Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa
File:                     dd8e5c92-820a-3d00-9890-40b0efb85734.roa (raw, json)
Hash identifier:          LvovrTvfZPRyB9/n/HpXx3PuontVWgTGAssyR3N8fKo=
Subject key identifier:   58:49:37:B5:02:38:50:8C:D3:D7:91:FA:65:F8:2E:BD:01:B0:BE:78
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D27AA4B230BB62D8583B569B0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        70.32.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:4b:23:0b:b6:2d:85:83:b5:69:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=1309a9ba-91be-4357-bd01-022b1fae73d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:bc:d5:7e:70:a6:7d:d0:d7:51:60:22:44:
                    7e:7d:d6:eb:2f:7e:1c:45:6d:5f:8b:36:39:62:fd:
                    a8:fe:99:8f:62:1b:34:fc:e1:46:b4:42:e0:f6:7d:
                    c4:3f:10:32:16:c1:a1:16:b4:4b:fb:cd:ba:52:b2:
                    d7:64:bd:63:b7:e6:f7:f0:91:28:1e:50:37:ee:91:
                    7b:15:f7:5e:c3:da:63:94:63:88:a5:8c:19:da:6c:
                    b3:13:f9:c8:4a:8d:18:1a:e6:d6:62:89:c9:6d:cd:
                    e1:32:c6:81:88:f1:66:e4:e2:62:5e:4e:ae:04:bd:
                    fa:99:a5:f4:1f:6e:85:ed:5c:b9:c4:23:0c:e8:ca:
                    07:e0:f9:e1:8a:d5:d3:6e:e9:77:40:2a:80:d3:0f:
                    98:fa:81:93:8a:8a:1b:00:6e:45:57:33:bd:13:b3:
                    a5:8b:10:0d:9c:8a:53:d8:d5:17:7a:5c:c2:db:c3:
                    c1:a8:fc:8d:5b:61:0a:a5:74:5b:44:c0:da:91:7e:
                    b6:1c:6b:96:d4:c2:a3:31:06:8d:58:07:22:66:af:
                    af:eb:2f:f8:11:f7:08:61:b4:6b:48:b3:ab:88:cf:
                    71:e2:62:87:09:96:bb:20:d1:a0:63:cc:62:20:76:
                    f0:24:4f:13:ac:b3:79:9f:29:10:30:96:bd:e0:5c:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:49:37:B5:02:38:50:8C:D3:D7:91:FA:65:F8:2E:BD:01:B0:BE:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e2:72:ff:7a:db:57:da:25:2a:db:0d:1c:67:e4:1c:ce:da:
         69:63:2b:3e:29:c5:19:3b:2b:3c:de:d5:7b:cf:bd:66:12:02:
         14:28:a8:80:d2:53:8e:35:c2:83:21:4d:dd:57:34:14:06:14:
         ae:ba:b2:48:38:42:f1:70:74:af:3e:ac:1e:54:a7:00:3e:4f:
         a0:d6:22:b0:e8:93:8d:a3:55:24:7e:6f:e1:4c:92:96:11:de:
         e8:14:3f:18:43:9a:12:1c:9e:ee:0a:f0:4d:07:06:91:5b:6a:
         77:9c:1d:95:8e:fb:5d:11:b9:58:52:b8:01:41:c0:35:95:4a:
         77:d1:d9:dd:40:66:07:5e:21:05:87:f3:71:20:f8:dd:5c:a5:
         d3:be:31:5c:a2:4a:70:94:d2:09:e8:91:9c:0a:0f:7e:dc:4f:
         48:92:fa:e5:d4:1d:2e:ac:0c:48:36:ab:52:11:0b:2b:37:df:
         6e:83:4b:e2:d5:4d:02:3f:b9:67:74:6e:f2:54:94:89:50:e0:
         e3:39:62:2f:fc:4e:cc:6d:0c:fc:fe:42:f2:73:ff:53:16:98:
         52:a7:f7:f6:73:c2:ff:c5:6a:ec:ed:1c:3e:88:98:bb:fb:31:
         4d:6c:45:05:18:3a:bc:f4:37:1c:77:52:fb:5c:e5:1e:8d:07:
         c6:04:b1:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqksjC7YthYO1abAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
MTMwOWE5YmEtOTFiZS00MzU3LWJkMDEtMDIyYjFmYWU3M2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiO81X5wpn3Q11FgIkR+fdbrL34cRW1fizY5
Yv2o/pmPYhs0/OFGtELg9n3EPxAyFsGhFrRL+826UrLXZL1jt+b38JEoHlA37pF7
Ffdew9pjlGOIpYwZ2myzE/nISo0YGubWYonJbc3hMsaBiPFm5OJiXk6uBL36maX0
H26F7Vy5xCMM6MoH4PnhitXTbul3QCqA0w+Y+oGTioobAG5FVzO9E7OlixANnIpT
2NUXelzC28PBqPyNW2EKpXRbRMDakX62HGuW1MKjMQaNWAciZq+v6y/4EfcIYbRr
SLOriM9x4mKHCZa7INGgY8xiIHbwJE8TrLN5nykQMJa94FyHNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhJN7UCOFCM09eR+mX4Lr0BsL54MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQ4ZTVjOTItODIwYS0z
ZDAwLTk4OTAtNDBiMGVmYjg1NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJXicv9621faJSrbDRxn5BzO2mljKz4pxRk7Kzze1XvPvWYSAhQoqIDS
U441woMhTd1XNBQGFK66skg4QvFwdK8+rB5UpwA+T6DWIrDok42jVSR+b+FMkpYR
3ugUPxhDmhIcnu4K8E0HBpFbanecHZWO+10RuVhSuAFBwDWVSnfR2d1AZgdeIQWH
83Eg+N1cpdO+MVyiSnCU0gnokZwKD37cT0iS+uXUHS6sDEg2q1IRCys3326DS+LV
TQI/uWd0bvJUlIlQ4OM5Yi/8TsxtDPz+QvJz/1MWmFKn9/Zzwv/FauztHD6ImLv7
MU1sRQUYOrz0Nxx3Uvtc5R6NB8YEsf4=
-----END CERTIFICATE-----
Generated at Wed Mar 18 20:33:12 2026 by rpki-client