Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/81de4d19-de8b-37b4-889e-02591c2ce7e5.roa
File:                     81de4d19-de8b-37b4-889e-02591c2ce7e5.roa (raw, json)
Hash identifier:          /HMBxZx0SMu63xF8LVyRbM+aAaWtzsaM2SIkuGzZn8M=
Subject key identifier:   A7:27:98:2A:E8:16:30:17:05:3B:99:E3:D6:EF:79:87:A2:D3:9D:AD
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584D6C0FAE6C40E3CAC0C4144480
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/81de4d19-de8b-37b4-889e-02591c2ce7e5.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     399629
IP address blocks:        193.149.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:ae:6c:40:e3:ca:c0:c4:14:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=70016853-94e8-4144-a427-f89e8fbb723c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:5a:c2:e3:30:39:68:5c:fa:70:c1:a5:d9:
                    5e:dd:93:fb:44:3c:01:74:84:e9:84:3e:74:00:77:
                    9a:49:fc:3d:d5:6b:12:41:6b:27:3f:82:6e:95:fb:
                    27:e6:74:77:9a:bd:14:98:8b:44:90:f3:9d:e6:fc:
                    52:c5:9e:08:2c:ad:c5:94:95:1e:b7:aa:3b:96:47:
                    c7:e6:a6:9e:52:d9:c2:60:39:4c:e0:ab:4c:54:1c:
                    01:b4:1e:78:ed:0b:4c:31:0a:28:12:3e:66:78:53:
                    e1:ae:9b:56:ff:9c:28:3e:3f:cb:56:27:15:77:1e:
                    ca:2d:28:9c:15:67:a0:fa:bf:47:d5:01:b5:58:af:
                    1c:ab:6b:ab:54:3a:3c:66:2c:1c:79:e2:38:a9:8b:
                    66:a4:07:2a:28:42:79:10:b1:cf:4b:d8:c3:bd:3e:
                    97:9c:9e:6a:a6:0b:b4:15:50:10:78:a0:40:c7:13:
                    40:25:92:6a:e0:f5:f5:58:39:07:b7:8e:41:c8:8a:
                    46:88:dd:ab:3b:4a:31:b1:b6:9c:fd:a6:5a:e5:84:
                    2c:f6:e4:bd:e2:69:8f:ed:50:e5:b2:bc:98:0b:2f:
                    a3:a1:16:76:a9:63:dd:e7:80:0b:c6:68:c5:4b:80:
                    d6:cb:3f:ed:99:e8:a8:2a:85:cd:27:1c:77:25:59:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:27:98:2A:E8:16:30:17:05:3B:99:E3:D6:EF:79:87:A2:D3:9D:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/81de4d19-de8b-37b4-889e-02591c2ce7e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:da:d7:da:16:a6:85:35:60:2e:2e:0c:1b:f1:c0:3c:36:4e:
         33:7f:fb:92:e7:31:e0:6a:bd:76:e3:8c:b4:77:e3:4f:b0:dd:
         96:a2:50:1e:8e:0e:73:38:09:86:da:d8:84:94:be:cd:33:ca:
         ae:19:f7:b3:cb:8b:db:f6:34:b1:c1:8d:4e:47:50:51:29:72:
         08:62:15:80:6e:e3:c4:d3:d7:3a:c1:28:29:00:18:4a:70:da:
         d7:a6:ac:ce:d0:4e:ea:fa:61:75:bf:81:d6:60:b6:c4:6f:5c:
         3d:ff:67:16:45:29:8b:ea:33:cf:f7:ad:28:38:a5:34:ef:94:
         74:d4:67:64:75:6e:2b:94:8f:6a:19:27:0f:4f:40:ef:62:78:
         16:1e:98:88:95:c7:2c:a1:e3:89:48:22:e8:1d:0a:cd:9c:c6:
         f6:40:2c:83:47:2c:2b:5b:43:8f:3e:83:8b:40:2e:c1:88:97:
         fc:55:3b:56:d3:9c:ac:c0:be:20:a7:5b:64:2c:1e:14:0e:e4:
         7c:93:3f:e8:2e:8f:c1:5a:4d:81:4e:27:71:bf:76:47:47:72:
         59:85:23:2b:21:c0:42:e6:6a:bd:bd:23:32:7f:c7:8e:2d:68:
         7d:89:5e:ef:e7:72:68:56:7c:70:59:12:9c:52:63:f4:84:d8:
         dd:13:2a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:19 2026 by rpki-client