Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/730afa5c-5a9b-3638-a591-ee0024676195.roa
File:                     730afa5c-5a9b-3638-a591-ee0024676195.roa (raw, json)
Hash identifier:          1JTbDCKiv5odfabAnTd1YhzWnw67SStpTPWTSm+t2XU=
Subject key identifier:   A7:C2:59:70:4A:87:5A:5C:B1:48:EB:16:24:C0:88:8C:55:CE:75:BC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B67979C00D5DAF2B1EE920C60
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/730afa5c-5a9b-3638-a591-ee0024676195.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     15169
IP address blocks:        70.32.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:9c:00:d5:da:f2:b1:ee:92:0c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=eb6218d8-c756-47e5-915d-b438375624c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:35:00:58:a0:d6:2e:3b:11:f8:1a:43:4f:
                    e8:66:9c:b4:4b:5a:ae:71:98:83:66:e0:d8:59:08:
                    5b:4b:c0:f4:d2:25:c6:3c:e4:a7:5c:8c:95:08:32:
                    20:c4:38:50:11:0d:de:5e:a4:85:36:ce:ab:49:a2:
                    12:d3:4e:b7:1c:ec:90:d9:9f:78:f3:61:f2:6c:50:
                    75:56:8d:23:0d:c7:4d:c7:ea:be:6b:69:c8:fe:7d:
                    f0:e8:5d:30:55:dd:c2:50:e6:4f:bc:e4:51:8c:5e:
                    f9:2f:65:00:04:f4:1d:84:15:ae:1c:dd:e3:92:04:
                    3a:3d:80:31:e4:1c:c4:59:ad:a4:44:7a:86:5a:0e:
                    58:d7:8f:be:ac:21:54:24:3b:58:7b:39:c2:d6:7e:
                    b8:60:8d:e9:79:b2:d1:9b:a9:6a:56:cf:f5:74:de:
                    35:3e:a6:50:7c:fb:60:fc:47:33:d6:0c:55:ce:5a:
                    95:95:5b:09:44:7d:cb:96:a1:7c:9c:c9:1a:ce:d2:
                    0d:7a:aa:04:3b:f9:ba:3f:b1:1d:b6:0a:31:8f:db:
                    fc:36:6b:0a:ac:cd:fe:00:57:43:14:9c:21:9c:34:
                    f8:67:b3:42:87:73:56:77:43:66:9e:19:5d:79:dc:
                    13:b7:b5:2a:b9:7e:fb:dd:9d:d4:bb:1f:94:64:54:
                    c2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C2:59:70:4A:87:5A:5C:B1:48:EB:16:24:C0:88:8C:55:CE:75:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/730afa5c-5a9b-3638-a591-ee0024676195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:34:42:b0:a6:6e:19:c4:24:1f:bc:4f:f4:bd:ea:8c:de:fb:
         ba:82:87:31:23:fc:9d:7a:8d:5d:3c:a2:74:5d:10:73:5e:1b:
         3a:bd:a5:e1:c2:ec:ac:12:d4:05:cc:85:69:9b:d7:ee:7a:99:
         e2:b6:38:97:95:cd:b4:80:33:7d:ff:41:73:f7:98:e1:d6:3f:
         3a:7a:c5:1d:8d:9c:00:64:b5:c5:14:a9:8d:b6:40:f2:5c:cb:
         67:4a:d2:34:2e:b7:82:dc:df:c6:af:6c:92:d4:c1:13:1e:47:
         c1:f3:5f:0b:43:67:86:e1:6f:45:ee:ad:99:eb:24:85:c6:f5:
         5a:4d:29:1b:cc:5d:30:15:8f:10:2b:7d:19:e5:ad:8e:e8:c9:
         cb:0b:08:70:e7:d9:1a:e9:3a:31:c0:2f:87:1e:26:4f:f4:c8:
         42:c4:a6:91:2d:ac:36:4c:79:c5:a0:79:7a:ae:2c:ce:22:44:
         7e:4b:94:70:db:8d:6a:0f:c0:4f:65:a0:9b:c5:e5:ac:a5:46:
         1b:ea:f0:2b:d8:bb:0b:ff:47:86:d4:01:07:86:32:93:7a:a0:
         d9:76:40:f8:24:f7:10:7d:13:ea:cf:92:d8:99:4f:0e:d2:6e:
         ac:83:61:3c:88:a9:0c:9c:ea:05:74:7e:a5:e8:e5:df:cb:e6:
         6c:ab:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:46:01 2025 by rpki-client