c:d8:71:af:30:04:e9:fb:2b:24:d7:
         76:d7:50:b1:75:f6:e6:66:36:ea:f8:03:d6:68:7e:35:f0:ae:
         26:41:a9:f4:c5:7f:d4:0b:c2:be:d2:93:13:70:95:7a:27:a7:
         b6:09:fa:6c:05:ec:f8:bc:e0:57:8f:37:39:64:3e:9b:30:5a:
         ab:25:1f:f0:3b:53:fc:8d:c2:a8:4b:5b:7d:32:c5:b2:65:b8:
         5f:c2:ec:d5:4e:aa:00:da:47:79:ac:b6:00:13:e2:8a:a1:47:
         2b:ca:26:99:49:41:3f:c3:35:ab:b5:1f:2c:cc:15:09:b2:4f:
         5f:a3:c0:e8:a2:d4:50:28:6d:a9:b8:5e:61:24:26:10:b2:64:
         fb:07:4e:00:d8:24:48:e1:49:ab:f8:93:a4:ca:c5:85:43:c8:
         65:92:41:38:ab:f8:43:ef:ef:64:06:7f:15:62:12:24:44:3f:
         30:9e:3c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:28:19 2026 by rpki-client