Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bec092d3-771f-3d64-88f2-bbb23bfd795e.roa
File:                     bec092d3-771f-3d64-88f2-bbb23bfd795e.roa (raw, json)
Hash identifier:          MtvBvG0u4SBektQ2eH3RubGyNeJmjRMDVuv+yj3YwFg=
Subject key identifier:   4F:04:39:40:AF:62:D7:9F:85:F8:38:58:D5:4A:52:F8:F3:C7:60:2C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F13023DB21DC985AA9D0C2F80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bec092d3-771f-3d64-88f2-bbb23bfd795e.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        160.34.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:3d:b2:1d:c9:85:aa:9d:0c:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=d8822e4b-5c3c-41e1-bd1a-ac7a64136144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:43:10:bd:bc:fb:e1:46:b5:f2:0d:b2:aa:11:
                    37:9e:3f:e0:ac:97:0c:30:25:95:ef:b7:ff:67:71:
                    ec:d0:42:b4:cb:cd:c1:9a:12:39:4d:38:90:cc:e0:
                    df:da:56:bc:08:37:a4:95:da:90:91:61:cd:cc:ba:
                    7c:99:ae:d1:0d:a5:85:ed:3c:16:da:a0:fa:8a:78:
                    7a:08:ec:b8:60:e0:62:9a:ea:d1:56:bf:fa:8f:91:
                    f8:b8:95:88:18:9d:75:d5:c9:02:89:c8:23:37:2d:
                    2b:5c:78:70:85:eb:45:78:b7:6b:80:dd:26:55:c9:
                    b8:02:c4:cd:9b:60:45:73:25:df:05:ac:c7:de:4e:
                    6d:e9:f0:49:16:8c:20:75:62:9f:b7:a5:60:65:85:
                    ae:c7:ca:6e:77:bb:af:4d:01:db:0e:df:e1:ed:79:
                    c1:e8:b4:ee:1d:d6:1c:7f:fc:cf:8c:fa:fd:f8:57:
                    52:47:3a:06:37:91:65:8d:5f:a0:7c:f0:97:fb:57:
                    54:7f:7c:61:cc:38:4c:62:86:6c:d1:62:ec:f8:d3:
                    f8:9e:32:f6:2e:a9:85:8e:ac:0f:67:d9:60:6e:94:
                    9b:6e:c2:95:59:e0:0d:8f:cc:17:cc:7c:b2:a8:42:
                    61:48:7b:fa:31:a9:a2:7c:68:ad:86:e3:c2:76:54:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:04:39:40:AF:62:D7:9F:85:F8:38:58:D5:4A:52:F8:F3:C7:60:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bec092d3-771f-3d64-88f2-bbb23bfd795e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.34.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ae:f5:c1:ef:a5:58:31:c2:ee:b3:7d:d0:25:67:25:02:2c:
         22:33:a5:1e:19:ac:03:7a:2c:a6:dd:03:46:ca:b5:4e:7f:74:
         fc:de:e0:e0:22:ef:ce:2f:a1:01:78:c4:5b:bd:c8:20:c2:d3:
         13:e9:57:f0:00:a1:0e:f1:42:76:30:29:c4:8e:b7:4e:ab:11:
         ca:b6:c4:8b:a3:75:be:0c:bd:37:8c:cf:81:7b:b9:50:4a:b2:
         e9:b6:cc:ec:ab:07:00:39:ee:0a:e3:8f:fd:67:63:4a:06:8d:
         f2:c7:71:31:3e:67:31:35:6b:b8:8a:05:d5:89:59:fa:33:cd:
         9a:74:df:95:63:0d:02:a8:2f:47:cc:53:f8:58:c5:fa:35:0f:
         e2:78:29:4d:7b:47:b6:a3:d1:f6:32:47:0a:ba:f5:c0:cd:b8:
         de:9f:fd:33:cc:ad:f6:01:36:e0:07:a6:fd:e0:d3:95:c8:d0:
         30:d0:9f:d8:de:2f:51:f2:c1:78:bd:60:12:e8:53:6e:7a:11:
         37:b0:30:ca:2a:76:14:2a:66:41:97:93:f6:78:45:c6:db:9d:
         25:e3:4d:66:05:b4:0b:d1:fa:32:77:52:de:35:71:74:0b:b1:
         7f:3c:9c:99:c9:a3:9a:f3:16:b5:61:5b:8e:27:76:b9:4e:2f:
         05:2d:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:55:43 2026 by rpki-client