Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/59f7e654-bc16-33fe-b64c-e6181e6043bf.roa
File:                     59f7e654-bc16-33fe-b64c-e6181e6043bf.roa (raw, json)
Hash identifier:          VvuI0IXkB1VJ+RkeUzNJjtytTRN5DxVZ75IU3c30j7o=
Subject key identifier:   CE:22:27:45:F4:C9:43:00:56:B9:C0:3B:61:44:54:38:EA:B7:25:F4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF5692663E98A661EEA7780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/59f7e654-bc16-33fe-b64c-e6181e6043bf.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        134.70.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:69:26:63:e9:8a:66:1e:ea:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=2971bd4d-c6b9-44fe-8806-85c0690fbc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:e3:08:df:89:02:32:f3:fe:ca:a5:94:cb:
                    94:d3:56:81:f2:92:18:cb:1c:93:08:73:23:03:15:
                    7d:38:2c:19:42:1b:4a:6f:a0:cd:ae:20:3e:6c:42:
                    a7:ec:d6:09:1d:74:3c:d2:84:75:05:6a:94:82:78:
                    3d:6a:b8:d8:cd:ad:86:2d:b0:6a:c6:ac:54:e3:5a:
                    42:fb:89:9f:d9:41:2f:49:63:b1:0c:11:a9:46:b8:
                    2d:a9:22:f8:b1:98:62:1d:6f:e2:06:fc:eb:73:fc:
                    0e:a5:a9:b7:75:98:3a:26:2f:e2:87:cc:3a:1d:11:
                    40:6f:9b:23:28:b4:1f:a4:ba:fa:fd:18:0d:73:2d:
                    b4:8e:c8:be:08:b2:2d:a3:29:df:8a:c9:86:45:27:
                    b2:60:f8:b8:67:29:1e:c1:d2:ec:a5:b5:c6:96:3b:
                    60:f1:ed:bc:24:58:2c:c6:bc:1f:61:01:83:d2:61:
                    c8:ac:d8:10:06:09:71:86:66:da:7b:9d:50:c1:07:
                    29:39:27:67:b1:ca:ca:58:0c:18:5a:9e:96:a3:20:
                    d8:ed:fa:07:02:22:a1:e9:56:57:c5:59:53:70:f4:
                    e8:0f:c3:64:99:c2:8f:d9:54:3b:df:2d:bd:f5:b4:
                    29:9d:d1:93:20:11:b5:ed:8d:7b:22:99:c6:e9:0f:
                    0f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:22:27:45:F4:C9:43:00:56:B9:C0:3B:61:44:54:38:EA:B7:25:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/59f7e654-bc16-33fe-b64c-e6181e6043bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f7:e5:fc:7a:0a:50:8f:2e:1c:09:e7:83:ae:89:8f:13:57:
         8c:e9:86:5d:83:ab:19:ba:b5:b5:49:0f:58:52:ab:04:e0:2f:
         7e:2d:9d:9d:8d:34:ad:46:23:da:c9:1b:df:ca:ab:d3:9a:87:
         51:eb:7e:ca:e6:bd:05:bd:1e:78:c8:93:e5:d4:0f:5b:48:de:
         ce:20:98:36:f2:9c:0f:f7:06:84:06:c4:9a:ed:38:4f:3e:41:
         32:dc:28:2b:e8:ce:f9:44:d0:f9:f0:da:1d:44:eb:6a:f8:d0:
         78:ee:54:5e:e9:6d:51:78:d9:c1:57:74:01:02:f1:ee:2d:2b:
         77:fe:78:ff:6f:fa:40:6c:ba:21:60:7d:03:90:e8:bb:23:63:
         ee:15:50:c0:5b:1e:ce:03:23:4c:e2:d5:20:0e:6c:f3:dd:f8:
         24:24:22:c1:02:c4:8c:40:2e:db:e9:60:9d:10:1c:5a:25:af:
         7e:0b:ad:cd:a5:52:f1:a7:b9:7f:c6:31:93:3a:b8:44:37:85:
         1b:14:38:ef:fb:b5:f7:f4:bc:67:b7:91:59:e2:55:b2:06:26:
         51:4a:e6:33:74:3f:28:fd:04:4f:c2:29:a0:fb:c3:75:3f:b8:
         10:cd:4a:4a:fd:c6:9b:35:a6:9f:1a:6a:35:9e:83:1d:48:41:
         73:06:b7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:11:33 2026 by rpki-client