Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa
File:                     8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa (raw, json)
Hash identifier:          HwU6Qj9jYvW7k886bzltWUCR0YmYbhPjOjFnxp5GCuQ=
Subject key identifier:   A8:2E:9D:CB:BA:CA:B9:A8:75:02:DB:48:61:D9:16:14:6B:EC:91:C1
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584CC777449F850F9310DA3208CA
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     3695
IP address blocks:        70.36.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:44:9f:85:0f:93:10:da:32:08:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=7aae019e-1aa6-4ac2-983a-6edf3010085f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:b3:ec:c5:ef:f1:61:bc:9a:07:a8:47:d4:
                    f3:1e:4a:ae:27:22:e7:8b:8a:f0:d2:94:88:37:4e:
                    ea:b2:bb:f5:4c:64:7f:75:ac:fa:73:77:d8:4c:df:
                    e6:07:4c:ee:b6:47:66:0c:e3:55:8d:f7:d0:7f:24:
                    11:1a:94:45:9f:ef:0f:33:02:e9:fd:af:16:21:50:
                    51:82:86:c8:3b:d6:b6:13:40:36:db:26:b9:7d:72:
                    32:00:87:33:6c:c1:1f:47:b8:91:4c:40:6d:9e:c3:
                    94:fd:d0:2f:2d:a9:c7:d7:53:7c:b0:10:43:c2:ff:
                    e5:2c:ec:4c:f4:4b:5f:e3:68:a1:e7:23:8f:13:d4:
                    c9:b3:b2:4b:21:73:28:3d:d4:6e:06:cc:ae:0c:42:
                    62:53:76:6e:64:ea:44:04:c8:38:2d:c8:f8:95:1e:
                    e6:68:73:f5:12:18:99:8a:c9:2e:31:7a:e6:b2:ab:
                    c4:fa:9f:25:ab:e0:a9:7d:ba:e8:31:de:fa:78:6c:
                    ab:98:f7:b6:29:7a:f7:de:27:0c:e5:ad:9d:40:95:
                    62:ab:e9:ad:08:ad:a0:96:8d:46:dd:fc:a1:89:24:
                    df:ab:78:11:d8:4b:3c:02:ea:ac:a2:ce:8b:f8:df:
                    8a:03:d9:19:ce:54:30:cc:fc:01:a2:72:00:a8:1e:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2E:9D:CB:BA:CA:B9:A8:75:02:DB:48:61:D9:16:14:6B:EC:91:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:17:71:83:d4:89:74:eb:88:75:aa:bd:83:55:91:d9:d2:58:
         18:a6:f5:b1:44:54:0c:a6:80:df:ac:cc:ab:8c:27:da:30:7a:
         d4:14:8c:5d:7f:13:69:ea:3a:bd:82:0e:8a:de:20:28:09:92:
         5f:ad:a8:51:10:6b:e6:1f:7c:c9:20:0c:ac:7b:a6:6c:a4:0e:
         5d:ff:9e:e4:f3:0c:f6:f3:fc:3f:2a:b2:82:14:94:40:0d:08:
         17:a2:c7:bc:61:7f:2c:0d:15:30:6c:2e:b4:15:24:b8:32:83:
         e2:4a:bc:48:35:5e:c3:de:89:2f:05:96:d8:d6:70:cc:12:3f:
         e8:16:8f:ab:b4:60:2f:f9:b1:ba:95:89:37:cc:3d:67:2e:ca:
         4b:8b:ac:7e:4c:38:66:3f:2a:48:03:1c:fa:cb:50:10:e3:fa:
         80:c3:d8:51:b0:57:7b:c4:c1:2c:41:bc:54:08:21:07:3a:d9:
         00:16:60:34:9c:21:e5:4e:54:fb:e8:cc:a0:c1:dc:fd:a0:5a:
         d6:05:21:d4:16:a4:58:5b:9b:da:a4:8c:c2:99:32:f2:de:73:
         15:7b:de:bf:21:80:82:69:78:06:55:f5:ea:51:57:73:77:12:
         e8:76:b8:57:5a:b8:f6:17:6d:72:f2:c5:8e:3e:99:bd:67:b9:
         68:44:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:18 2026 by rpki-client