Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/83a66ae9-b3ba-31fb-8a56-e29b953384c8.roa
File:                     83a66ae9-b3ba-31fb-8a56-e29b953384c8.roa (raw, json)
Hash identifier:          oFtuH4b7kX/XivFuO7TqkOZyU3R1c/lvufFjEPA7nrc=
Subject key identifier:   4F:E0:F0:9A:C2:E7:91:90:84:90:98:36:BC:13:DA:99:E2:C1:9E:EC
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F11A162AFC15B9A27F51B8D40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/83a66ae9-b3ba-31fb-8a56-e29b953384c8.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        134.70.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:62:af:c1:5b:9a:27:f5:1b:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=7d2d39fd-91cb-4f08-a540-21ad804c8678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:07:65:54:16:de:58:09:6a:82:2b:cf:b8:10:
                    c6:1d:88:6b:56:a4:b7:dd:ab:18:2a:01:fa:ce:33:
                    f1:0f:08:49:0b:52:a3:60:f6:0d:26:cf:cf:9b:c9:
                    b3:5b:81:f9:45:9c:a8:46:82:05:79:51:02:d0:1d:
                    f9:9b:86:3f:e1:63:60:9d:ae:ae:08:07:9e:47:e8:
                    96:d9:6e:dd:a1:67:1b:9f:2d:3b:cc:0f:02:35:e3:
                    71:e3:30:d3:44:70:43:c7:4f:4a:83:c5:98:ec:e3:
                    63:c8:b4:70:0e:14:8d:97:2a:46:fd:d9:f9:e6:b8:
                    84:4d:28:8e:cd:42:80:3e:31:09:91:a2:f6:0e:c9:
                    0a:53:67:6d:1a:a7:43:6e:58:a4:6e:1e:18:fa:8c:
                    07:30:31:87:cb:c7:32:02:c2:4a:ef:7d:10:7a:0d:
                    52:7b:d1:10:f3:9f:40:af:0b:64:03:bb:1f:56:97:
                    fc:7f:0e:34:de:8a:f3:61:a0:55:7a:cb:d9:45:d2:
                    20:92:66:d1:bc:b3:d9:30:13:4a:8b:db:3a:6e:de:
                    bc:3f:48:71:4e:45:cb:92:76:63:33:d5:18:d2:2d:
                    2a:fb:8a:f7:c0:b4:12:aa:cc:9b:e4:c9:f1:32:3c:
                    38:48:5b:ba:bb:4a:ef:97:3f:6c:12:78:a5:ec:58:
                    a1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E0:F0:9A:C2:E7:91:90:84:90:98:36:BC:13:DA:99:E2:C1:9E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/83a66ae9-b3ba-31fb-8a56-e29b953384c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f9:1e:21:77:e1:f3:03:0c:e1:8e:48:98:51:f5:ab:a6:d5:
         fc:9b:9e:64:02:34:cc:aa:07:33:66:51:36:a3:f6:6b:6d:b8:
         3e:38:6f:28:63:44:f1:be:a4:54:0e:bf:85:c1:16:88:87:93:
         c5:0f:92:89:b3:7f:ba:76:bf:ec:27:22:2a:75:c1:70:38:71:
         1b:b5:ab:1d:c7:2f:fe:9c:0b:0d:c1:34:c1:ed:c4:da:3b:36:
         cb:61:af:cf:3d:bc:c1:78:82:97:33:77:36:34:e2:a6:c6:3a:
         77:0e:71:2f:f2:09:cb:dd:60:9c:5a:18:47:8b:e0:62:40:7d:
         b2:fb:e3:85:57:70:2e:c5:9e:c0:a0:51:30:69:c8:64:d9:16:
         52:f7:61:06:67:dc:66:3a:a6:df:b1:ff:ac:c4:00:e0:8d:96:
         0f:bb:52:3b:da:ff:8d:65:c7:56:64:71:c9:6a:89:d5:2a:32:
         3c:e7:5b:dc:6d:d5:0e:e7:62:df:80:c3:81:5f:6a:24:72:7f:
         4d:6f:ce:43:c2:5d:3f:04:dc:a8:14:3f:88:dd:e3:a0:08:d1:
         82:dd:6a:c3:5d:e4:df:f9:3d:6d:7d:6e:95:3e:bb:bb:d0:f2:
         29:76:a0:39:6d:53:c3:e3:9c:fa:0b:68:6f:6a:67:94:ac:24:
         94:bf:c1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:14:29 2026 by rpki-client