Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ad8b08da-a33e-3663-b80b-ba5eeaa40bfe.roa
File:                     ad8b08da-a33e-3663-b80b-ba5eeaa40bfe.roa (raw, json)
Hash identifier:          pyUtTUnLiO4O7aMfZ2ie6vv/trCeOG4OKhrHBrGUUeo=
Subject key identifier:   84:B1:50:55:D6:BB:2C:BF:62:96:1A:7E:84:8F:BA:FB:2E:10:72:3C
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584D67DFC9F7D6AC18D313873500
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ad8b08da-a33e-3663-b80b-ba5eeaa40bfe.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     399629
IP address blocks:        216.245.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c9:f7:d6:ac:18:d3:13:87:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=9f132d9b-1254-43c0-8235-b665790212a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:88:90:5e:1f:53:2b:9e:9b:36:b8:89:55:
                    5a:36:84:d9:73:a1:28:5d:23:d5:1b:f7:07:ee:51:
                    76:d8:e7:ed:e1:dd:0e:ca:74:b6:c8:94:22:0a:53:
                    b2:c1:56:79:2e:1f:bb:ae:cd:3b:79:bc:d6:8d:1b:
                    e7:6e:a5:61:12:7b:e5:1d:47:a1:df:18:70:9e:5f:
                    00:9f:c2:dc:5d:45:93:1c:20:b5:8d:66:ea:83:6e:
                    9a:e8:74:56:27:53:ae:f1:df:58:18:0a:0d:fc:70:
                    d9:a3:c8:4b:4b:66:79:ae:7c:48:c0:40:bd:6c:f8:
                    db:18:85:46:ce:ba:f0:c9:be:fd:0f:fd:84:1c:18:
                    93:ad:2c:46:90:dc:3f:05:e8:ba:9e:fd:3c:b0:68:
                    08:7f:6b:2b:6d:31:e6:07:2a:77:9a:59:87:36:52:
                    e4:0f:18:35:87:5f:b4:2b:25:e6:fd:ac:f4:f5:a0:
                    41:6a:9a:0d:5a:47:02:1e:a7:f5:87:ac:65:44:19:
                    74:07:49:5f:46:68:38:eb:d3:33:fb:6d:aa:38:80:
                    1a:ee:0e:ab:57:3b:bc:8b:13:1f:d7:a4:80:e2:be:
                    13:a9:13:65:9b:8b:52:29:02:14:fc:91:c2:13:6d:
                    3b:50:5c:3a:94:7d:8c:f7:3c:73:bf:b7:d3:de:07:
                    43:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B1:50:55:D6:BB:2C:BF:62:96:1A:7E:84:8F:BA:FB:2E:10:72:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ad8b08da-a33e-3663-b80b-ba5eeaa40bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:47:f1:14:aa:cb:2f:54:28:94:f4:e2:88:b3:d6:d9:92:53:
         10:8a:d6:84:6e:a9:81:5e:03:37:f8:a8:5b:92:ed:9f:6e:fa:
         48:23:26:6c:92:de:26:81:0f:05:ea:3d:1c:15:21:0a:fd:52:
         43:29:f4:ca:a8:8e:f7:fe:f4:19:fd:a1:b6:b9:07:8e:76:0f:
         91:48:f0:2f:05:a2:08:0b:18:67:8e:e2:ff:55:f8:d9:b7:02:
         1d:cc:7a:d9:d7:67:38:51:5b:51:b1:a4:16:7b:fd:f4:07:8f:
         15:23:7b:a4:f3:00:bb:d3:f1:6f:d8:0b:26:ac:9c:0c:49:5a:
         19:c2:21:26:c7:f3:82:73:3e:a8:e2:2d:0f:d5:e6:99:e3:02:
         17:6d:f1:84:03:df:70:36:c9:7a:d0:3f:e6:36:36:4f:76:7f:
         6c:77:c0:58:50:0f:46:76:a2:3d:0f:9e:12:2c:92:7d:aa:67:
         de:59:e1:55:44:67:78:cd:1f:0d:89:49:7c:cc:43:42:c3:f9:
         ef:bf:4a:bd:12:64:11:8f:03:10:ca:cd:b0:94:f1:64:3a:6e:
         11:46:4a:c6:a8:e4:9b:41:7f:49:da:e2:e9:15:0f:06:4e:39:
         ee:c5:e0:e5:ff:da:62:e5:84:a1:9e:d9:16:b9:57:40:22:b3:
         80:7d:09:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:23 2026 by rpki-client