Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f34ffcc2-c389-3111-92c8-f0e01b81110f.roa
File:                     f34ffcc2-c389-3111-92c8-f0e01b81110f.roa (raw, json)
Hash identifier:          Z2HEqnBo4q/nosDt/ydJZr7b8mpwjS88NI6RgnB30cQ=
Subject key identifier:   80:14:09:B0:EB:D8:C4:48:28:41:28:98:50:32:44:9E:66:0A:DB:C4
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584D746FBDD31C23B30BCC7A2A40
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f34ffcc2-c389-3111-92c8-f0e01b81110f.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     399629
IP address blocks:        193.149.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:bd:d3:1c:23:b3:0b:cc:7a:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=e15589fc-a972-441d-b1ec-73d5c8b9a6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:41:c0:7a:ce:30:e9:f6:57:6d:1d:ba:24:dc:
                    f4:d7:e8:02:eb:88:1b:d4:2e:05:e1:6b:c6:78:64:
                    34:04:b8:8e:b6:cf:c1:71:a1:46:d6:ea:e6:80:9b:
                    3f:9c:da:a1:b8:ce:38:7d:36:8e:31:57:d7:42:b5:
                    d0:c0:d8:ea:ba:84:0b:b1:18:5e:7e:1d:74:a5:ad:
                    43:ff:2a:24:f9:f7:11:87:33:b7:58:d4:e6:e0:cc:
                    3c:45:b9:eb:00:77:d5:3d:43:8c:62:44:70:eb:00:
                    09:17:9e:e2:a9:32:12:1a:7a:b8:ce:61:c0:1f:30:
                    4a:5b:39:f6:58:35:b3:14:6d:ee:f0:ea:67:58:6d:
                    b9:5b:29:9e:66:b2:d6:ae:c0:fc:69:3b:b3:5d:78:
                    8b:ad:b8:ef:5d:dc:5d:d0:47:04:b9:5f:4c:9b:55:
                    f6:92:76:6c:61:6d:9d:43:e1:4f:4f:8f:7a:8d:51:
                    ec:43:c4:64:7b:84:40:09:fd:ab:4f:c7:24:3b:57:
                    41:af:b6:ee:08:bf:06:2d:1d:3f:8f:de:d3:2f:01:
                    bf:1f:6e:8d:ec:57:e8:78:71:21:60:27:a3:5b:86:
                    78:96:ae:e5:2c:e4:a1:53:aa:e4:17:1b:10:d0:5b:
                    5b:03:3f:97:97:1b:7a:5b:c1:45:7b:73:b5:33:5d:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:14:09:B0:EB:D8:C4:48:28:41:28:98:50:32:44:9E:66:0A:DB:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f34ffcc2-c389-3111-92c8-f0e01b81110f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:9f:6a:23:91:8c:91:31:77:d9:c5:6b:d4:6f:ac:4e:4b:7b:
         f2:5d:f1:ed:71:fb:dd:a9:10:55:94:fc:ea:4a:f6:d2:27:8b:
         dc:67:40:c1:5d:18:0f:79:d0:94:49:1c:77:32:e9:5b:c4:2e:
         1d:06:46:63:35:a5:93:7b:93:2d:1d:c4:f5:4d:57:7d:5e:07:
         90:23:09:b2:e1:c7:27:89:90:5c:4c:84:b9:6a:a9:58:ca:1a:
         53:ac:5f:f5:3f:b1:a6:cd:4a:1a:ac:e8:14:2a:8f:6f:d2:bf:
         ef:23:d8:33:32:6d:d7:83:6d:b7:7c:f9:95:70:5c:85:a3:f7:
         69:3a:7c:05:8e:65:ed:98:98:64:02:54:b5:93:2c:b9:7e:e1:
         9b:0f:09:f9:f5:d6:88:bb:f6:fc:e0:ea:af:ea:b2:b4:77:f5:
         a7:81:de:44:e2:0e:eb:28:b2:ea:2f:0c:84:31:63:75:7a:8e:
         4c:c2:ef:a7:6c:ad:f8:b5:b3:95:c0:8f:b5:e9:9a:4a:bc:5b:
         2a:47:b7:7f:2f:5a:6e:ec:ad:0f:3f:44:dc:2c:d2:da:aa:4c:
         bc:f0:fd:ca:a4:48:8c:87:85:2a:de:62:a4:13:0a:c3:2e:93:
         60:ae:b6:c5:a4:6e:6b:f4:7c:71:23:0d:74:ed:d4:99:ce:f5:
         44:42:73:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:36 2026 by rpki-client