Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad5059d5-0777-3e26-bfee-8fbdbec754bb.roa
File:                     ad5059d5-0777-3e26-bfee-8fbdbec754bb.roa (raw, json)
Hash identifier:          9Gt5mzJWxCkJdpm0Z9LaHfOt8ctdKKzeuJCv5+pPWVo=
Subject key identifier:   B4:14:22:2F:88:D4:E6:42:02:B9:B0:35:F0:BA:0C:BA:FD:01:43:12
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B6797DDCD91BC83EBD3F76980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad5059d5-0777-3e26-bfee-8fbdbec754bb.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     15169
IP address blocks:        70.32.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:dd:cd:91:bc:83:eb:d3:f7:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=ab43d9a3-698a-4aae-9b57-da581bbbd694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:40:23:00:eb:6f:42:87:59:12:16:f8:0f:4b:
                    07:42:c6:f7:dd:4a:c1:ef:72:b9:e9:e5:f7:83:a0:
                    6a:78:7c:35:0c:66:c6:68:ce:11:5e:9c:76:ba:b6:
                    81:51:f8:dc:88:e8:9d:5d:a0:2b:32:6e:3c:e4:f6:
                    42:d5:c4:d2:73:96:75:95:f0:53:90:52:df:36:7d:
                    7a:73:3a:b5:30:d3:cd:04:89:c2:6f:43:80:71:06:
                    b8:33:72:44:db:1b:ba:bb:c3:05:6a:ef:fd:c1:62:
                    db:8a:f8:b3:3e:c4:41:42:68:9b:8b:4a:0a:37:a3:
                    f1:cb:29:62:6e:73:08:94:1f:cb:66:58:a7:f6:57:
                    73:f2:1b:f1:72:88:6c:92:89:6c:4f:85:0b:d7:74:
                    01:30:73:49:7e:5c:c9:99:e1:be:d3:09:da:00:98:
                    87:1f:39:5c:a6:17:58:de:23:78:4d:c2:57:26:5e:
                    c4:1e:18:95:de:48:57:97:84:3e:e1:94:a9:5f:f5:
                    d7:dd:69:aa:60:43:8e:a9:a8:30:00:ed:93:8d:04:
                    8c:0a:52:e5:34:a4:82:3c:2e:66:3b:8c:f5:5b:f2:
                    e2:f3:0a:d2:37:37:65:ca:b7:f3:56:2f:70:bb:c3:
                    6f:0b:da:88:67:5e:87:12:fe:a7:ba:fe:57:bc:dc:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:14:22:2F:88:D4:E6:42:02:B9:B0:35:F0:BA:0C:BA:FD:01:43:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad5059d5-0777-3e26-bfee-8fbdbec754bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d3:47:0d:c8:56:bd:40:7f:99:98:7c:15:21:d3:dc:d3:90:
         fe:26:af:23:b0:59:c3:8e:8d:80:e0:3c:ac:de:39:11:c1:d0:
         53:20:24:a1:a0:c5:5f:a8:df:16:c3:ff:d8:ce:86:f7:17:e5:
         fe:e0:c0:de:5a:34:69:e5:d5:68:8e:91:09:ff:40:a5:87:61:
         af:d5:6f:96:f2:94:2c:d3:73:5e:f4:27:9d:b9:6b:a2:cf:85:
         0f:d2:92:02:d5:d1:e8:99:69:6d:c3:df:ca:41:7c:9d:49:8e:
         b0:0b:f7:86:fc:0b:61:2c:42:fb:88:b9:89:bc:3a:d0:ae:37:
         5f:33:ca:97:43:2c:27:dc:54:58:ea:fe:01:1a:17:78:e0:f4:
         b4:3f:3e:3a:3f:d9:67:c2:46:e9:78:ad:55:b5:3a:ad:88:64:
         50:54:38:31:14:fb:50:ec:2a:21:d6:b3:38:07:f4:3a:b0:d0:
         d4:9a:cd:02:00:c9:e5:3a:6d:97:dc:00:0a:95:9b:e2:78:28:
         82:fc:87:7f:7d:37:60:5c:00:d6:57:b4:36:99:e9:f6:60:8d:
         64:91:46:34:79:57:a0:8d:22:50:55:59:56:9a:24:46:97:a4:
         ee:4f:bd:9a:56:4a:32:62:b0:2d:57:05:83:50:53:0a:0c:a3:
         34:69:56:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:42:05 2025 by rpki-client