Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46f9df07-36a0-3c65-a35e-145db3b8735f.roa
File:                     46f9df07-36a0-3c65-a35e-145db3b8735f.roa (raw, json)
Hash identifier:          G8UAazKpvyWBBVr7TK6bFvgPTatwUHzR72RjvBrGo7s=
Subject key identifier:   52:36:81:E6:F9:EB:F5:58:C4:E6:ED:9C:6C:D7:BB:D6:40:B4:8B:AC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A86DBD51A4A1F83085A2EEF00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46f9df07-36a0-3c65-a35e-145db3b8735f.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        70.32.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:d5:1a:4a:1f:83:08:5a:2e:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=37b36f64-0cca-48e0-ab60-43e8b6b32916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:3e:19:79:86:49:e5:56:b8:5a:6a:0f:e0:
                    63:45:36:1d:5a:ee:e6:79:24:a1:ca:a8:f5:cf:1c:
                    df:f9:1d:a3:16:f5:d0:c4:6f:88:14:96:3f:00:5e:
                    46:8a:0b:31:56:70:7d:9b:96:47:61:6e:bb:57:29:
                    1c:70:81:b0:f4:c2:fd:68:06:d9:6f:b6:fa:fa:3d:
                    15:65:64:2b:80:fa:f4:26:72:ff:df:99:a2:c4:33:
                    e7:ad:ff:78:6e:97:c5:13:47:56:9a:7e:2a:3f:22:
                    0d:e9:92:c2:a9:0b:c7:f6:c0:81:73:b4:61:66:26:
                    ed:67:d7:08:54:7c:92:f4:ca:39:65:7e:78:f0:e2:
                    8a:e1:f0:93:ef:94:a3:b7:6a:7d:87:76:01:a1:0a:
                    2e:63:68:58:50:f2:44:fe:de:e8:e9:5e:79:4f:bf:
                    41:1a:5e:30:75:73:5a:37:fc:15:ee:d6:8e:84:7d:
                    c7:69:2c:45:8a:ec:82:c4:3c:6f:22:3a:04:16:8e:
                    7b:e7:a1:67:11:a2:db:80:c3:4f:51:78:6d:32:4c:
                    66:e5:af:03:5c:c1:b7:f0:9f:67:60:b6:3c:fc:71:
                    60:11:4d:1b:f6:88:dc:34:29:ed:e8:ba:3c:d4:00:
                    b2:04:7c:1b:32:b9:13:5e:59:42:40:e8:12:c0:ef:
                    49:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:36:81:E6:F9:EB:F5:58:C4:E6:ED:9C:6C:D7:BB:D6:40:B4:8B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46f9df07-36a0-3c65-a35e-145db3b8735f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c4:2d:18:37:d4:24:4d:28:6b:9a:54:9f:fd:56:08:a1:95:
         31:bc:51:30:6d:e3:6a:06:07:88:71:9e:a8:48:0b:77:41:f9:
         8c:eb:26:0b:41:23:0f:cf:cf:41:a8:0b:9c:4e:53:0b:54:3f:
         f3:31:16:74:43:6b:f1:d8:90:95:0a:5b:ef:65:9a:56:f1:bf:
         69:03:c7:94:f7:47:23:96:93:6c:20:30:df:dc:3a:7f:be:8a:
         d0:ec:0e:64:44:f8:c3:5b:9c:46:4c:49:65:cc:d1:30:f2:a8:
         86:e7:35:51:da:4b:63:d2:28:50:06:fe:5d:f8:ce:5e:ce:83:
         a6:92:69:35:4a:8b:5a:c6:00:97:3c:07:84:89:75:56:65:a5:
         73:ab:14:12:b5:11:c4:27:bf:60:a3:ce:43:e5:fd:7e:fb:be:
         15:0a:13:ba:c6:61:a2:d0:ba:4a:e5:f4:fe:47:d2:68:3b:11:
         16:72:01:30:0d:53:e2:41:f3:49:fe:35:8f:8d:91:73:9b:05:
         34:a7:2e:80:50:c9:70:fc:a6:fd:78:c6:f3:1d:f2:2e:d8:ca:
         00:fb:2f:f8:db:4e:de:85:b3:f2:e0:8d:37:22:29:a2:bb:e0:
         a2:84:c9:68:68:40:ea:6e:52:ed:01:6a:86:9f:63:fb:9d:e8:
         c4:31:97:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:50:26 2025 by rpki-client