Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/fb1845ef-99c1-3cc1-ae91-81646260c4c7.roa
File:                     fb1845ef-99c1-3cc1-ae91-81646260c4c7.roa (raw, json)
Hash identifier:          NXT4VENc+USkQ248KeWffPNw4RXwgnF3H+fnQ813TwM=
Subject key identifier:   1E:0F:B6:60:82:45:85:35:68:A2:0C:02:25:DD:DF:9D:7C:29:42:9F
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584E1B7987D5413342176CCCD300
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/fb1845ef-99c1-3cc1-ae91-81646260c4c7.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     2686
IP address blocks:        32.139.235.0/24 maxlen: 24
                          32.139.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:87:d5:41:33:42:17:6c:cc:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=00960d03-946c-493a-9ae1-f2eccdffb680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5c:26:5a:f5:14:e6:a9:42:11:e3:7f:33:9e:
                    e2:bf:24:da:c4:c6:45:82:7a:8c:07:a6:e4:19:97:
                    e7:38:5c:3b:8e:20:78:50:c0:90:8f:79:a5:a0:ae:
                    27:57:3f:59:fe:8d:eb:9d:f6:30:19:25:17:1a:0c:
                    d4:9e:1c:f2:19:c2:0b:bc:ca:da:0e:d6:bf:7b:e8:
                    43:09:1c:10:d6:2d:4b:06:2a:b2:80:67:df:8a:65:
                    ce:11:96:91:34:74:06:44:23:cc:f8:a2:99:37:7c:
                    2e:4d:2c:c5:56:0c:10:1a:f7:9b:03:a4:99:4a:e3:
                    05:66:98:16:e8:39:7b:8c:cc:b9:a1:40:f1:b9:0b:
                    9c:2a:95:fa:e4:0b:d1:e7:0d:64:a1:76:35:7d:5d:
                    cb:78:1e:3b:cf:09:3e:35:78:9b:41:de:69:f0:f0:
                    ac:5e:8f:f9:40:16:16:e1:07:a9:b0:4e:27:af:d1:
                    25:e2:05:30:12:5e:98:0b:ab:5a:95:b0:9d:92:b8:
                    da:cc:21:06:c6:75:84:ff:72:21:3c:ac:f6:4c:91:
                    44:39:b7:32:96:bc:a0:01:6e:f3:9c:12:06:39:2f:
                    e6:ef:18:94:fb:2f:f7:d1:91:6e:a6:e9:c7:6e:38:
                    5c:41:5c:b3:50:1a:47:62:1a:71:10:c2:1d:90:70:
                    c3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0F:B6:60:82:45:85:35:68:A2:0C:02:25:DD:DF:9D:7C:29:42:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/fb1845ef-99c1-3cc1-ae91-81646260c4c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.139.235.0/24
                  32.139.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:89:34:1e:60:d4:5d:76:1c:45:8f:a5:e5:49:f5:35:f6:1e:
         52:6f:9a:f9:5a:6c:6c:f6:0a:66:cd:2d:58:8e:fa:0f:4b:70:
         0a:cf:46:13:2d:71:af:d2:cc:1f:db:bd:2a:04:5a:15:f6:9e:
         49:7f:2a:e8:68:9e:dd:99:fe:06:64:7a:5a:87:61:72:63:55:
         49:b5:93:be:12:e1:14:04:bb:c8:0a:f7:c3:39:c9:9f:98:a2:
         d7:42:50:8a:07:28:f8:05:e8:7c:06:9b:51:06:3e:b3:db:d1:
         99:08:a1:b5:ff:dd:3b:04:77:6c:a0:a1:aa:e2:1f:58:fc:a4:
         2f:69:c4:93:93:f6:68:a1:4e:90:41:a4:a6:28:d7:10:b5:6e:
         13:54:36:14:d0:a6:60:98:57:c8:db:c0:b3:af:e1:94:62:1d:
         57:15:41:5d:ab:4d:bf:ad:3d:54:96:04:54:8d:0c:01:95:2a:
         50:2f:53:6a:1a:a8:73:d4:8e:20:55:f9:32:e1:f2:6f:d9:c2:
         a5:c1:0b:5c:71:4d:cf:d4:45:2a:d8:13:f1:6f:8e:5c:0a:ac:
         c5:8c:8e:26:c9:a3:69:7e:8a:c4:ac:56:82:3f:75:bc:a0:44:
         38:dc:4f:4b:ee:c2:21:7c:e9:a1:55:ad:54:6c:7f:5a:cc:b9:
         74:f4:57:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:24:11 2026 by rpki-client