Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/44babac3-983a-3a34-ba6c-38248ce2262f.roa
File:                     44babac3-983a-3a34-ba6c-38248ce2262f.roa (raw, json)
Hash identifier:          tOv1E2oiQenrE4wh5BAm0c0lsivXg8XQzKflUTwA51c=
Subject key identifier:   95:BD:C9:53:7A:46:F1:5F:F4:AA:7B:7C:E4:55:3C:2F:78:E4:1E:4C
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584CEE8CBAF60700BA76B9BB4080
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/44babac3-983a-3a34-ba6c-38248ce2262f.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     812
IP address blocks:        64.201.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:ba:f6:07:00:ba:76:b9:bb:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=0176e251-91bd-420d-ba5e-4e239e8a243d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:14:d5:3a:e2:44:23:e3:d6:ea:a5:6d:16:
                    f0:9c:3e:6c:0a:30:4c:3b:3a:c9:f4:04:a4:27:9a:
                    e8:f7:7c:73:cb:14:6f:68:82:7c:d8:10:b4:cf:d6:
                    0e:d0:f0:90:6d:a7:61:b0:11:48:d5:95:f5:14:bf:
                    77:7a:6a:c3:95:83:2b:8e:15:72:b5:93:37:90:14:
                    8d:15:df:aa:99:6e:3d:d0:fb:fa:9c:19:9d:f4:ea:
                    49:49:bf:41:af:e9:58:84:9b:f5:43:d3:04:b8:96:
                    0f:76:07:e4:b9:0b:0a:45:f0:0d:08:78:c7:39:7c:
                    6c:8d:60:52:b0:07:56:89:83:98:0e:bc:0f:32:65:
                    2c:73:f9:3a:bd:dd:6b:49:32:79:b1:2a:55:81:c6:
                    1d:4c:99:4c:7f:d6:f5:06:c4:64:6f:42:b9:b7:81:
                    57:06:df:54:5c:8c:ba:38:8c:8d:c6:ad:10:13:e7:
                    38:d3:09:bd:ac:a7:bf:12:0d:38:3b:37:c3:32:76:
                    98:17:40:2e:ec:b5:2e:75:5c:df:07:08:5a:ec:91:
                    65:59:11:ca:9e:e9:fb:94:f6:b6:de:4b:ea:90:86:
                    ea:a2:43:f1:89:41:4c:e6:58:08:fe:29:cc:7e:b7:
                    f9:20:4b:27:3b:08:0e:6e:15:a5:9b:89:7b:17:23:
                    54:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BD:C9:53:7A:46:F1:5F:F4:AA:7B:7C:E4:55:3C:2F:78:E4:1E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/44babac3-983a-3a34-ba6c-38248ce2262f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.201.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:94:21:9e:56:28:a3:f0:97:ea:4d:86:59:d6:78:13:39:3a:
         4b:bc:04:2f:8b:25:0c:41:2a:52:b8:89:ad:8f:76:d1:68:d1:
         55:84:60:37:7f:ee:18:3b:09:9d:14:c1:ae:1d:d1:c1:5a:7f:
         01:42:75:5a:7a:ec:1f:d2:7d:27:cc:d3:ba:57:87:a4:9d:de:
         33:97:1f:26:d9:1b:72:82:41:6c:18:97:42:13:0c:cb:20:bd:
         b1:0b:c4:b2:1a:16:8a:b5:0a:27:56:93:40:41:97:d4:bb:83:
         40:38:22:44:8a:af:9c:76:ce:9a:1c:e7:3e:9b:76:22:82:e1:
         66:f4:11:19:ba:e8:49:e0:1f:6c:f5:08:23:37:05:08:53:6f:
         9b:24:46:e1:2a:dc:c5:7d:ab:e7:7c:69:56:87:47:ca:a4:a2:
         aa:9e:b5:72:bb:d1:ec:6f:9f:a2:e4:9f:bb:db:aa:40:0d:98:
         24:83:11:50:62:ea:d3:9d:24:bd:57:d1:41:6a:de:2c:47:85:
         39:e0:fd:5c:5e:0e:f8:1c:a1:00:7b:a1:3e:69:6d:95:18:a4:
         c1:6e:0e:0b:94:37:e1:16:4c:5f:4e:34:37:8a:a2:9f:3b:1e:
         a7:17:8c:c2:eb:53:64:47:a8:70:89:6d:e8:8b:9a:e5:ea:26:
         62:67:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:53 2026 by rpki-client