Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/129596f2-d342-390e-83e7-2de9a0526aed.roa
File:                     129596f2-d342-390e-83e7-2de9a0526aed.roa (raw, json)
Hash identifier:          o3QaLNNNLHNqkzSAhuYWaNHiiCtHqwqYyxPzQQTFzgk=
Subject key identifier:   9A:D1:6B:FC:F0:B6:F8:1D:2D:70:68:37:41:D9:9B:09:F0:7A:93:42
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F11A15F3FF09F2F8F106108C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/129596f2-d342-390e-83e7-2de9a0526aed.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        134.70.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:5f:3f:f0:9f:2f:8f:10:61:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=e874fd20-bd7c-4b4c-8ad5-21018af22e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:03:10:cd:10:d1:f6:ed:f3:e8:83:51:0d:
                    68:ad:4d:f5:3b:59:ab:7d:54:e4:10:f0:ab:bf:3b:
                    83:a6:fc:bd:a5:8a:ee:c5:95:00:1f:e5:75:12:ac:
                    ed:87:3e:e7:ed:fe:2c:54:b4:03:65:c2:e3:c7:56:
                    4b:a9:f4:93:39:0a:54:52:ea:be:f5:28:75:1a:01:
                    47:75:51:df:9e:6b:17:36:c9:16:cf:a5:6e:ea:64:
                    79:18:60:25:cc:62:db:35:1d:1f:f7:89:ba:5a:01:
                    36:e7:99:b4:7e:84:09:d5:5f:8e:2a:ca:c4:d0:a3:
                    bc:0f:54:87:15:53:fc:bc:ca:a0:91:42:00:5e:d9:
                    a4:27:38:57:6b:cd:c2:a7:81:e2:8d:cc:46:ee:b4:
                    56:c0:13:c9:e3:75:e6:34:b8:c7:6d:b5:b6:32:92:
                    1b:28:f2:3c:d6:e2:f8:1d:bd:e6:f7:f8:2e:59:49:
                    a6:b2:f5:9d:e7:89:72:ad:e5:e6:eb:13:9d:72:0b:
                    a7:25:60:50:43:67:6a:53:47:4c:f1:2d:a0:00:55:
                    19:2c:bd:85:c2:c9:03:07:80:f8:a9:be:94:c3:1e:
                    1d:53:7b:18:06:12:70:df:d7:01:3a:ef:d2:2c:fe:
                    fd:70:2f:5a:94:1e:98:28:81:e5:a5:da:28:48:5f:
                    92:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D1:6B:FC:F0:B6:F8:1D:2D:70:68:37:41:D9:9B:09:F0:7A:93:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/129596f2-d342-390e-83e7-2de9a0526aed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c0:8c:91:ba:1c:ee:b1:93:e4:16:50:4d:8a:d1:18:6c:a5:
         10:8d:2d:76:28:80:f3:ae:b5:e1:a8:d0:f2:f6:fe:d1:2f:7d:
         94:80:ae:ae:1b:ff:86:80:6d:c3:6a:8e:03:b4:49:3a:f6:39:
         09:1b:5b:21:38:f3:7b:96:3e:06:cd:1e:9a:25:cb:5f:38:1e:
         77:4b:80:e8:bf:9d:42:bb:4a:ef:e5:05:bd:c2:60:ae:07:59:
         46:0e:15:bf:79:ae:70:dc:dd:6b:e6:4f:d2:84:cc:dc:5e:bc:
         f8:df:00:8d:a5:54:23:45:8b:14:52:a4:2f:27:fa:50:c1:d2:
         49:e9:19:a6:9f:3d:a3:0e:96:d4:f4:f2:6f:2a:6a:df:43:b3:
         40:16:41:cd:67:eb:d7:91:34:51:d7:c4:8a:db:65:99:83:51:
         bb:3b:b4:87:4e:32:76:fb:74:af:f5:e7:51:15:90:d0:ad:55:
         91:34:7b:08:2d:ab:69:fb:bf:96:1e:b2:53:58:ae:dc:e6:9a:
         be:8b:d8:67:b5:7c:c5:a6:13:4c:32:f3:75:ec:f3:2d:a9:ae:
         3b:0e:42:84:1b:6c:68:c4:6b:25:51:8c:14:6a:12:b2:bf:8e:
         f8:f2:e0:6e:d4:00:bd:3a:30:70:5c:b2:b0:41:d7:90:68:85:
         44:0f:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:05:01 2026 by rpki-client