Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/32ac4ea6-c208-3091-8ada-3b8a7d59ec18.roa
File:                     32ac4ea6-c208-3091-8ada-3b8a7d59ec18.roa (raw, json)
Hash identifier:          Uc83tC0u7h0TQIOJh1q9TyOhAEXilVMBShIE3eFwlIs=
Subject key identifier:   91:A9:BD:DA:48:C7:8F:BD:A0:A6:8E:E6:63:74:09:9E:19:06:29:C8
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F4328584E9EAFE64AACD014CE7BDA7424
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/32ac4ea6-c208-3091-8ada-3b8a7d59ec18.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     396026
IP address blocks:        162.211.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e6:4a:ac:d0:14:ce:7b:da:74:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=c261ef4b-4ec1-4148-b88d-b024e8295a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f5:56:45:42:d6:cd:bd:96:9e:39:fa:92:54:
                    e3:3c:c9:7c:a5:26:18:a1:84:84:c8:84:28:cb:ff:
                    0e:97:48:b5:68:26:6d:2b:a5:90:4d:ab:eb:93:70:
                    09:80:ff:da:77:bd:49:3c:c7:d9:ed:9a:0e:90:3a:
                    88:d0:b6:80:2d:0b:28:ec:06:f5:a7:f7:bd:2f:ba:
                    c1:52:c7:f3:c4:98:8f:e8:bc:c1:b2:8c:51:0d:ba:
                    ba:80:ae:79:d2:e4:bd:58:1d:aa:71:f0:79:39:e9:
                    0d:52:1b:7a:b1:01:b3:d4:dd:90:f4:a3:47:a6:4b:
                    10:04:ee:53:ed:0b:2c:90:f7:e3:31:7e:56:ef:42:
                    43:8c:39:30:f0:75:83:2b:8b:28:3d:0c:97:f3:2b:
                    bf:29:dd:61:dc:0b:c5:3f:5b:3f:05:c0:3c:67:e7:
                    e4:83:87:75:2d:19:2a:1c:f7:ac:99:f1:33:11:cf:
                    7f:75:54:e1:76:8c:16:e6:35:fc:f8:6d:5e:8f:0f:
                    05:b4:8a:08:2f:30:7f:fd:e6:3b:9f:ab:2f:11:a8:
                    68:e9:10:e9:f0:92:9e:62:dc:00:ee:f2:72:f9:c0:
                    a0:51:0f:ed:a5:26:2b:70:0c:15:5d:fa:b0:49:ac:
                    5a:19:0a:7b:7a:45:40:3a:c2:0d:fe:e1:d0:0b:3f:
                    18:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A9:BD:DA:48:C7:8F:BD:A0:A6:8E:E6:63:74:09:9E:19:06:29:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/32ac4ea6-c208-3091-8ada-3b8a7d59ec18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:2f:97:49:60:41:53:fe:c4:99:3d:2f:da:5b:68:ff:a0:9f:
         fc:5e:04:fb:67:84:3b:50:8a:63:48:dc:e6:0c:c8:ab:81:69:
         d6:44:f0:a2:02:75:9e:c9:cb:2e:91:4e:b6:e2:6e:1a:b2:d2:
         df:72:09:ca:cb:d7:52:3f:21:dc:a7:4d:96:55:8e:d5:65:56:
         aa:9c:7f:b3:bc:2a:a3:0c:20:f7:6a:d6:76:1f:9b:0f:04:14:
         1a:41:54:67:b9:ae:e6:b2:d5:5c:12:e1:84:cd:e1:bc:83:3d:
         dd:7f:ea:35:87:46:f4:ff:53:ed:bf:50:10:ac:5c:66:9a:3a:
         91:d8:0c:d8:18:40:d5:3e:a8:da:8c:dd:3c:51:e5:ca:8a:f9:
         de:f2:29:64:b2:26:7a:fd:8c:75:19:ce:43:9b:cd:b4:b3:b8:
         f1:4f:ca:f0:6e:4e:c5:42:65:03:1c:ff:44:b4:4f:72:13:8e:
         30:bf:3a:d9:00:1b:b3:b6:f6:9a:9e:f5:e4:e2:41:10:22:e3:
         4f:24:8b:8c:5e:05:47:6b:77:82:b6:92:48:14:82:65:e2:3c:
         dc:ae:53:15:f3:20:3e:e8:78:8e:db:2f:72:8c:d5:be:2e:43:
         83:97:4c:42:bc:fd:80:b2:9a:b2:ce:14:95:4c:27:23:9a:41:
         72:bc:6b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:12:11 2026 by rpki-client