Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/07a3338e-daba-38dd-af30-905208773fd9.roa
File:                     07a3338e-daba-38dd-af30-905208773fd9.roa (raw, json)
Hash identifier:          f0xA1HQtABWwetDjv1mVGRNVwFQAQs8w+bpaVZzpdNw=
Subject key identifier:   FB:AA:E0:D8:2F:B2:3A:C3:E5:EF:D8:97:CC:14:7B:A0:8B:85:AE:12
Certificate issuer:       /CN=32a9337d-d761-426f-939a-0a770ad5bcce
Certificate serial:       010D0C9F4328584CD99CE314DDA205AC30A95300
Authority key identifier: 40:43:B0:38:F3:FC:0B:65:CB:09:AE:82:F3:8D:D3:40:38:C2:B5:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/07a3338e-daba-38dd-af30-905208773fd9.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     376
IP address blocks:        132.208.0.0/16 maxlen: 16
                          199.202.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:e3:14:dd:a2:05:ac:30:a9:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32a9337d-d761-426f-939a-0a770ad5bcce
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=6f854e93-0a53-42ce-86c5-915b2cd5001e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5f:6f:db:5a:2c:90:e8:43:f7:88:19:85:90:
                    af:4d:74:ce:de:6d:57:9e:14:5f:18:7f:bc:cb:e8:
                    8b:ec:02:eb:8d:1d:ef:61:ac:02:d5:2d:95:6e:e3:
                    5b:1e:5a:e8:1c:7f:02:2f:82:5f:5e:97:ba:7b:c5:
                    87:10:cd:3c:04:67:88:7f:21:b1:93:fb:6d:d3:4f:
                    97:d1:78:4b:ef:32:9c:98:60:2f:2a:64:b6:f5:60:
                    7b:c0:78:e5:c4:28:8c:1e:be:d7:46:d0:e4:66:1a:
                    c2:79:8c:ea:ba:7b:17:4a:f5:07:1f:51:29:d8:26:
                    66:68:f6:db:2a:12:20:e4:cb:c1:ff:e7:82:91:dc:
                    d6:d7:8f:47:86:d4:76:22:51:e1:95:ba:cc:33:f7:
                    d2:03:0b:0a:e7:82:86:db:40:e0:77:8e:80:3d:37:
                    5d:8c:64:8e:4a:b4:1b:dc:0c:a1:6c:ad:b7:57:2d:
                    94:39:67:13:02:91:6f:3e:d0:8a:6c:59:c5:9a:28:
                    22:06:61:1b:6d:91:00:60:f5:61:6c:4c:31:3a:cc:
                    1b:47:19:23:a2:24:7e:58:6e:23:c5:6c:7d:34:5f:
                    37:0a:be:ab:9f:f3:b9:7f:75:2f:84:20:ee:bd:4b:
                    c8:3d:05:03:e2:0d:a6:9a:92:f8:43:a8:b0:2c:5e:
                    83:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AA:E0:D8:2F:B2:3A:C3:E5:EF:D8:97:CC:14:7B:A0:8B:85:AE:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/07a3338e-daba-38dd-af30-905208773fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.crl

            X509v3 Authority Key Identifier:
                keyid:40:43:B0:38:F3:FC:0B:65:CB:09:AE:82:F3:8D:D3:40:38:C2:B5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.208.0.0/16
                  199.202.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5d:1e:f8:6a:5e:22:8e:6d:bb:b8:5a:1f:b0:06:af:f4:16:
         b2:59:bc:94:2f:f9:5a:7d:19:24:00:2d:1e:c0:7f:a0:0b:9d:
         2a:e3:5e:a8:92:ef:7f:07:a8:66:41:63:0f:15:a7:7a:4e:c1:
         9f:5c:27:2e:f2:aa:4e:83:f6:ff:f1:ed:a4:d0:d9:92:f4:c2:
         44:02:0f:9e:57:e5:a4:24:39:11:1d:9b:f7:86:17:4f:d5:d6:
         4f:a1:86:bd:3c:6d:45:b8:aa:70:c0:62:5f:b6:25:88:77:f6:
         66:4e:bd:f6:ef:fb:07:25:2c:77:bd:64:c5:cb:87:dc:bf:d0:
         78:98:dd:ee:ef:5d:de:61:9d:3e:95:e5:49:f0:df:b2:0e:77:
         9e:22:71:17:3c:95:61:34:71:7d:d4:ad:bb:e5:b3:b6:62:d3:
         49:7e:03:48:3e:7c:37:bc:a7:2c:29:09:64:0e:b7:4c:21:ae:
         e6:39:fb:6b:82:43:b8:f6:db:56:c0:cf:ef:9d:f9:4f:9c:1e:
         3f:ef:86:d9:92:8c:3a:b7:88:38:9f:26:e0:5f:25:92:90:bc:
         2e:cb:d7:5c:84:0e:45:0a:c3:53:28:46:d9:4e:89:e7:00:d9:
         5a:12:3e:a4:a2:4b:bd:69:37:fa:9a:bc:da:dc:18:7c:a3:cd:
         68:64:fc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:48 2026 by rpki-client