Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e89aef26-d14a-3a88-9a13-31517d66936d.roa
File:                     e89aef26-d14a-3a88-9a13-31517d66936d.roa (raw, json)
Hash identifier:          o9ijcttUaMff9dJc2NdzmwCwihXmiwaM777hs+ToTTA=
Subject key identifier:   8B:C2:CF:0D:3A:C7:F6:52:82:07:ED:F4:1C:23:4F:A9:1E:1E:77:1F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEF55855DF1BEBFD4BBF9E300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e89aef26-d14a-3a88-9a13-31517d66936d.roa
Signing time:             Thu 21 Aug 2025 23:11:16 +0000
ROA not before:           Thu 21 Aug 2025 23:11:16 +0000
ROA not after:            Thu 20 Nov 2025 00:11:16 +0000
asID:                     31898
IP address blocks:        132.145.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:55:85:5d:f1:be:bf:d4:bb:f9:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 21 23:11:16 2025 GMT
            Not After : Nov 20 00:11:16 2025 GMT
        Subject: CN=4f83fd4f-d12a-49e8-b3c8-555b5e2375b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:78:a6:2b:f6:01:b4:27:92:22:9d:06:78:
                    38:3e:1f:18:6e:dd:6f:7d:68:56:b6:f5:06:f3:e5:
                    fc:a6:f0:81:49:3c:18:97:fe:22:ab:1d:a0:5c:8d:
                    7e:57:5f:be:63:07:64:2b:65:be:c8:b8:59:0f:f1:
                    94:b0:a8:d0:78:2d:d4:5a:d1:9e:5f:67:54:cf:27:
                    84:66:5c:2e:58:e8:89:6f:d2:47:0d:a5:84:3e:14:
                    fa:af:3b:da:cf:24:c5:c0:aa:60:7a:8b:ee:48:06:
                    59:f4:96:f4:e3:b4:e8:c3:35:6a:25:0c:ff:c8:0a:
                    82:02:d3:99:dd:de:e5:26:c7:10:d9:4d:95:c8:2b:
                    c0:07:71:0b:f3:50:4e:94:42:a3:ae:af:2d:7b:40:
                    f7:67:0f:23:fc:9e:87:76:a9:60:d6:fa:3f:7a:03:
                    88:9a:77:62:ee:c7:dd:06:3e:77:28:98:b9:88:5e:
                    e0:b8:ec:f2:ab:05:94:03:f1:ab:8d:1e:9e:cf:45:
                    c7:dd:1b:a7:bd:6d:83:76:b2:69:7c:e4:54:a3:52:
                    eb:0b:00:e3:56:22:39:78:e4:80:6c:0c:6f:ba:7c:
                    c2:84:e1:46:6a:e6:d0:69:50:1a:81:35:1b:2a:4f:
                    b5:b0:0f:23:c4:1b:94:c1:70:f8:1e:40:66:ec:af:
                    4b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C2:CF:0D:3A:C7:F6:52:82:07:ED:F4:1C:23:4F:A9:1E:1E:77:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e89aef26-d14a-3a88-9a13-31517d66936d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.145.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:1e:3c:d1:88:ae:a1:0a:4f:95:f9:44:19:38:c8:05:6e:2e:
         85:58:02:d5:bd:7e:94:c4:eb:c7:dd:c2:17:99:6d:0f:df:95:
         f8:9d:4d:c0:f1:09:5a:3d:e1:9b:58:70:6b:a0:3e:c0:b5:bb:
         f5:1c:f5:5e:fb:c3:d3:34:e1:75:57:c6:80:71:8c:71:dd:15:
         04:ce:4d:77:cf:6e:f7:af:b0:af:0f:61:b5:4a:fe:dc:3e:c3:
         27:47:f5:0c:93:b8:34:0e:17:24:7b:e6:f7:04:d2:48:b7:d4:
         6d:d8:41:09:6d:98:50:6a:1b:ee:99:8a:c1:30:71:4d:7e:2a:
         80:b6:d3:90:29:01:68:e4:62:e3:6f:91:ca:40:7e:f0:0a:2b:
         20:e2:79:ec:e9:16:97:42:6b:4d:8d:e0:e5:4a:21:41:6f:e6:
         42:71:d9:5c:fb:d5:6e:64:c8:77:eb:0a:1b:5a:33:4c:25:4e:
         24:a0:f9:9a:f2:f2:cc:0a:00:bf:42:c1:d5:0f:66:61:de:da:
         ad:d3:8b:ca:7e:19:da:99:cb:03:69:ef:a7:8c:33:ac:0b:eb:
         b1:3e:b4:ab:8f:51:64:f5:23:3c:79:db:37:bf:68:eb:67:ca:
         70:18:5d:58:58:32:f8:4f:9b:27:02:97:48:31:23:16:17:97:
         45:23:2b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:18 2025 by rpki-client