Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa
File:                     8e5ed9de-8260-3f23-8a5f-845c119039ad.roa (raw, json)
Hash identifier:          UZKIJ3/ExvLH7c8ENfTe4TfoWqRZA61xzv5hgeXDBGY=
Subject key identifier:   86:F1:E6:47:50:A7:48:36:E3:84:38:FC:C0:7A:B5:86:D5:F6:4F:C4
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584CC77743C2E3CEA0E6EF3C9630
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     3695
IP address blocks:        70.36.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:43:c2:e3:ce:a0:e6:ef:3c:96:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=b04c84d0-6685-4d55-9720-ac802bc9c90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b9:31:a8:16:30:b8:72:52:08:fb:0e:aa:a6:
                    0d:f4:ef:38:51:3a:4d:80:91:00:6c:8e:5a:28:e5:
                    5f:7d:b0:d5:43:58:48:cd:a3:95:d6:f9:2f:45:58:
                    7e:d9:3a:09:6c:6d:a3:06:de:a8:2c:13:0e:2e:38:
                    03:8d:77:85:36:30:9e:e3:cf:c7:8c:71:d5:e6:25:
                    c5:12:29:6e:60:2f:48:17:cb:e6:12:12:9a:5d:d5:
                    7d:71:3d:53:50:1a:6e:0e:51:bb:e1:af:d7:da:58:
                    d6:5b:81:4e:39:3b:ca:ac:42:55:b4:62:f9:45:d8:
                    88:da:17:75:9b:b5:e3:bd:ac:45:8c:97:c6:56:49:
                    e1:8e:c5:e2:46:27:c2:a1:bd:7a:b1:f2:28:46:12:
                    41:b4:8f:4a:41:b4:ab:7f:81:0b:5e:c0:e1:e0:ce:
                    3c:1f:05:18:ac:38:3d:68:26:f3:52:cf:ed:73:3e:
                    67:c1:e0:e9:14:48:d2:8c:e1:53:79:00:0e:38:c2:
                    a1:f5:25:6d:19:05:3d:a1:df:47:6e:ae:fd:9b:e3:
                    65:ac:a5:11:5c:3f:3d:f1:c5:12:8d:73:52:bd:49:
                    8e:94:25:31:bd:ca:bb:c4:29:4c:11:9e:89:42:86:
                    48:47:06:0b:ba:06:71:63:61:81:36:24:42:04:70:
                    22:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F1:E6:47:50:A7:48:36:E3:84:38:FC:C0:7A:B5:86:D5:F6:4F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:ac:ad:62:1f:9f:7f:38:af:d0:76:53:ae:6d:df:38:dd:d3:
         0b:00:16:3a:25:8a:cc:21:9b:0c:27:b3:dc:04:42:66:76:3a:
         63:0b:9d:a2:0d:06:cf:96:b6:d8:8f:50:e3:e6:c0:56:64:b5:
         bf:38:67:b9:51:21:7d:fd:6d:c4:81:4d:9c:99:a2:27:da:5a:
         1c:2a:e0:db:d0:6d:cb:8d:e4:ad:bb:b6:a0:da:c9:ee:9c:c0:
         51:89:4e:7d:ab:bc:89:dd:7a:89:56:81:22:e5:15:65:63:a6:
         f9:13:43:86:8b:44:21:02:0f:f1:18:44:6b:4b:c1:d3:f9:18:
         02:12:62:a9:b2:72:a2:b3:d4:aa:5a:c0:dc:f4:ad:8e:0c:a1:
         e3:23:ef:f6:48:32:a0:20:94:85:4d:58:20:12:7b:d5:9f:16:
         24:f2:8c:b8:65:d0:b1:36:4c:23:37:b4:e1:79:82:45:e6:b1:
         23:3f:d7:5c:bd:e7:ad:57:dc:9d:1a:83:09:99:3c:85:f4:dc:
         6e:65:49:74:76:10:f5:37:c7:99:f4:b7:60:7f:5d:9c:d9:50:
         a3:08:68:79:53:cd:72:b8:5f:5c:e0:e5:df:3e:39:4f:f6:9e:
         b8:2c:5e:b4:49:d1:37:ea:5a:4e:c1:90:19:4b:9d:6b:69:50:
         9f:11:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:14 2026 by rpki-client