Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/09ed4c48-3657-3af7-9906-5c76f5968208.roa
File:                     09ed4c48-3657-3af7-9906-5c76f5968208.roa (raw, json)
Hash identifier:          nK93T59oLB70oA6tPTDk01OUpEPXX3bw/7Chb5inrzs=
Subject key identifier:   CB:4D:E4:E3:C8:C5:0A:C7:75:9E:63:99:3B:F3:24:0D:59:9C:5D:FC
Certificate issuer:       /CN=13f2987b-65e9-4b0f-9061-f324b366fd94
Certificate serial:       010D0C9F4328584E921F9D79D0147B351185CD80
Authority key identifier: C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/09ed4c48-3657-3af7-9906-5c76f5968208.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     32425
IP address blocks:        70.40.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:9d:79:d0:14:7b:35:11:85:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f2987b-65e9-4b0f-9061-f324b366fd94
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=e5f67ca9-a7b1-4b71-9670-5bc9fc26b280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fa:50:4a:4d:d2:8a:86:b6:2d:a5:fa:7a:32:
                    18:85:99:ea:e1:72:ec:c8:ef:09:05:95:13:b6:27:
                    19:10:dc:48:ba:58:6d:48:aa:24:62:a3:03:1a:b5:
                    22:cb:b4:70:2a:3e:b5:fd:7b:d2:b5:fe:dc:5b:51:
                    74:f0:67:80:91:f2:ef:e1:d0:3f:00:1d:80:c7:15:
                    b2:9d:b4:7e:7a:eb:ce:7b:d9:9c:1e:68:db:7d:48:
                    0d:04:55:c0:55:95:ee:e1:e5:3b:92:5b:dc:20:28:
                    d7:e0:bc:1a:81:9a:a2:96:0f:7f:0f:99:87:6e:96:
                    ee:f5:81:59:05:1d:68:a0:30:a4:22:ef:fb:55:5f:
                    e2:e7:63:b8:3c:97:cf:79:92:84:51:a8:af:b0:a0:
                    cf:39:20:eb:a0:ca:cb:db:b0:96:56:9a:de:e0:79:
                    3b:d3:37:dd:89:8d:bd:60:9c:f9:cc:86:f1:ff:ab:
                    19:08:21:49:0f:ff:69:c3:17:ee:71:92:89:7e:1c:
                    ee:d3:b3:21:6a:54:49:a3:0e:6d:1c:11:f2:e4:45:
                    67:4e:26:a9:40:3e:7b:a1:73:b7:6b:6a:1c:ed:96:
                    2c:f7:df:14:0c:1f:78:9f:03:20:b1:66:82:da:71:
                    09:1d:a9:c5:32:c9:eb:bb:c7:f2:0d:56:22:85:f6:
                    5b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4D:E4:E3:C8:C5:0A:C7:75:9E:63:99:3B:F3:24:0D:59:9C:5D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/09ed4c48-3657-3af7-9906-5c76f5968208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl

            X509v3 Authority Key Identifier:
                keyid:C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.40.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:70:6d:be:b5:2a:51:b3:15:d9:be:ab:b5:57:69:42:b7:b9:
         24:cf:d1:53:b7:6f:68:8a:83:ff:24:36:13:8f:de:04:6a:f4:
         d1:6e:cf:41:44:10:36:20:b3:e0:e0:d6:69:0d:96:82:e8:a6:
         6f:ea:11:6e:3f:a2:b9:e5:1c:30:3b:df:51:b9:fc:d8:61:5f:
         22:d1:3a:3b:62:64:a9:76:e8:68:9c:32:c3:09:eb:d4:f2:4d:
         e8:e8:7e:70:1a:5a:ea:c3:fa:8b:1a:04:76:4f:6f:0d:ed:97:
         e2:af:f7:58:52:e9:43:d6:ed:62:0b:f5:7e:58:85:7d:63:79:
         0a:21:72:6e:19:a8:c1:56:57:59:b9:c9:0f:4e:5b:47:9f:da:
         38:93:dd:92:05:f7:d1:bf:7e:21:ba:ba:6e:20:2c:a4:5c:3a:
         aa:c8:c6:fe:05:76:2f:a8:bd:4a:2f:9d:b3:ab:4a:a6:74:75:
         4c:33:ab:b9:5a:4b:46:9b:79:7f:6d:cc:ba:f2:70:b9:a8:77:
         ee:ac:e4:8b:46:14:10:0d:ea:32:5d:4d:e9:e4:48:f1:60:50:
         0b:de:9f:79:fe:c4:cd:98:60:48:f0:df:9e:e5:3c:8a:39:c2:
         85:bb:71:7b:cc:5b:8d:88:4b:58:9e:d7:4e:3d:8b:a6:98:71:
         fc:71:a3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:06:37 2026 by rpki-client