Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/56fba18c-c21c-3132-b5f6-e8845f92eb43.roa
File:                     56fba18c-c21c-3132-b5f6-e8845f92eb43.roa (raw, json)
Hash identifier:          wBFhs+vk8mZ9//2p41o9vCfyOlGf7W16Pn7JWoUtbHI=
Subject key identifier:   43:36:38:03:1C:D0:E2:DE:CD:57:58:1E:58:BA:17:5C:7D:D1:1A:C9
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584D04E23BDCC659337A2A7A5080
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/56fba18c-c21c-3132-b5f6-e8845f92eb43.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     2914
IP address blocks:        70.39.128.0/24 maxlen: 24
                          70.39.130.0/24 maxlen: 24
                          70.39.131.0/24 maxlen: 24
                          70.39.133.0/24 maxlen: 24
                          70.39.134.0/24 maxlen: 24
                          70.39.135.0/24 maxlen: 24
                          70.39.140.0/24 maxlen: 24
                          70.39.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:3b:dc:c6:59:33:7a:2a:7a:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=43b7d8b4-bede-4abd-aebb-e3ad6a6e6526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:ba:80:cb:cb:a1:28:f4:f8:cc:9b:23:1a:
                    a4:ad:b9:c4:4d:04:ba:7a:03:30:69:ad:59:49:05:
                    5d:c0:d8:4d:a6:c7:8b:77:af:ab:60:be:68:8e:98:
                    82:ce:4a:bc:9b:57:b9:b5:d1:a8:5b:81:25:91:8c:
                    32:0e:8d:85:69:47:32:7d:5f:9d:b9:4d:a5:ed:84:
                    62:53:39:33:9b:2b:77:a8:6d:d2:c2:06:a2:ab:4a:
                    0d:b2:d9:d2:0c:66:8b:43:61:ff:6a:80:69:23:73:
                    9d:00:dc:f3:4c:f0:fb:7e:7e:92:06:10:01:29:1c:
                    f9:89:c4:ce:b8:0b:88:07:65:78:30:18:7e:d7:5c:
                    ed:6d:93:37:38:cf:c3:0e:1a:79:c0:60:91:77:66:
                    91:2b:6b:67:ad:23:94:57:04:bb:f0:c1:4e:20:05:
                    4b:17:b5:1a:87:30:2f:dc:f5:6f:c2:94:e3:9d:bc:
                    6d:c7:2e:30:9d:23:91:5d:d7:3a:bd:f1:31:32:8a:
                    f4:d5:6c:b0:94:ac:16:fc:40:a6:66:dd:41:ce:4e:
                    c6:c6:de:84:dc:57:68:1d:b0:85:e8:b2:11:00:2b:
                    63:db:22:e9:c0:04:9b:c0:19:c9:14:1f:e8:95:15:
                    33:38:76:f8:e1:a0:6a:2e:db:f9:4d:59:a2:26:e2:
                    50:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:36:38:03:1C:D0:E2:DE:CD:57:58:1E:58:BA:17:5C:7D:D1:1A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/56fba18c-c21c-3132-b5f6-e8845f92eb43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.128.0/24
                  70.39.130.0/23
                  70.39.133.0-70.39.135.255
                  70.39.140.0/24
                  70.39.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c0:db:4a:fe:e2:35:4a:3d:1d:24:77:21:7a:8b:3a:36:8d:
         b3:af:7d:4b:e0:0c:64:b2:f6:02:7a:f1:80:f3:38:9f:35:22:
         38:2a:83:bf:30:84:1d:53:53:3c:5c:ef:87:cc:2b:ec:bd:39:
         e9:cf:4e:e8:5a:b9:65:8e:a9:f7:f8:2e:b2:ac:01:c0:1d:a0:
         e9:4d:bb:3a:2d:bc:23:8b:f0:a4:9b:9d:ff:9f:72:2e:79:7b:
         e9:8b:42:e7:d6:fa:d8:29:3f:67:07:17:10:01:40:e4:c1:44:
         06:ab:4d:b2:d6:9f:f5:38:bf:c1:6d:bc:1d:cd:bc:44:6a:cf:
         f0:54:46:a9:5c:8b:79:f2:0f:7e:d6:1d:7b:d3:cb:47:57:04:
         4e:7b:41:71:9f:57:45:46:6a:fa:77:ac:b6:4f:0c:12:d5:4b:
         24:aa:64:e3:b1:00:d7:85:3d:5b:6a:85:e2:db:f9:f6:56:84:
         36:d0:6b:6f:61:28:ff:c8:04:86:35:ac:1e:4e:ea:11:58:2f:
         7d:c9:f0:bc:71:82:e4:31:6b:aa:87:4c:d8:d8:f0:26:9f:99:
         52:86:63:b7:c0:da:91:78:af:1f:d9:6a:24:2f:7a:bc:61:29:
         eb:2d:22:17:c0:b8:fd:72:c1:8a:58:7d:a4:9a:73:e7:f8:ea:
         c6:da:d4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:04 2026 by rpki-client