Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1cdc9ea-2d8d-36a2-8fc1-30a97dbb81a1.roa
File:                     b1cdc9ea-2d8d-36a2-8fc1-30a97dbb81a1.roa (raw, json)
Hash identifier:          AsdofRuNlVTONArGcbTywu3Xz7b5RfHySDihhuZaShM=
Subject key identifier:   9B:75:90:EC:C3:84:B1:98:F8:90:6B:8B:49:BB:60:44:73:7C:02:53
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584BBE405E7AC1A905888C7B5900
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1cdc9ea-2d8d-36a2-8fc1-30a97dbb81a1.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     31898
IP address blocks:        134.70.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:5e:7a:c1:a9:05:88:8c:7b:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=ffeaae60-8802-4a8a-96c8-c2b61884a61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:42:96:34:68:23:e0:ed:32:1c:09:72:ce:e0:
                    c6:1a:e7:33:85:09:6d:15:f6:f6:ce:09:fc:53:6a:
                    9b:a8:1d:74:22:eb:f3:dd:f6:01:18:1e:e7:6e:78:
                    32:a7:13:b0:62:93:76:28:d5:8c:b9:fb:5b:e9:76:
                    95:29:52:73:34:83:b5:81:68:60:3e:3a:a7:6f:d5:
                    69:aa:a5:62:4b:7e:42:66:79:18:9a:fc:b7:6c:ac:
                    02:56:46:b9:fe:e0:96:e1:39:83:8d:7c:f3:22:1f:
                    26:75:0c:eb:8a:a4:81:48:a1:f0:63:d0:f4:8e:45:
                    13:4b:b2:ee:6a:2f:e9:87:cd:fd:4d:10:e0:06:1e:
                    1a:cc:5f:a3:81:86:c7:f8:44:cd:50:6c:f2:61:cb:
                    79:d5:27:2f:1d:5c:8b:61:04:42:07:cb:94:8c:01:
                    1c:8f:ba:2d:72:72:1f:ec:25:34:04:25:0e:75:85:
                    92:3d:07:c8:b2:bb:5a:5e:a6:3a:5c:9c:45:21:64:
                    2d:ac:e7:ed:c0:51:ca:ca:ff:2e:d6:20:be:9c:e8:
                    93:5f:b5:59:31:a8:a2:2b:9a:c7:fd:af:55:dd:7c:
                    2d:b3:8c:0c:cc:b6:b0:3e:bc:34:6c:55:18:41:09:
                    f8:3e:6f:a6:b7:e3:36:6b:53:76:76:84:d6:41:19:
                    1d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:75:90:EC:C3:84:B1:98:F8:90:6B:8B:49:BB:60:44:73:7C:02:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1cdc9ea-2d8d-36a2-8fc1-30a97dbb81a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2c:e8:3f:40:15:c7:47:6c:84:e0:2d:29:df:ee:3f:6b:6a:
         b6:c6:96:a8:cb:ac:0b:18:e8:46:6a:15:65:a7:87:7c:b6:78:
         ac:8a:47:9b:c1:22:fb:42:b8:3a:f3:75:7c:bb:b6:22:6c:11:
         0a:14:92:77:ce:26:84:dd:e4:9a:fc:36:fc:cf:03:b4:ca:2a:
         0f:8f:d8:a9:55:ce:49:0a:29:2c:8f:fa:e2:5a:c2:ad:bf:42:
         0a:5b:43:3e:ca:6b:41:47:84:b3:df:c4:08:7c:4a:3c:c7:6e:
         f4:5e:19:c9:b6:c4:1f:5c:32:04:9f:21:39:a9:90:fc:2c:33:
         a5:3d:1f:42:38:b8:39:d9:e7:e6:71:08:c0:b4:ad:41:ce:a9:
         dd:be:df:88:65:17:d6:7b:ef:82:60:8d:b2:ac:3b:af:e8:21:
         1e:b1:05:51:50:aa:67:b2:78:a3:3f:de:32:c6:76:86:27:9d:
         b2:fa:48:08:cf:ec:ed:a0:dc:b0:6a:5d:56:53:3f:71:6f:f7:
         be:e6:fb:5f:99:5c:89:a5:d0:dc:70:64:ae:d7:41:d1:84:3a:
         7a:02:e6:f8:78:5f:9b:19:50:69:0c:4b:f5:76:b1:18:fe:1c:
         dd:11:1e:ce:3a:a1:d9:85:ac:7c:4a:5d:20:fa:b9:e5:8b:ba:
         c9:8b:48:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:51:39 2025 by rpki-client