Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/026fb763-a35e-3e4a-adb2-2204b9fe62de.roa
File:                     026fb763-a35e-3e4a-adb2-2204b9fe62de.roa (raw, json)
Hash identifier:          VY8PE1nADcOTcz4cCTQkNUxXReYBQmwXxWeJhv8EDWI=
Subject key identifier:   DC:75:7B:A0:78:F3:4D:2B:AA:D1:04:3C:61:D5:D5:65:D8:E4:C7:08
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584CC7774439A259466DB2253B00
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/026fb763-a35e-3e4a-adb2-2204b9fe62de.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     3695
IP address blocks:        70.36.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:44:39:a2:59:46:6d:b2:25:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=a39733a2-d251-419d-aaa3-d01824188174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f6:98:50:5e:91:19:ce:b7:48:a3:12:72:fb:
                    9d:d6:30:39:6c:64:38:56:04:19:ec:87:0c:fe:1b:
                    c3:6e:08:ef:a3:33:5c:11:b2:89:85:44:d4:59:fb:
                    9f:eb:57:72:94:c1:f5:b9:9c:a9:36:cc:04:2c:7f:
                    17:6e:4e:99:8e:5f:f5:ab:d3:97:64:a5:fe:2b:c8:
                    f6:c7:3d:35:73:a2:01:a8:bc:11:0b:43:54:28:fc:
                    12:43:8a:65:ad:da:61:04:37:cc:79:94:9f:6c:1b:
                    f2:81:ae:fb:6c:5e:8d:dd:f4:28:15:e6:fe:dc:f0:
                    6b:c8:d5:9b:30:91:df:ee:2d:2d:5e:c6:f7:dc:6a:
                    da:7e:e0:0c:35:72:f4:3f:f1:5c:76:f4:4e:eb:d0:
                    f5:5b:8a:53:c2:ce:04:cc:1d:23:ed:3f:cc:05:03:
                    5a:a9:42:1f:20:a3:ee:59:91:19:77:17:00:5e:37:
                    e1:6d:f8:13:ca:dd:53:16:a3:bf:2a:d0:ac:30:85:
                    60:76:83:b6:e1:72:d5:0a:c1:02:1b:96:17:8f:6d:
                    8a:0c:14:fe:ed:e5:26:a1:74:7e:ef:71:71:25:57:
                    14:0a:81:21:5a:9a:30:e7:98:7d:61:d4:3a:9b:fa:
                    32:9a:64:95:b1:bb:f7:c8:bf:47:2b:1f:2f:88:7b:
                    2e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:75:7B:A0:78:F3:4D:2B:AA:D1:04:3C:61:D5:D5:65:D8:E4:C7:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/026fb763-a35e-3e4a-adb2-2204b9fe62de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:0b:68:6a:e7:4f:ca:d0:da:c3:81:32:cd:0a:d1:07:04:29:
         dd:87:8f:10:4c:9c:43:2b:7e:f0:c1:85:9c:3b:0d:a6:f6:88:
         e0:5b:ee:50:3e:9b:d8:a4:20:df:c5:73:83:40:c9:b1:1c:d4:
         f3:9f:7d:57:6a:a8:cb:b2:dc:e5:95:6b:55:b8:fd:46:7a:4e:
         a1:7d:fd:27:6a:c1:6e:8e:ae:7c:36:4e:91:0f:1e:4f:ca:cd:
         d9:ea:fb:3c:05:cd:26:7a:7f:91:67:5e:23:76:ec:0c:70:5b:
         17:4e:88:cd:ea:0d:e6:65:b6:4f:cf:55:28:d6:b8:e3:34:14:
         32:91:d5:22:e3:ec:85:db:d2:f9:f2:d9:f4:64:8b:72:bf:d9:
         49:86:5d:59:b4:7a:7b:90:fa:8f:8b:c3:dd:70:08:26:0c:6f:
         9b:0f:62:70:6d:22:08:7d:04:4f:21:73:a6:d7:bd:db:7f:d2:
         5b:71:95:98:08:1e:dd:d8:52:ee:22:79:e3:71:44:24:0f:b1:
         6b:da:78:57:1f:8f:26:66:af:79:aa:f7:4e:6f:b8:8c:c4:9e:
         5d:4b:72:7e:91:70:eb:fc:04:87:1e:21:a1:ac:99:35:08:55:
         42:ed:b0:68:9e:b4:93:ca:65:fd:6a:d5:f5:83:4b:1f:9a:94:
         22:6a:b8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:21 2026 by rpki-client