Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/39180b00-aeca-33d4-9a03-d7d925444ce2.roa
File:                     39180b00-aeca-33d4-9a03-d7d925444ce2.roa (raw, json)
Hash identifier:          gq4usrOTQZmfVGnVdG5jR212K1ALFiL6/xVw99NtQrg=
Subject key identifier:   4E:D3:31:CC:7C:84:30:30:0C:25:FC:59:FD:95:D8:2B:CD:54:DA:A3
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584D7A05247A31A259208BD61F00
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/39180b00-aeca-33d4-9a03-d7d925444ce2.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     399629
IP address blocks:        64.52.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:24:7a:31:a2:59:20:8b:d6:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=e1d417a7-d592-43ff-909b-18c6fca67ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:d9:aa:c4:b5:f2:f8:22:90:a7:2f:ea:e3:
                    c3:83:59:8c:c0:32:2d:02:96:7f:74:87:d2:54:97:
                    82:6c:63:bb:9b:ce:fc:23:00:ec:80:8e:e5:3d:4a:
                    b4:75:18:cb:db:7a:86:53:23:0f:4e:df:7e:06:03:
                    bc:7d:e6:f5:14:fa:b8:ff:42:2a:33:38:f8:7b:41:
                    db:41:83:62:bb:d6:26:32:19:03:57:64:e1:60:8d:
                    d8:83:32:93:e4:ba:73:dc:b8:e3:92:4b:18:3c:7c:
                    43:10:57:b1:65:fc:5f:59:2f:3e:c5:44:43:81:27:
                    9a:f7:9e:4c:fc:67:a6:ac:87:64:45:98:28:e6:f7:
                    f2:40:6b:ef:b7:cb:b1:a2:7c:5d:4c:91:eb:21:d3:
                    a4:b2:42:09:d7:b2:40:87:2a:6a:88:9a:15:8d:41:
                    da:46:f6:ad:f4:60:8a:6f:7e:3d:79:57:0b:57:0d:
                    e1:3e:0c:ba:f9:8e:d5:47:e6:ee:2e:46:ea:ac:c5:
                    ca:8a:08:54:2c:f0:49:94:27:53:ff:75:15:2e:98:
                    6f:ab:8b:37:c3:d2:51:e4:07:54:61:0d:e8:42:23:
                    b9:72:0f:c7:72:2a:cc:11:e6:b9:aa:db:81:22:4e:
                    86:28:42:6b:fa:fb:0c:23:7a:40:0b:bc:00:96:6f:
                    07:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D3:31:CC:7C:84:30:30:0C:25:FC:59:FD:95:D8:2B:CD:54:DA:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/39180b00-aeca-33d4-9a03-d7d925444ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:23:3f:bc:13:73:24:d5:70:63:ac:be:ff:56:a5:9f:6d:2f:
         ff:84:72:67:09:5f:53:7e:cd:e2:da:33:9d:1f:e5:e1:c0:51:
         63:20:45:ca:7f:f3:9c:44:6b:c3:5e:b5:9f:72:57:a5:ae:4a:
         52:84:98:f1:91:ac:ef:58:32:93:29:8c:ae:b2:ce:e3:ac:a8:
         c8:70:8c:39:db:24:6a:f9:1b:45:d8:3c:13:55:0b:4f:ad:e5:
         63:76:a0:22:12:d6:b0:49:8c:11:b1:1d:00:3a:9e:0e:b7:cd:
         62:fa:8c:2e:87:bb:28:a9:1b:e3:89:08:d9:ad:ed:16:b1:e4:
         7f:9f:98:95:03:cc:33:1c:7f:74:64:80:cf:cd:c6:f4:2f:90:
         6d:ea:ec:6e:71:46:92:b5:e7:98:fc:8f:f4:49:6f:83:77:03:
         26:cb:e0:41:94:8f:75:e5:b0:98:27:16:6f:91:be:0d:35:d3:
         0e:36:09:22:fc:6d:50:f7:02:fd:74:50:3d:17:9a:11:d9:df:
         dd:57:32:ea:ea:27:67:7d:4a:82:ed:85:57:22:63:03:de:7e:
         52:23:7b:bb:a1:96:c4:87:09:56:04:16:09:06:a7:f5:67:35:
         c4:42:2f:3b:c5:19:06:ef:aa:73:cb:89:55:93:30:b3:bb:2e:
         f5:39:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:04 2026 by rpki-client