Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa
File:                     c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa (raw, json)
Hash identifier:          /mVMyd+8qoAM7GxSRdTk7lpb13DLl/gOz5lON6gbiPo=
Subject key identifier:   2F:F6:89:1A:2F:BF:33:DB:4E:B9:91:11:D6:B8:0E:44:4D:EA:7D:AD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D27AA472CD2882FF131935180
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        70.32.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:47:2c:d2:88:2f:f1:31:93:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=80539c36-4691-488d-bc98-3485a814b827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:67:f6:1f:a7:2c:13:8b:0c:b8:89:e3:e8:
                    36:66:59:b7:b2:17:f0:f4:44:87:97:32:30:59:35:
                    3a:69:3f:dd:2b:76:38:fd:0c:99:d8:72:a4:1a:7e:
                    68:a4:a1:9e:db:24:5c:96:b8:10:cd:e9:5c:de:b3:
                    db:50:57:d2:c1:c5:14:04:2e:4b:33:36:c6:68:f3:
                    91:4d:56:38:0e:09:de:62:2c:e8:9d:fd:1d:a4:87:
                    0b:5e:b2:d9:43:c7:02:3e:4b:88:24:53:75:4b:7a:
                    6b:66:29:5f:d5:02:11:8b:d3:eb:b7:3c:ad:d9:37:
                    5f:28:a4:67:0f:4d:8b:ad:71:0a:fb:81:d8:c0:fa:
                    1b:5e:d9:20:cb:bd:66:54:53:9d:5d:40:bc:e9:a8:
                    32:86:87:29:12:b2:3f:98:27:15:74:48:ef:3d:0a:
                    1a:85:aa:0c:38:bb:b3:d2:32:50:f1:b0:95:cf:e8:
                    ee:7b:bf:50:62:7c:37:5b:82:bb:fa:41:0c:ad:bf:
                    80:ad:8a:4e:d7:a7:d1:68:69:f1:6e:53:4d:4d:ab:
                    16:f3:29:b8:8e:d4:62:ed:70:70:21:d0:30:7f:5d:
                    32:73:5e:08:2b:c5:d3:d1:c8:1b:65:4d:74:7e:87:
                    3c:0b:e3:ad:12:38:2c:d7:1e:d0:53:ac:ae:8c:0b:
                    27:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F6:89:1A:2F:BF:33:DB:4E:B9:91:11:D6:B8:0E:44:4D:EA:7D:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:25:29:00:f2:a7:3c:ae:78:4c:7f:b7:ac:10:6a:30:b3:94:
         8d:1a:53:80:eb:a9:24:1c:15:94:f0:00:68:b6:7e:43:fd:46:
         18:b3:8c:9e:f3:ba:57:94:91:fb:d3:9f:a4:75:c1:62:d2:16:
         85:be:be:1f:9e:48:ba:e9:43:90:1a:89:7d:ef:b0:e0:a9:ec:
         81:bc:e3:48:f5:d2:f9:aa:f0:6e:81:42:c0:0b:b5:bf:5f:bd:
         94:f8:0e:30:2d:a4:46:4d:43:02:f4:b3:76:ba:5a:24:92:1d:
         7b:c2:6d:86:05:2f:c4:dc:24:83:40:b3:a5:ae:1f:19:b0:c6:
         32:2a:ba:3a:8d:29:f5:01:f1:be:a3:80:58:9e:ea:f1:61:b7:
         b1:30:2b:e5:df:39:e2:53:26:c6:48:bc:34:1f:05:03:09:98:
         37:7f:98:1d:80:d0:a0:f4:64:c9:b9:4c:31:33:98:aa:8e:f0:
         f1:01:19:f2:40:a8:55:9a:61:c8:1a:b0:10:93:db:da:82:b4:
         b3:d9:fc:1d:fc:f1:c8:92:bf:e6:fb:48:55:f8:07:ff:b5:25:
         d1:aa:27:c6:29:98:f8:6d:86:43:fe:32:99:3c:5b:11:b6:c5:
         cc:ac:3e:57:09:c4:03:34:6c:34:c3:b9:fc:b9:0a:90:78:ae:
         0f:4d:f0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:29:52 2026 by rpki-client