Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5d5eb437-25cb-3acb-95d7-6271dfce2862.roa
File:                     5d5eb437-25cb-3acb-95d7-6271dfce2862.roa (raw, json)
Hash identifier:          L1pDJhzNivqG7EcHnY/g3JYvUkmy9UdzZmPKUTxlyv0=
Subject key identifier:   FE:3E:92:92:2B:AA:AC:6F:5A:EC:46:B2:B2:F5:0B:F0:BF:AD:2C:60
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D9A20119586B1B451BAB36F00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5d5eb437-25cb-3acb-95d7-6271dfce2862.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     31898
IP address blocks:        134.70.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:11:95:86:b1:b4:51:ba:b3:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=e64239e5-272c-4443-9545-54b17024be16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0c:d2:fa:bd:eb:17:e4:52:19:ad:bf:e0:e1:
                    c2:05:03:c3:97:91:39:8b:0c:c0:ee:90:7e:a0:e3:
                    b0:18:6e:74:e4:56:00:a8:68:63:6f:99:e4:c9:9c:
                    b8:9a:90:05:c0:e8:4f:92:b8:87:ed:d4:ef:b3:fb:
                    64:a1:89:23:ce:38:74:68:fd:f4:e7:5b:22:c9:d7:
                    52:4a:b7:28:27:e0:9c:b0:7f:fb:4f:66:5d:47:30:
                    cc:94:38:8a:72:bb:c3:dd:63:79:85:0a:61:14:e1:
                    85:37:fb:78:36:79:98:74:77:3c:38:b0:40:7f:81:
                    cf:4a:69:b9:25:42:e1:a0:6b:a3:8f:79:2b:0e:bc:
                    76:f4:c2:03:6a:af:f8:e1:8e:41:8e:d4:96:7b:75:
                    79:3e:bb:6e:17:9c:bf:77:fd:1e:0a:f6:d3:8c:54:
                    90:00:ee:6e:41:61:52:db:17:be:fd:f7:2d:0c:39:
                    07:eb:da:0f:a6:51:9a:1f:39:3f:6b:68:62:67:95:
                    32:8d:53:33:60:35:a6:fe:a8:e5:91:54:ab:02:47:
                    43:04:08:61:86:d0:6c:49:93:20:c1:73:78:fe:27:
                    8b:46:b7:aa:fc:99:15:45:da:dd:d0:c1:c3:ab:e3:
                    8c:a7:6a:89:d9:9e:bb:f5:99:27:02:bf:09:49:2c:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3E:92:92:2B:AA:AC:6F:5A:EC:46:B2:B2:F5:0B:F0:BF:AD:2C:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5d5eb437-25cb-3acb-95d7-6271dfce2862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5c:a7:22:59:f6:ff:c8:2d:24:73:fe:73:73:af:06:2b:08:
         0f:84:e4:a0:be:21:94:65:56:dd:ca:b1:7b:31:34:44:01:5f:
         26:26:d2:07:bb:20:91:24:da:ff:f6:86:18:98:bb:32:3a:9a:
         84:5f:1c:01:02:af:ac:a1:31:54:0c:36:15:5f:50:f3:cc:5f:
         c1:46:53:40:03:00:91:4e:3a:42:de:30:7f:bb:ca:1c:b7:4d:
         35:2f:c4:5d:47:e0:ee:30:48:ad:e1:da:a8:b3:c9:ca:84:58:
         24:80:dd:40:b3:3f:ce:c0:6f:c4:48:19:a6:31:79:e8:28:18:
         45:b1:8e:f6:51:63:2c:25:39:75:03:c5:15:63:59:fd:56:8f:
         92:3c:50:44:f7:2f:10:9f:2e:d0:e8:8e:9c:37:bb:77:0a:01:
         15:17:11:a4:ea:35:86:e5:4a:b4:ad:45:07:a1:30:86:7a:67:
         91:f0:74:3c:60:60:31:56:ca:47:76:36:28:3c:4f:70:a4:08:
         e6:25:ea:cb:cb:58:6b:2a:e3:3f:6f:1b:81:7a:6a:d5:28:07:
         a9:45:98:c5:5c:8d:3d:58:f2:e1:a4:32:f0:13:a6:56:1d:08:
         07:56:b3:3e:20:48:5a:53:6e:91:63:cc:80:cc:a1:dd:10:e6:
         92:0a:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:13 2026 by rpki-client