Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/32baef5c-5cf4-364b-ae83-480a9e496e10.roa
File:                     32baef5c-5cf4-364b-ae83-480a9e496e10.roa (raw, json)
Hash identifier:          rSQ2qmeM50x/Pl5uCpaKarjq2NqvXTCT6mf1xfFX/sQ=
Subject key identifier:   DF:A7:20:99:67:54:BC:C3:A0:BE:D3:A0:C4:69:7F:F8:6E:37:A5:10
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584E9BE5169D7BC2C02D13D1E2E0
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/32baef5c-5cf4-364b-ae83-480a9e496e10.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     7992
IP address blocks:        108.162.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:16:9d:7b:c2:c0:2d:13:d1:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=7e7fe200-90cf-4151-ac4b-def01bbc84a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:4f:8d:91:a5:9d:45:bd:4f:51:f9:c0:93:
                    e7:94:43:39:97:ec:e2:e0:40:ca:78:7b:d5:79:18:
                    2f:8f:cf:7b:22:0a:0a:93:f8:d4:e3:74:a9:5d:e4:
                    9c:75:ba:a4:96:f3:20:77:ee:d7:f9:ad:a1:91:25:
                    31:c1:c9:24:ef:2c:12:c7:63:ab:fe:ed:b4:ba:a2:
                    b4:cd:2b:d8:22:ff:33:9f:b8:90:ff:00:bf:62:99:
                    70:bd:78:19:b9:af:0b:bc:43:3a:b5:7b:2e:0c:23:
                    ed:95:9d:e3:e6:e8:e3:27:d1:2c:1c:01:4b:a0:55:
                    01:72:af:62:1d:97:cf:60:73:1d:26:7a:a4:2d:db:
                    8b:df:26:d5:6a:7c:14:ae:77:38:70:49:bd:d5:3a:
                    d4:77:73:38:91:2e:51:36:9e:6d:b9:2b:d8:82:76:
                    7d:78:0d:0c:bc:73:af:03:54:e2:ad:05:f2:82:e9:
                    b2:9b:37:61:46:4f:a0:5c:15:bf:2d:37:1a:ae:0f:
                    04:a2:0b:3c:4e:12:23:38:84:cc:80:51:2e:41:e6:
                    52:69:46:c4:8c:e4:41:19:92:48:07:a3:7e:04:0a:
                    a7:ea:2d:bc:9a:75:13:d4:7f:da:a3:3a:25:73:8e:
                    40:01:d2:3f:6d:c3:f0:50:c3:86:cb:2a:66:21:55:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A7:20:99:67:54:BC:C3:A0:BE:D3:A0:C4:69:7F:F8:6E:37:A5:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/32baef5c-5cf4-364b-ae83-480a9e496e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:82:9a:8a:84:60:75:8c:0b:0b:1e:9c:45:3f:7b:cc:ad:10:
         fd:ad:a9:6f:e9:74:be:2e:8f:68:1d:95:8b:f8:9a:d4:cf:1c:
         39:27:b7:d0:db:e7:20:cd:cc:75:fc:82:25:ac:ea:73:d8:b7:
         07:4e:dc:c8:5f:0c:1a:4d:4c:63:6e:b9:18:ce:4b:54:89:8e:
         58:34:21:d6:97:16:8e:5d:b2:28:b1:31:d3:4a:8d:f7:56:3f:
         f8:fa:75:30:ca:58:9e:7b:fc:8f:e9:86:7b:71:2b:99:9f:41:
         95:a7:27:6c:fc:e4:7a:7a:a5:3a:f7:bd:22:14:4f:c1:0e:e4:
         a4:a6:dc:21:8b:c5:5a:02:39:c6:c1:c2:8c:0d:63:38:5c:05:
         47:6b:e0:af:bc:d3:95:b4:6d:63:2d:98:cb:c0:50:67:16:eb:
         aa:c2:37:70:51:ba:7e:cb:dd:bf:8a:29:96:45:d9:f4:dc:b6:
         8e:c8:a5:1d:02:46:6c:a0:3f:77:c3:44:9f:05:e9:11:02:1f:
         26:4c:5e:1b:13:79:60:61:b0:e0:eb:45:77:08:cb:c3:5e:39:
         b8:92:a5:1f:3e:f9:fe:43:39:b3:48:3a:91:c3:e4:e8:2b:01:
         2c:b4:73:38:81:2e:ff:46:ea:b7:64:41:7d:44:17:04:c8:4f:
         78:2f:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:02 2026 by rpki-client