Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/1215e6a7-9875-31fc-9b91-d817b58bd7ae.roa
File:                     1215e6a7-9875-31fc-9b91-d817b58bd7ae.roa (raw, json)
Hash identifier:          FsPjdb1r6FheHbdNNbzoCwE4CzzcuZP/Zw+3mpiviyc=
Subject key identifier:   16:E8:18:0C:E3:7A:7C:31:6B:12:F5:4C:DC:A8:8D:60:D6:FB:E0:2F
Certificate issuer:       /CN=13f2987b-65e9-4b0f-9061-f324b366fd94
Certificate serial:       010D0C9F4328584F1E2CFF451622C9C0006C8D00
Authority key identifier: C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/1215e6a7-9875-31fc-9b91-d817b58bd7ae.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     32425
IP address blocks:        70.40.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:ff:45:16:22:c9:c0:00:6c:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f2987b-65e9-4b0f-9061-f324b366fd94
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=75ddad76-1e76-424d-af36-2851ad7aaef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:40:9a:91:83:c7:c2:c3:df:7d:73:1b:20:
                    7c:14:4e:ae:6c:4c:b1:08:e1:33:c3:ce:20:25:91:
                    f5:22:95:5d:a2:bc:83:54:0c:61:70:14:77:de:a2:
                    a6:60:71:99:57:90:c7:40:d4:1b:63:cb:09:28:39:
                    b7:63:1f:8e:8a:3e:6d:55:7b:74:c2:1e:e9:0f:22:
                    03:e1:db:95:c9:4b:a8:ea:04:c4:a3:e4:d5:26:9c:
                    02:07:c2:7c:1f:f6:36:b1:26:11:18:0f:93:92:fe:
                    e3:86:24:1a:d2:78:41:e4:95:f2:52:b6:50:34:a1:
                    76:b1:2d:be:27:07:a0:f6:ab:d1:1d:f9:38:c1:28:
                    c6:29:c1:85:f8:9e:d3:f6:44:63:4a:2d:aa:13:3d:
                    94:fa:df:ac:f5:8f:24:8f:aa:2c:af:f3:df:ea:a8:
                    a0:9a:90:2f:8e:78:74:ed:4b:6d:6f:10:e2:dc:d5:
                    75:b2:32:e8:4d:6a:c1:01:21:20:68:e6:eb:74:6e:
                    20:f5:c6:4f:62:d6:25:4b:fc:8d:e3:85:7a:75:5f:
                    87:58:a1:37:03:4c:eb:6c:da:e2:c8:5d:e2:6c:87:
                    7a:1a:1d:0d:f0:00:b5:ff:23:14:87:63:f5:d3:dd:
                    bc:14:5d:c1:a3:29:ca:62:cd:35:be:1e:6b:71:27:
                    17:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E8:18:0C:E3:7A:7C:31:6B:12:F5:4C:DC:A8:8D:60:D6:FB:E0:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/1215e6a7-9875-31fc-9b91-d817b58bd7ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl

            X509v3 Authority Key Identifier:
                keyid:C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.40.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:cb:b6:df:c4:ec:e7:23:f1:27:a3:3d:79:9b:2a:1f:36:38:
         2e:57:ca:4e:69:2f:95:8f:e7:10:44:23:b6:fe:5c:06:b7:22:
         36:92:00:3a:42:6c:7b:01:26:f5:21:32:59:22:ab:a3:fe:cf:
         5d:96:cb:04:50:da:e9:dc:b1:0d:8e:f6:d0:d1:3d:f9:58:89:
         bb:df:80:a8:8f:37:52:d1:e2:f5:20:e8:be:a4:b8:c6:32:2b:
         a1:36:b0:c1:98:3a:10:45:cf:c4:dc:69:d2:2a:c4:90:cd:ba:
         6d:83:9e:3b:24:49:ae:a0:d2:dc:08:b8:cc:4b:74:c3:9f:c3:
         5d:43:cc:36:92:54:d0:31:82:68:a6:8c:b0:12:ba:e6:ca:05:
         13:dd:23:95:32:f7:ee:57:40:ce:e0:7d:c4:4c:e1:ef:6d:ea:
         d7:99:a5:f6:df:3f:70:ce:d8:3b:d9:1c:d8:00:da:9b:11:2c:
         f7:37:1c:29:ed:99:11:df:2e:4f:44:df:57:ed:2f:15:a5:9a:
         3c:47:99:5d:f7:56:c0:10:00:76:bb:7c:4e:2c:6b:c8:24:fb:
         bc:ac:a7:40:9e:f5:35:02:0d:24:3e:35:e7:35:4c:c3:21:a3:
         13:af:48:aa:57:8f:32:35:fd:cf:ad:53:3c:3d:4f:15:a2:19:
         7d:d7:bd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:17:44 2026 by rpki-client