Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/09179594-6d15-3092-9a21-52f07aacec71.roa
File:                     09179594-6d15-3092-9a21-52f07aacec71.roa (raw, json)
Hash identifier:          mxOt4FON95fFhaRmjiFsp4yJ/A5CzIgF/3SOHj2Wnog=
Subject key identifier:   E1:C7:16:C9:0D:9F:33:66:8B:1A:68:B2:5C:A1:6E:55:A3:94:7C:C8
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D27AAA25E657AB0D580D0A780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/09179594-6d15-3092-9a21-52f07aacec71.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        70.32.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:a2:5e:65:7a:b0:d5:80:d0:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=8ad86c75-f6f4-48e9-90e8-19b6726a0ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:82:67:83:5d:d8:37:ce:a4:7c:8b:89:e5:1f:
                    23:c5:d6:e0:2e:f5:7f:31:71:14:28:14:6e:9b:17:
                    bc:e3:8b:91:9c:9c:c7:21:fc:a7:6b:64:94:eb:11:
                    a0:15:39:4f:7f:ee:54:76:59:a3:0b:2d:0e:0c:04:
                    31:67:0f:82:d8:12:67:e7:31:f4:8d:85:6e:9f:5e:
                    2c:c5:7a:5a:2c:37:78:f2:cd:f8:4b:3d:5c:01:90:
                    d6:f2:39:af:15:88:74:7b:07:87:9e:1d:84:f1:ad:
                    65:a4:84:71:88:67:cd:b7:18:31:a0:51:1a:17:31:
                    09:e7:76:42:a9:00:7c:91:40:6b:1a:da:c8:33:a0:
                    2b:19:ac:93:2e:01:ee:1a:29:56:c2:1a:41:aa:f7:
                    1a:e8:16:a1:da:5d:b0:83:4e:c8:08:2c:dc:35:cf:
                    39:fe:90:08:ea:db:94:26:08:98:14:f3:27:41:bb:
                    1a:43:c5:ba:fa:fe:ea:50:71:78:a0:5e:3d:0c:ac:
                    16:87:26:c1:69:e6:3a:2d:cf:03:af:75:04:7a:64:
                    89:b7:22:b6:1d:6a:bd:89:2d:73:15:0c:60:94:81:
                    36:b9:aa:df:5b:ba:20:b0:9c:de:ef:e5:62:4a:5e:
                    c4:79:98:dc:f5:ef:47:d6:7d:f2:27:14:b7:ed:04:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C7:16:C9:0D:9F:33:66:8B:1A:68:B2:5C:A1:6E:55:A3:94:7C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/09179594-6d15-3092-9a21-52f07aacec71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:89:b8:2e:85:13:1a:86:c1:56:da:38:0b:35:83:4f:ad:c7:
         ef:4c:a5:ee:8e:f7:33:29:4b:45:8d:77:99:96:88:10:ba:5d:
         7f:57:0f:8e:87:5b:4f:ac:e1:56:61:e4:ed:aa:aa:29:6c:59:
         bf:56:7a:49:0f:39:41:df:04:68:af:0f:0d:0c:4c:6a:03:39:
         75:8c:1b:49:8d:b9:78:23:fb:bb:fd:a9:7c:a5:21:00:6f:df:
         f2:48:65:e1:c3:ae:66:d4:79:d1:eb:a2:f5:ca:d9:71:54:32:
         94:25:db:56:27:db:0f:4e:0e:a2:7d:47:b6:a1:cd:52:eb:47:
         03:53:91:3c:63:cd:e7:56:b8:af:eb:33:50:59:5f:a9:64:cb:
         7f:0e:53:cf:6a:2c:dc:a7:ad:64:5a:10:69:d1:73:fd:17:0e:
         7e:04:5c:47:62:5f:1e:4c:84:07:eb:2a:2c:cd:20:e5:c1:6e:
         9f:eb:dc:70:8e:24:87:e1:9c:8f:e0:e9:60:49:60:60:e3:19:
         9e:9b:35:70:6d:d3:13:d8:e5:0f:3e:2a:ef:8b:a9:78:94:4f:
         d7:94:0e:f2:7d:36:a7:8b:a6:b3:86:63:83:a4:57:fb:c0:c0:
         ec:08:b4:28:2e:2b:c9:11:88:db:27:a7:49:4a:6b:35:f6:ca:
         13:41:18:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:32:31 2026 by rpki-client