Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa
File:                     089de854-3bd0-3daa-8427-ce457804664f.roa (raw, json)
Hash identifier:          5C8KQOJv3wpOXRfvMW8mLYB8rIpKbNvMjX1/BE1z+oI=
Subject key identifier:   59:BC:BF:BD:59:AF:D7:B8:05:6D:D0:2C:2B:D5:CE:3D:DE:5D:8F:93
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EAA51BFB3F503BBEE51570900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        70.32.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:bf:b3:f5:03:bb:ee:51:57:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=beba9059-abb5-4651-ba09-508093e9a4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:43:f6:6b:70:12:3e:6f:62:d7:e1:79:56:
                    c6:38:e3:38:06:09:23:55:5a:38:2a:f4:e8:8c:e7:
                    ae:9d:de:f8:47:df:00:87:0b:e8:c0:94:82:db:b2:
                    c9:4b:f6:f1:bf:e0:6a:e5:7e:a6:a8:e3:f4:a4:db:
                    5b:f8:c4:e8:10:ce:82:ed:31:22:b4:6d:73:46:77:
                    06:49:76:b3:70:a4:c7:07:e3:be:13:68:0e:8d:b2:
                    dc:67:1c:68:6c:e4:81:d4:a1:0c:94:36:ab:96:9a:
                    76:0c:ad:33:cf:49:a6:e9:57:38:1e:dd:62:1e:ee:
                    ec:17:1e:99:dd:21:ad:ef:c0:b6:7c:b5:89:2f:a6:
                    38:99:0f:aa:bc:78:63:bf:7a:b7:fa:38:bb:bc:1c:
                    09:bd:40:35:f1:17:a2:fd:21:7f:19:c1:ef:17:97:
                    69:ed:2a:04:95:2d:e4:60:17:02:cc:0b:7b:fa:dc:
                    88:72:8f:ac:ce:8e:ea:e1:93:23:e1:ed:a5:0b:f9:
                    5d:fc:ad:bf:5f:fd:e6:a1:7e:7f:bd:85:44:80:ab:
                    1d:3c:9c:7d:38:e5:1c:25:5a:d0:b0:82:64:68:56:
                    1f:91:22:fe:49:d1:27:38:f5:24:0c:d2:c3:79:f3:
                    1a:13:50:3f:ac:69:64:93:90:fe:fe:8c:7e:d9:04:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BC:BF:BD:59:AF:D7:B8:05:6D:D0:2C:2B:D5:CE:3D:DE:5D:8F:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d8:85:ec:9e:07:74:59:0e:8e:c2:ab:e3:4f:ca:1f:df:27:
         61:2a:2d:56:f3:ea:ba:be:ec:f0:63:b4:b9:4e:eb:1a:ab:97:
         ea:2a:ba:10:68:60:47:16:eb:3c:3d:c5:bd:cc:f1:7d:57:91:
         8e:21:f8:25:f3:52:56:33:57:54:de:dd:af:34:f4:b9:55:a3:
         23:60:00:06:6c:be:8e:1a:88:82:c9:95:13:fc:4c:3f:0e:28:
         01:e7:c8:d9:35:e7:78:f5:4e:34:89:dc:54:06:55:3c:b7:be:
         f6:9d:bb:fb:69:85:9e:2f:cb:f9:91:08:ee:7f:df:35:52:95:
         31:06:7c:b1:17:26:cc:cf:4b:a9:ec:a7:19:f1:53:bb:85:46:
         89:c9:39:4d:a3:21:5e:c5:13:f2:96:59:22:f1:eb:10:42:34:
         ad:f1:c0:d6:60:f3:90:49:ea:fc:79:dd:69:5a:63:5f:9a:cd:
         da:16:32:d6:a8:3c:d9:96:55:12:47:a5:a0:22:a5:90:ad:4f:
         fd:d6:29:2f:77:8b:a8:98:1f:79:87:cc:96:c6:a3:96:7c:b5:
         05:33:fc:26:a9:b6:83:3d:3b:31:9a:a4:e9:55:8f:94:b5:cb:
         ab:f3:73:eb:43:cb:b1:72:7e:82:52:51:56:c1:48:82:e1:2f:
         d2:88:45:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:45:48 2026 by rpki-client