Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/894eb4b7-ab90-3727-9167-a11cbd3ead38.roa
File:                     894eb4b7-ab90-3727-9167-a11cbd3ead38.roa (raw, json)
Hash identifier:          LerkzlguQQP2kR61XbvI1AOcLQeoC8PyepZVB/5FKXA=
Subject key identifier:   D5:8E:B0:68:4D:2B:55:FE:FB:A6:D1:0A:C0:7F:BD:8B:A0:CA:D5:9E
Certificate issuer:       /CN=5c24b227-71d8-4de3-9a17-e538fd673530
Certificate serial:       010D0C9F4328584DADAACBC90159B98AA651E300
Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/894eb4b7-ab90-3727-9167-a11cbd3ead38.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     46450
IP address blocks:        70.34.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:cb:c9:01:59:b9:8a:a6:51:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=fef87fb4-4da6-43d1-85ce-739867f2583a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:73:8d:e2:cf:a1:37:fb:05:9f:ff:98:49:d9:
                    d8:36:16:1a:38:ac:99:5c:5d:24:2e:d4:2c:6c:72:
                    61:f2:90:2f:e2:25:f9:95:a9:3a:63:18:e3:8e:3a:
                    56:66:eb:4b:5d:c4:35:11:c2:f4:56:3c:ad:3c:5d:
                    49:ba:28:84:53:65:0b:ce:b6:1a:95:bb:d8:4d:31:
                    ee:e2:76:02:68:89:8f:07:92:82:68:47:d2:38:60:
                    c9:2d:60:d2:14:0c:19:f9:2c:27:da:63:3d:d1:7a:
                    a3:38:c9:f1:58:c9:6b:99:d2:97:40:40:5e:99:f3:
                    70:2f:a6:94:11:89:09:87:c5:79:78:8d:26:23:8c:
                    db:0c:c8:b7:9a:bb:32:28:e1:76:ac:84:c1:36:95:
                    37:c6:ed:75:45:95:88:2d:61:f5:53:14:2d:88:23:
                    fb:de:90:75:6e:5d:86:4d:1a:8e:7d:56:e0:9b:d9:
                    f9:b0:75:78:5a:79:21:40:43:34:69:57:11:f2:10:
                    6c:ea:b0:28:bc:50:c4:57:9b:be:59:50:0a:ac:5a:
                    29:4f:a0:df:09:e7:66:8f:5e:25:11:dd:0f:7f:2f:
                    6d:c2:3e:b2:a4:2d:48:e1:d6:bf:6e:db:64:73:e3:
                    e5:e6:ce:9d:b1:2f:69:60:b2:10:5a:1a:fe:22:28:
                    2d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8E:B0:68:4D:2B:55:FE:FB:A6:D1:0A:C0:7F:BD:8B:A0:CA:D5:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/894eb4b7-ab90-3727-9167-a11cbd3ead38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl

            X509v3 Authority Key Identifier:
                keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.34.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5c:51:05:1b:b0:cf:ea:61:60:06:a9:34:93:11:d1:2b:c1:
         d7:38:7d:8c:29:d5:c5:8b:ff:ef:49:21:4c:03:e8:0b:38:47:
         b3:82:c2:3e:ba:1d:54:dc:58:db:ee:1f:b5:e9:e8:ea:eb:06:
         34:16:e3:ec:12:a0:42:cc:21:c6:6c:e5:49:4d:3e:dc:69:39:
         13:58:be:36:ed:9e:96:a5:16:82:c8:ed:43:4d:25:7a:d7:cf:
         51:6c:02:f2:4f:5d:c2:3b:25:cc:00:71:34:40:28:24:3f:f2:
         da:b6:3c:de:80:17:7e:42:d3:10:8f:6a:3c:84:2a:6e:9b:41:
         91:a9:71:e7:9f:a3:26:76:19:7d:35:e3:e1:20:91:d9:cc:61:
         f2:a2:ca:76:aa:0c:18:e4:b2:e1:1e:54:ab:32:89:71:13:a6:
         bf:0e:ff:03:af:69:d5:c9:8a:fe:49:e1:21:55:21:ba:39:f7:
         f8:24:c8:b6:1c:31:89:63:d3:56:04:b7:ea:92:5b:ba:13:20:
         21:39:41:20:65:65:cd:5b:1e:84:82:e9:b3:20:fc:78:93:e7:
         38:fc:80:59:11:7c:07:5e:bc:e9:b5:ab:d4:14:d3:0d:b8:ed:
         6f:7a:15:25:24:9e:17:2d:4f:05:a7:9c:c6:e4:af:0c:0b:de:
         30:78:f9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:54 2026 by rpki-client