Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/1215e6a7-9875-31fc-9b91-d817b58bd7ae.roa
File:                     1215e6a7-9875-31fc-9b91-d817b58bd7ae.roa (raw, json)
Hash identifier:          JqlG5ndasEKGvbF3bZ1YAvX4MJdSjmPV+zffp7+f/OU=
Subject key identifier:   ED:7B:E2:49:F7:AD:F4:58:CA:94:C7:87:E1:E8:89:85:BF:99:1A:22
Certificate issuer:       /CN=13f2987b-65e9-4b0f-9061-f324b366fd94
Certificate serial:       010D0C9F4328584D9B8564B294C1370EC53BD880
Authority key identifier: C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/1215e6a7-9875-31fc-9b91-d817b58bd7ae.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     32425
IP address blocks:        70.40.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:64:b2:94:c1:37:0e:c5:3b:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f2987b-65e9-4b0f-9061-f324b366fd94
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=77dbbdc7-14be-4e19-8c8b-10b93fffce13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:57:56:00:f7:0f:f4:13:c1:d9:7b:18:e8:
                    83:aa:fc:44:71:db:19:ec:68:14:ab:9c:5c:cd:ee:
                    93:60:12:9e:a7:26:f3:3a:ee:41:5a:fe:51:db:f9:
                    87:04:4a:83:a0:8f:fe:8c:cb:39:e4:f4:50:77:55:
                    47:d9:90:db:df:91:62:d5:17:53:b2:e3:ce:10:8c:
                    94:6f:3b:c1:34:b9:d8:50:30:cb:cd:7e:ab:90:e1:
                    92:e7:c4:60:6a:40:8a:18:19:bf:55:de:03:49:28:
                    22:e8:7f:19:7c:3f:0a:2a:10:c2:d6:d5:e0:2b:07:
                    02:48:10:12:fc:5c:d0:7b:19:b5:be:22:bb:59:8f:
                    e5:18:c0:29:a9:0e:5d:a7:b1:65:b7:6c:54:39:6c:
                    e3:d5:ed:3a:4d:73:a9:9e:fb:64:bf:b9:00:38:06:
                    00:6e:51:07:b3:91:30:c6:c5:e5:48:7e:ab:5b:d3:
                    6a:8d:ca:58:1e:fa:16:db:67:13:d5:24:e7:6d:4a:
                    ca:31:4c:0d:63:1e:a7:88:03:c6:b6:5f:ba:59:9c:
                    8f:1f:27:2d:e4:93:ba:1c:cf:dd:55:f3:4f:09:b5:
                    b7:dd:23:3a:58:3a:e6:5c:9c:0e:bc:8b:7e:68:f1:
                    e6:93:f7:2d:8e:cc:78:ed:31:f0:7f:37:a3:42:8e:
                    c6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7B:E2:49:F7:AD:F4:58:CA:94:C7:87:E1:E8:89:85:BF:99:1A:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/1215e6a7-9875-31fc-9b91-d817b58bd7ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl

            X509v3 Authority Key Identifier:
                keyid:C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.40.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f3:0c:5d:76:ac:8d:ef:7c:df:1e:ac:2f:9d:c6:6b:66:5e:
         13:94:03:9a:b9:59:c6:2e:06:7e:11:f5:4a:c6:c8:8e:d3:39:
         5a:08:a2:f7:c6:9d:0e:e6:1c:56:c4:96:9d:71:f5:df:43:69:
         5c:bf:71:98:bf:dd:89:90:8b:9b:ae:69:ab:f5:38:fa:79:51:
         c6:d6:cd:75:23:21:de:1a:63:35:1c:de:29:12:0f:80:6d:24:
         0c:a4:06:81:60:45:2c:03:12:e2:b0:22:71:4f:f4:04:1f:32:
         5b:5d:8a:9e:64:3c:3c:73:ea:bc:2b:30:4b:b0:50:d8:e1:50:
         7f:ba:7c:a4:db:90:8e:9f:2c:4f:e1:64:f4:d2:00:8d:2d:c2:
         7f:7b:0d:85:d6:08:43:27:e9:32:dd:3b:ae:66:fc:e5:fd:71:
         ef:1e:aa:7b:06:43:68:d5:3c:40:6b:4a:21:d6:25:8e:ce:b2:
         8f:0a:64:7a:16:ef:16:57:d1:95:ce:6d:cf:db:43:90:e9:03:
         92:a0:2e:3c:cb:a8:e8:da:76:84:40:bd:1e:45:34:9d:58:c4:
         a4:95:d5:db:ad:8a:b6:b8:ef:46:0e:12:74:54:63:3e:91:d8:
         0f:d8:74:2e:a9:90:93:9c:eb:f7:07:5d:a0:b2:fd:63:21:cc:
         de:4d:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:29 2026 by rpki-client