Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/02bd29d6-457b-326a-911b-918d4d008838.roa
File:                     02bd29d6-457b-326a-911b-918d4d008838.roa (raw, json)
Hash identifier:          YW1HOZHTKfLAm8drDoBpsjXELvyXe8JtvxY5hejog1A=
Subject key identifier:   D6:32:56:02:BD:6F:61:97:88:C0:38:5F:C8:DD:8B:6E:C3:F1:BB:2F
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584E0865DEEAC8777012392B2580
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/02bd29d6-457b-326a-911b-918d4d008838.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     32806
IP address blocks:        208.114.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:de:ea:c8:77:70:12:39:2b:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=eccfb69a-7a44-4809-ae12-8c4543b4f027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e1:ad:ef:c5:bd:dd:96:39:4e:d9:57:bb:66:
                    0d:26:6b:46:da:73:6e:15:ad:18:92:10:24:54:b9:
                    7e:e6:4c:d3:10:59:36:ae:e6:3e:7e:e5:7f:66:70:
                    84:74:40:64:36:01:c8:a8:b4:4a:5a:ea:5d:b9:ac:
                    41:1c:91:96:57:29:35:b7:f8:79:6f:39:45:28:07:
                    7f:20:e0:a7:08:ee:db:4c:00:c8:71:a7:2d:48:5e:
                    ec:48:63:90:b0:62:8b:50:d9:77:93:d3:c7:9f:1e:
                    47:13:6b:d1:09:8c:a4:47:ed:c5:cc:f6:3f:a2:8a:
                    2b:95:7c:90:28:8a:54:47:06:99:3b:ee:ad:e4:e1:
                    70:5d:aa:58:d3:dd:ab:6d:f4:9e:c6:6d:94:6b:97:
                    50:d0:33:4a:79:1b:d3:5b:19:1e:db:28:79:96:4e:
                    f9:9c:f7:63:c6:ac:b5:92:7b:2d:3e:a7:54:09:78:
                    29:0b:3f:69:99:b9:00:1c:60:8f:d4:df:2d:03:0d:
                    9d:67:06:f4:d5:01:9a:a3:a0:9b:3f:52:d8:43:d3:
                    31:ab:f8:ea:e7:f5:66:fc:bf:87:cd:bd:2b:71:d9:
                    a9:ac:db:46:aa:a6:e8:3a:39:8a:cd:6d:77:e6:7f:
                    a1:35:28:84:95:ee:f0:29:9a:b4:d6:80:4a:bd:ce:
                    b8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:32:56:02:BD:6F:61:97:88:C0:38:5F:C8:DD:8B:6E:C3:F1:BB:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/02bd29d6-457b-326a-911b-918d4d008838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ef:42:34:d6:be:f1:01:a6:dc:cf:79:cc:14:07:2e:85:cf:
         f7:f6:77:63:b6:66:14:a3:a4:f6:8c:6c:c4:08:43:64:d4:b0:
         56:1e:25:8d:d6:bc:66:53:33:f4:e0:89:48:a8:3b:cc:aa:50:
         a8:b0:9c:e3:8a:4c:aa:52:73:76:28:ab:95:c0:de:a2:77:75:
         43:7b:f4:78:2c:72:cc:97:86:30:22:b6:8c:54:c7:6c:07:2a:
         37:24:f5:0d:1e:31:b0:9f:47:85:e3:79:0a:c6:62:91:5f:f5:
         c4:98:87:03:fd:0a:f2:5d:86:ac:1e:6a:13:1d:e5:c1:f0:32:
         98:c5:52:54:d7:df:7e:97:4d:3b:4c:50:a0:0f:9a:60:c3:0b:
         a0:cc:6a:dd:b4:25:8d:d7:83:55:10:53:0e:2c:7c:eb:9a:27:
         30:0e:62:db:fe:25:f7:e0:c7:5f:cd:95:4d:26:f4:4e:8d:9e:
         d7:30:ee:e0:15:f3:b8:b2:c7:bf:3e:76:28:1a:60:7c:ff:46:
         dc:66:af:36:c8:3f:12:a3:39:c5:01:ee:c0:61:47:ca:54:0e:
         dc:e5:7a:23:62:bb:40:81:aa:d5:84:9e:64:6d:1c:0f:b8:ed:
         f5:f8:17:e6:ed:e4:d8:79:0a:d8:ac:b8:3d:4b:51:3c:67:98:
         5b:67:44:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:14:15 2026 by rpki-client