Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/394b5293-c3ea-3e5f-8e02-4365d9bccd77.roa
File:                     394b5293-c3ea-3e5f-8e02-4365d9bccd77.roa (raw, json)
Hash identifier:          t5k6jNE5L25+ZXZwwV1gvVG5G5Qc+9x5ysmWg2Opnm0=
Subject key identifier:   C9:38:6E:56:5D:5A:5E:48:51:09:AA:76:41:8F:4D:B3:10:E1:6D:EE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF550ADDEC51B383C58B300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/394b5293-c3ea-3e5f-8e02-4365d9bccd77.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        134.70.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:50:ad:de:c5:1b:38:3c:58:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=06c78286-f3ae-42ca-8629-078f27a550cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:87:30:f2:bc:91:c0:a7:3a:09:d0:b9:dd:
                    13:fe:54:47:08:07:75:3f:e3:d5:5d:2b:76:59:9b:
                    6e:78:3c:79:50:fa:ce:a4:47:da:9a:5b:d1:65:ae:
                    a6:2c:86:fb:b6:1c:30:e2:c8:3c:15:eb:8e:d3:5e:
                    47:93:b3:f5:19:ab:e7:ad:ef:13:e1:61:10:98:e5:
                    90:dc:90:fb:77:91:92:8d:26:ec:b3:2e:8c:fa:5e:
                    64:f9:a3:f5:7f:a5:53:6e:bc:b1:9b:8a:4e:bc:08:
                    c3:8d:fd:e6:f2:5e:65:98:54:ab:c5:3a:89:df:a8:
                    03:de:a3:67:24:41:6d:01:c7:7b:dc:d5:d6:ce:a1:
                    1b:0a:5a:23:b1:1e:06:04:d3:6b:9a:47:ae:9c:9d:
                    e3:d4:47:8f:d8:dc:8e:dc:82:8f:26:40:53:18:16:
                    75:cc:95:32:87:01:94:81:52:82:71:18:42:61:3b:
                    19:f4:d6:f9:0b:8a:65:0e:2d:1c:3e:6d:4b:32:36:
                    2e:fc:cb:9e:c5:5b:15:3f:05:46:70:e5:a2:4e:2e:
                    7e:39:26:fe:bc:7f:be:0a:2e:57:58:1f:b8:d3:94:
                    03:a9:bb:66:a2:45:f6:8e:0a:35:d6:6d:ae:e7:3a:
                    43:23:94:b1:aa:4c:53:54:b1:79:88:62:0e:d7:8c:
                    fa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:38:6E:56:5D:5A:5E:48:51:09:AA:76:41:8F:4D:B3:10:E1:6D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/394b5293-c3ea-3e5f-8e02-4365d9bccd77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a1:89:be:29:83:5d:d9:6b:24:ca:a2:6a:fe:16:e7:18:7f:
         fc:3b:de:2d:5a:00:f1:3b:2d:4a:e4:c3:a0:9a:0d:4f:00:d4:
         9e:ab:8c:1c:83:d0:4e:3b:07:38:b1:9d:1b:76:e8:d1:13:09:
         83:8d:c6:33:7b:9e:74:4c:97:c5:b5:87:a0:b7:f7:47:f8:c2:
         63:6e:a1:80:ea:d7:77:ed:52:10:ea:89:3d:d0:59:a5:45:db:
         a3:c4:18:57:bb:d2:b8:f7:7f:76:c5:68:21:a7:d5:8b:a4:45:
         57:54:1a:70:22:03:80:00:73:8d:8a:92:25:a2:85:c7:17:f0:
         1c:b1:45:38:64:22:a9:7f:1c:da:6f:df:3e:d8:23:a4:75:36:
         73:f4:1a:5b:2c:eb:14:b9:3f:ec:9a:81:54:4c:a5:6d:92:fa:
         87:21:bd:0c:98:c7:6d:c5:cf:79:ff:b1:fc:98:15:5f:4d:b2:
         f4:4d:0f:34:15:e6:18:ba:e0:bf:00:c6:da:c2:a0:0a:0f:34:
         a5:13:d9:69:e4:ba:3f:ff:ff:34:52:cf:35:64:f5:71:a2:14:
         10:ec:2f:cd:10:38:8a:f5:68:43:13:64:95:38:8f:28:00:0a:
         a6:5b:83:45:e3:56:a9:c0:50:3d:3e:ea:4f:f1:dc:ce:8e:9c:
         71:82:3e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:37 2026 by rpki-client