Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43e7c340-9c85-3aa5-9116-b86c4f69eb27.roa
File:                     43e7c340-9c85-3aa5-9116-b86c4f69eb27.roa (raw, json)
Hash identifier:          AnLvhKFzy7ZHJ5VYhtllbmrDI4Y9sziPHeCDXiwYyro=
Subject key identifier:   89:99:D0:0B:C9:66:0E:64:A2:D8:07:DF:3F:52:68:2C:5C:80:F2:5B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F1C1520EF5DF9CEF6A9123480
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43e7c340-9c85-3aa5-9116-b86c4f69eb27.roa
Signing time:             Tue 08 Sep 2026 19:00:39 +0000
ROA not before:           Tue 08 Sep 2026 19:00:39 +0000
ROA not after:            Mon 07 Dec 2026 20:00:39 +0000
asID:                     31898
IP address blocks:        155.181.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:15:20:ef:5d:f9:ce:f6:a9:12:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  8 19:00:39 2026 GMT
            Not After : Dec  7 20:00:39 2026 GMT
        Subject: CN=21a2d449-8caa-4431-8e36-051ecafaa48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:b7:fe:ad:0b:89:6e:9d:3a:e8:93:91:a8:
                    81:e3:41:96:0e:da:7d:31:d0:bd:ec:d0:41:72:78:
                    5c:f7:00:6d:e3:d2:26:d5:95:14:6b:17:d2:c0:d0:
                    bd:fc:60:01:82:64:14:5b:58:13:7f:23:f4:f6:8e:
                    35:77:75:6d:3d:99:dd:2d:01:cd:bf:ba:96:2f:04:
                    d6:84:8e:7a:df:13:3a:3d:7c:25:19:5c:44:6f:87:
                    56:55:41:8a:b7:6f:07:84:de:55:79:6a:ff:70:37:
                    bb:84:1d:84:ac:76:e7:7d:38:32:81:13:91:e0:2b:
                    b6:70:b8:22:9a:3d:7b:5d:d6:d1:f6:9c:b0:f4:a0:
                    c1:a8:84:28:c0:7a:d1:85:1e:bc:3b:5a:42:8a:42:
                    53:db:41:16:ff:31:65:a9:87:47:55:44:2e:ba:23:
                    6b:51:f3:f8:9d:a8:55:6d:a3:0b:65:75:c1:a6:5f:
                    e6:99:ff:71:1f:45:a7:85:19:68:74:a1:9b:cf:e2:
                    0e:d6:fb:5b:5a:7f:92:4c:e1:1c:82:e6:5f:5c:d8:
                    07:74:25:14:69:d7:24:2d:f5:4c:0a:6a:23:4a:c4:
                    4a:4d:e8:b7:9b:aa:41:1a:69:78:f0:d9:44:d3:8b:
                    49:27:1e:0c:b1:85:c9:c2:d7:96:39:16:12:da:f5:
                    98:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:99:D0:0B:C9:66:0E:64:A2:D8:07:DF:3F:52:68:2C:5C:80:F2:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43e7c340-9c85-3aa5-9116-b86c4f69eb27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.181.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:62:00:af:2e:65:a5:31:d4:fd:6c:0c:0a:8a:ab:1d:c1:30:
         3a:0a:85:b3:a4:31:b9:f2:de:3d:14:04:2d:03:72:bd:ac:b2:
         e7:27:99:5b:27:6e:a6:b7:8e:31:a0:61:cc:35:1d:63:06:ed:
         f7:54:53:24:f4:68:f3:93:f9:f9:4a:e2:20:ad:12:3e:83:cf:
         f7:0c:19:3c:7a:26:1e:b3:20:21:77:98:2a:d5:13:b5:36:18:
         42:69:9d:77:07:69:d1:74:06:1d:ca:a0:66:87:d6:a8:14:34:
         4b:41:ca:72:cc:17:2e:cd:3c:aa:9f:6f:3d:63:41:31:ff:b3:
         e9:7e:38:af:ba:83:c6:24:89:53:1c:e9:4c:26:88:ed:e2:83:
         8f:dc:f0:98:90:23:e0:87:a5:bf:fa:64:a0:35:f0:4c:b0:17:
         d8:3f:93:4e:63:e6:69:7c:a4:72:be:a4:96:f8:89:5b:a5:68:
         22:9a:94:4c:94:22:5c:07:2f:b7:94:ac:03:39:d6:b5:c5:58:
         97:a0:b6:40:c0:e4:97:59:2d:4c:91:40:0a:25:71:ff:24:bf:
         0d:8d:f7:fa:e4:70:68:01:26:36:05:bf:84:f1:29:ef:8b:d7:
         18:27:36:9f:56:1c:28:34:15:a1:7f:7c:91:8d:9f:15:f9:22:
         39:8c:fa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:26:08 2026 by rpki-client