Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5247b006-a9b9-37ec-a914-4970aca4da43.roa
File:                     5247b006-a9b9-37ec-a914-4970aca4da43.roa (raw, json)
Hash identifier:          t5UYrjXE5Wk7Ccxi6txQ36yoclxl4tMqzJpq+tMp+zw=
Subject key identifier:   1C:E5:9B:8A:37:45:C0:C5:5C:5B:58:67:B3:95:98:87:57:8A:CD:14
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D905A90F4EAAF8334C50C36C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5247b006-a9b9-37ec-a914-4970aca4da43.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        134.70.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:90:f4:ea:af:83:34:c5:0c:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=c49785a9-ddc9-4e7b-85c7-a6dd43f27656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d1:17:7a:5b:a0:61:91:37:c1:c2:9e:cf:3b:
                    9d:af:e3:e4:07:d2:82:20:18:09:80:36:3f:1c:15:
                    f3:6d:6f:f8:6d:1d:f6:3a:bf:61:b4:88:cf:52:57:
                    a6:2b:ad:2d:c6:c9:ca:0e:0a:f7:99:08:01:b5:d3:
                    0c:c8:28:fa:8f:32:a9:5d:6c:b8:df:08:9f:97:1a:
                    f2:7b:c5:1e:73:60:e0:90:c9:39:27:b9:0c:01:92:
                    7d:52:ad:5c:01:3c:43:ff:a9:e0:b3:88:4c:85:70:
                    60:31:88:cd:bb:ab:3a:ef:40:75:6c:47:d8:36:b0:
                    84:86:00:a3:b5:ae:ad:8b:32:df:b0:04:ef:44:47:
                    f0:3f:c7:e3:c5:d2:90:9d:fd:51:13:2a:0a:59:b9:
                    33:e3:35:78:9c:6b:03:7f:7e:69:7d:ab:3d:ee:da:
                    03:44:eb:4a:9e:d4:cc:65:2a:db:43:d6:4c:dc:df:
                    2e:31:67:de:95:05:80:04:57:9d:dc:38:cc:9a:13:
                    79:85:ec:2d:0d:74:d6:ad:26:b4:8d:29:08:8c:62:
                    58:83:19:49:68:d2:7b:61:13:f6:07:ea:1a:e1:dd:
                    71:ca:72:90:39:ad:5a:85:09:ca:fe:c1:fd:3c:16:
                    e2:3a:22:51:d7:51:54:e3:9f:43:de:43:e2:4d:dd:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E5:9B:8A:37:45:C0:C5:5C:5B:58:67:B3:95:98:87:57:8A:CD:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5247b006-a9b9-37ec-a914-4970aca4da43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:79:a2:df:51:a5:89:78:53:db:88:58:4e:c5:7a:d8:57:6e:
         0c:49:3a:7f:f9:ea:6e:f1:68:9a:5c:8c:54:22:03:be:6b:29:
         e3:ed:de:4a:36:03:68:5d:f1:cc:e9:0c:06:45:8b:ca:cc:5f:
         24:3d:c1:a7:2c:21:3e:30:52:07:c4:f5:be:21:d4:ca:2c:35:
         1b:68:22:11:2e:e3:51:5e:1c:82:6f:6f:4b:64:3c:69:bc:af:
         ab:44:1c:42:8c:72:fc:51:e2:98:b8:9f:49:7b:ea:5c:dd:f5:
         bb:08:54:a2:e2:68:33:b4:c0:22:0c:d2:bb:b8:9c:79:e6:d5:
         79:15:a4:bd:08:8c:70:d4:73:47:66:0e:28:fb:06:d2:73:3d:
         f0:bd:56:ac:f1:80:c9:a5:bf:0a:90:69:c0:a1:ba:4a:9c:03:
         00:64:63:e5:53:0d:25:cf:ec:c8:4a:b7:96:85:d2:6b:35:83:
         e0:06:d9:35:b2:3e:f9:5b:4e:70:76:b9:e6:a5:e6:9c:db:b8:
         34:e4:6f:bb:4a:b5:bc:f1:2e:12:cc:60:87:5d:d7:43:cd:24:
         7f:29:b4:70:26:5b:e8:93:0f:41:80:31:ac:eb:d0:4d:b0:0d:
         96:4e:1b:e6:3b:05:59:ce:22:8e:ea:21:03:31:f3:53:85:a8:
         05:22:fb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:31:11 2026 by rpki-client