Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7fd685c-77e9-3301-94ff-ea0639aec29d.roa
File:                     e7fd685c-77e9-3301-94ff-ea0639aec29d.roa (raw, json)
Hash identifier:          Y1xWlB8lwRsy/B0UvHxES0eqRylyZB1flXv3opPpfkg=
Subject key identifier:   C1:A8:37:0F:D8:7F:E2:CA:01:F5:06:6B:BC:D0:9E:DB:D4:1E:3C:2E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A86DBD1D66213C83BBD574F00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7fd685c-77e9-3301-94ff-ea0639aec29d.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        70.32.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:d1:d6:62:13:c8:3b:bd:57:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=006d01cb-77a9-4f2b-81b3-447fa7f4e58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:22:cf:1f:fd:e3:df:33:6b:6d:ea:17:e8:d7:
                    13:80:43:ec:ba:a8:8b:ef:cc:85:37:15:76:41:83:
                    29:62:19:0a:fa:59:13:65:09:d2:0a:d2:4b:28:51:
                    0c:31:d2:ad:1e:ce:01:40:5d:4a:d0:c6:7f:0f:0a:
                    bc:0c:13:0c:95:51:fb:93:e9:af:16:06:65:b7:81:
                    48:65:a3:93:22:f2:87:a5:56:59:51:7b:fc:3b:6e:
                    75:bc:8d:e7:f4:97:21:df:90:8d:55:01:63:8f:d5:
                    ee:fb:c1:b1:70:cd:72:74:1b:13:54:ed:b6:68:20:
                    23:8c:60:ea:89:84:ab:a0:77:cd:60:4e:06:a9:6e:
                    c6:7e:da:3e:89:23:2c:5b:8f:56:a4:c5:57:0e:da:
                    b7:62:56:11:29:fc:94:5b:79:c8:35:9c:bd:66:71:
                    27:bb:4d:a9:1e:86:60:5b:a7:d3:f2:cc:d3:b6:ba:
                    28:64:05:5b:53:ed:52:a6:40:a5:84:5b:ec:28:11:
                    f5:54:29:f6:3b:72:c1:bf:a5:44:e8:c7:38:c7:05:
                    de:80:ad:87:58:9d:3d:40:74:d3:1b:f8:9d:7f:35:
                    4d:69:1f:10:2b:86:5e:da:31:8e:53:39:29:74:b9:
                    c3:e0:a5:0b:a1:9e:46:50:07:d8:d8:fd:bd:30:0f:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A8:37:0F:D8:7F:E2:CA:01:F5:06:6B:BC:D0:9E:DB:D4:1E:3C:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7fd685c-77e9-3301-94ff-ea0639aec29d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:e4:6e:89:06:ef:42:df:36:76:ca:27:9e:e0:3f:2b:24:b7:
         37:26:a9:37:8d:14:f1:42:e2:66:8c:04:de:66:0b:1e:e1:f1:
         2f:f4:d8:90:48:14:36:10:58:c9:f2:48:5a:6e:86:77:fa:1e:
         b6:90:34:8a:f3:b8:7d:c5:4a:82:ca:69:33:59:4f:9c:af:19:
         99:92:e4:04:29:15:6d:5f:fa:a6:73:fe:0f:bd:84:08:3a:3f:
         58:50:7d:54:31:08:8a:d1:04:1d:14:ae:ed:b6:73:c7:a3:bc:
         cc:b3:44:a3:5e:4e:87:f7:3d:88:16:01:89:0e:d7:46:7e:b1:
         fd:a6:7b:3b:59:d1:a2:32:bc:00:d3:43:a3:98:a0:fc:a3:17:
         51:d4:db:91:36:0d:88:5c:7f:51:c1:7f:f5:99:e8:94:cf:68:
         ce:cb:af:b8:a4:31:b0:dc:04:9f:1d:a6:e7:ef:37:0e:40:7c:
         58:fd:55:47:c1:0c:a6:18:9c:13:35:b9:25:89:d3:e0:a4:55:
         31:47:45:85:9c:f4:30:dd:2c:52:84:2c:6c:e4:c4:e5:3c:f6:
         4d:bd:40:43:3b:a7:68:28:2f:ea:28:15:6e:5a:95:02:98:5f:
         a7:d6:12:e7:61:ef:c1:82:41:43:4b:cf:30:fa:20:40:1a:ea:
         44:41:8f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:04:18 2025 by rpki-client