Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa
File:                     ea9b1f11-cc10-3201-8210-2b8888464357.roa (raw, json)
Hash identifier:          Kc7GIRloJ3WAgYWaL8zVcWT3h9MFsDd8QGZMlxmsB7A=
Subject key identifier:   12:EE:61:C2:B1:32:68:B2:47:04:A0:C5:8C:42:5D:56:A7:F4:C8:E9
Certificate issuer:       /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial:       010D0C9F4328584CC34749363AB966E85180FE80
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     32034
IP address blocks:        70.35.146.0/24 maxlen: 24
                          70.35.147.0/24 maxlen: 24
                          70.35.148.0/24 maxlen: 24
                          70.35.149.0/24 maxlen: 24
                          70.35.150.0/24 maxlen: 24
                          70.35.151.0/24 maxlen: 24
                          70.35.158.0/24 maxlen: 24
                          204.14.40.0/24 maxlen: 24
                          204.14.41.0/24 maxlen: 24
                          204.14.42.0/24 maxlen: 24
                          204.14.43.0/24 maxlen: 24
                          204.14.44.0/24 maxlen: 24
                          204.14.45.0/24 maxlen: 24
                          204.14.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:49:36:3a:b9:66:e8:51:80:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=c0b5b41e-0a04-4fd0-969f-492efd2c54d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:72:ef:18:30:bf:ee:09:2d:3e:dc:34:fc:66:
                    64:bf:04:38:a5:63:3e:72:28:4f:17:58:7b:70:29:
                    cf:c3:8c:5a:0f:d8:10:34:de:82:b9:fd:9f:ac:0b:
                    5e:43:76:2e:b1:92:41:fb:8a:72:6c:5b:de:99:f3:
                    e4:58:66:12:e4:40:cc:46:f1:6f:a9:85:22:3c:a4:
                    b1:70:40:58:90:82:0a:3e:61:2c:fc:dd:7a:7f:a7:
                    79:a1:02:0f:8d:0b:1c:d7:eb:e3:96:62:0f:db:78:
                    81:42:5d:51:32:f7:f4:de:d7:00:ee:5f:5c:92:36:
                    11:20:ed:b4:05:d2:df:a8:4a:05:d8:74:45:2f:c3:
                    ff:2d:93:9d:de:53:60:11:b7:ea:19:75:bc:91:f3:
                    fa:f9:a6:40:d1:a2:79:c0:0a:78:43:7a:b2:61:c6:
                    59:38:bf:e3:0a:97:d0:3e:18:cd:87:ae:3b:ae:65:
                    ec:37:27:0e:8a:86:f4:93:4b:21:a8:88:12:9c:d7:
                    5e:b8:ca:34:07:cc:42:31:0c:c4:29:69:46:43:0d:
                    bb:74:46:3b:53:96:e1:cc:57:f6:b5:97:90:37:72:
                    29:3f:59:29:1d:08:84:f1:55:e9:03:eb:02:bb:26:
                    18:ff:91:48:ec:6d:7c:32:6c:78:94:53:20:e8:e6:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EE:61:C2:B1:32:68:B2:47:04:A0:C5:8C:42:5D:56:A7:F4:C8:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl

            X509v3 Authority Key Identifier:
                keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.146.0-70.35.151.255
                  70.35.158.0/24
                  204.14.40.0-204.14.46.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:05:6c:73:45:57:5b:f4:a0:c4:e0:42:ee:84:49:66:1b:02:
         ba:b8:a1:d3:2c:91:79:09:f3:7f:ce:f4:02:06:6b:02:bd:ac:
         e3:c1:35:61:9d:50:c0:bd:d8:88:66:ca:9c:f5:2b:d9:53:42:
         af:bb:d4:18:75:aa:c1:fe:2a:71:aa:7e:28:f3:bc:92:d4:73:
         94:34:da:db:b1:61:1e:fa:f0:1c:4e:88:ab:41:11:60:b4:4f:
         6f:48:76:65:c3:1f:39:b9:4a:35:33:91:29:21:02:0e:66:2c:
         d0:d8:af:f6:77:63:be:36:1b:1a:02:a8:aa:96:86:f7:04:bc:
         a6:09:83:ba:6c:93:55:45:b4:e1:4e:4e:a2:dd:d5:7d:4b:ee:
         58:b5:4f:44:d9:7a:df:37:ae:26:37:9c:d5:a4:75:14:b0:fb:
         67:fd:c8:bf:c8:52:2c:d2:bf:f8:ed:a9:0f:3b:60:eb:6a:e5:
         78:fc:9f:b2:73:33:4b:27:07:73:9b:32:7d:5c:a5:1a:72:be:
         98:43:dd:47:58:7b:93:31:2b:fe:09:d0:bf:41:25:8f:d1:53:
         c2:7d:f3:a7:d4:b7:6d:89:5b:fe:10:62:d1:4d:d4:cf:9c:67:
         b8:b9:39:02:8b:ca:0b:c5:70:26:6d:d2:00:c0:db:63:c5:ef:
         db:0b:ad:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:25 2026 by rpki-client