Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/6ac21a78-71db-3127-83f2-dbe62b1fbf95.roa
File:                     6ac21a78-71db-3127-83f2-dbe62b1fbf95.roa (raw, json)
Hash identifier:          CF91A7MNE/CYjrJobDJjexgVl4W5E+MLMDP4lAQZMAM=
Subject key identifier:   C3:B3:F1:82:7C:DD:54:C0:23:3B:49:9A:A7:2A:0C:1E:A0:E7:F2:87
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F4328584D7CCFD7B80ACFD0B249F40EA4
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/6ac21a78-71db-3127-83f2-dbe62b1fbf95.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     3258
IP address blocks:        172.93.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d7:b8:0a:cf:d0:b2:49:f4:0e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=7e643efa-3e8a-46e5-a319-fb844f12f967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d2:5f:54:c4:17:fb:09:97:9d:65:14:fd:0d:
                    32:ce:a6:47:50:8f:91:31:0b:00:60:fa:0b:0e:b9:
                    08:98:69:eb:da:90:47:33:85:4f:73:88:81:33:28:
                    6e:a6:93:02:0d:44:71:85:08:f8:b6:b6:90:53:82:
                    d3:3e:7d:8f:bf:06:5a:21:78:59:ee:6e:4f:51:09:
                    14:92:da:03:59:1b:97:d5:8c:18:d2:f4:c6:fb:3e:
                    b9:9f:45:6c:c8:9d:9c:e4:63:68:cf:6a:6b:7d:c0:
                    8c:a7:6b:6c:65:5c:98:3b:37:d7:92:50:b9:3e:b4:
                    ee:3f:b1:75:bd:f2:c9:d9:8c:e0:5d:3a:25:d6:cd:
                    67:58:b0:44:3e:5c:73:fa:60:34:05:f6:f3:9d:43:
                    bc:fb:d8:c8:61:ea:03:7c:c3:2a:ab:ad:15:06:99:
                    00:78:fa:01:4f:91:55:94:43:76:ef:32:da:e9:cd:
                    6b:9d:cb:53:d1:03:9b:f4:84:8f:b9:72:ac:a7:84:
                    fc:95:57:17:75:5f:82:26:50:83:c7:4a:fa:bf:4e:
                    da:34:11:64:4e:d7:7c:17:ec:ea:5b:4b:43:f7:e7:
                    9a:65:3f:35:c7:f2:2d:d0:92:99:f2:17:c0:71:ef:
                    c8:cf:a2:8a:04:78:9f:c4:3a:4e:00:1f:b9:2e:ec:
                    51:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B3:F1:82:7C:DD:54:C0:23:3B:49:9A:A7:2A:0C:1E:A0:E7:F2:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/6ac21a78-71db-3127-83f2-dbe62b1fbf95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:12:ba:83:13:ee:42:66:89:41:1c:4e:30:38:fd:eb:d9:09:
         66:b5:44:ef:71:65:b1:64:7a:96:69:0b:f9:cf:49:3c:39:a8:
         c4:75:14:2a:0f:b1:e9:02:ac:c4:9c:9a:8c:02:56:f5:00:33:
         40:96:bf:60:5b:29:74:27:78:94:f2:24:26:31:00:28:b1:e5:
         04:60:04:8d:18:aa:9a:e6:f4:f6:cb:f8:21:61:a1:6b:6a:7b:
         05:9e:6e:70:de:70:a0:c7:52:b4:1b:3f:d7:2b:21:94:18:99:
         bb:ff:33:b3:b6:c6:42:14:13:90:24:2e:ec:44:ba:ef:85:7b:
         eb:df:26:23:e0:2f:98:12:cf:4f:b4:20:b1:3b:96:64:b5:b5:
         0a:f9:13:a3:34:cd:16:e8:2f:ff:a5:3e:3f:c8:f4:50:e0:fe:
         ce:56:58:fa:24:a1:93:bf:4e:28:8b:05:bb:a2:70:77:c4:2c:
         80:78:7d:2e:ae:0e:0c:79:d6:a1:a5:ae:2e:dd:2c:50:da:1f:
         55:44:64:99:c7:e7:23:cf:e6:49:07:81:aa:df:79:fc:52:2b:
         06:00:8a:00:f3:d5:87:47:33:44:4e:d7:1a:71:99:0a:fd:88:
         84:6e:aa:27:e3:3c:c3:9b:95:20:6a:a2:a7:c6:a8:d0:69:49:
         1c:17:02:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:14 2026 by rpki-client