Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/c3bcbc27-cf0c-3d02-aed8-86d48ac3276e.roa
File:                     c3bcbc27-cf0c-3d02-aed8-86d48ac3276e.roa (raw, json)
Hash identifier:          39CmlwtSobDJhNXVtI8L447fbZYWxT2OuFmDycHohQE=
Subject key identifier:   9A:8D:A2:44:07:FB:14:EA:30:3A:33:F3:1A:1F:00:F7:BE:CF:DB:6F
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584E23D9979E361DB9F1CD939F40
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/c3bcbc27-cf0c-3d02-aed8-86d48ac3276e.roa
Signing time:             Thu 11 Jun 2026 21:00:11 +0000
ROA not before:           Thu 11 Jun 2026 21:00:11 +0000
ROA not after:            Wed 09 Sep 2026 21:00:11 +0000
asID:                     198949
IP address blocks:        192.187.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:d9:97:9e:36:1d:b9:f1:cd:93:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Jun 11 21:00:11 2026 GMT
            Not After : Sep  9 21:00:11 2026 GMT
        Subject: CN=e8dc07c7-0ff9-4f11-8195-b88828351c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8c:89:f6:c3:fe:7f:4b:74:b1:1c:61:6b:a9:
                    d0:a7:4e:bd:b1:35:7a:e7:31:c1:36:fe:2f:32:e3:
                    b9:63:ad:2b:1b:7a:aa:29:86:7d:b9:bc:bc:e4:b7:
                    43:a3:d8:b1:c4:25:73:06:ca:d0:29:84:f4:05:d0:
                    b6:8a:0a:4c:78:de:ac:f6:f3:d5:1a:b1:de:db:f0:
                    0a:d0:6a:c9:bd:ad:db:82:f1:6a:f9:43:a8:e9:40:
                    9a:f2:0e:d2:ee:47:25:17:ea:e5:01:76:80:d5:d0:
                    d6:d0:81:e1:a2:7a:f2:f9:5a:a9:06:78:b4:db:60:
                    44:32:76:ef:19:4c:76:46:c1:be:32:0c:1d:a5:4a:
                    bf:ca:c7:f1:16:69:44:7d:1a:3c:05:db:8f:6a:9f:
                    51:64:a2:23:12:4d:a8:ad:55:0f:a3:c6:13:43:b7:
                    3f:64:96:17:af:f5:5e:1a:5e:8e:d0:6e:55:c9:98:
                    cc:18:73:99:54:01:0c:b7:1f:a5:40:f4:10:65:74:
                    2c:c9:51:af:95:d7:d3:0f:78:97:ed:66:b0:50:60:
                    00:94:ba:7d:5d:d1:d8:cb:79:36:ba:ac:2a:34:21:
                    70:ee:9a:27:6b:f2:e1:30:73:c7:69:bc:ff:d8:0a:
                    fa:7a:50:67:73:bc:ec:c3:63:e8:09:af:68:49:66:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8D:A2:44:07:FB:14:EA:30:3A:33:F3:1A:1F:00:F7:BE:CF:DB:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/c3bcbc27-cf0c-3d02-aed8-86d48ac3276e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.187.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f6:34:56:8e:18:65:b1:6c:09:16:9b:3e:dd:31:53:11:5e:
         6d:b8:53:a1:d6:87:fb:e3:65:d8:f5:de:1b:7e:cf:3e:ab:91:
         ef:51:dc:52:75:16:aa:e4:1b:dd:ef:3e:a9:5f:8e:51:05:1b:
         fb:8b:19:27:3e:42:e4:0c:26:40:f1:33:89:c4:e9:3f:5f:26:
         b0:3b:98:7a:68:1f:a8:d4:c5:1f:6a:75:d7:fe:d7:ac:a4:52:
         a0:84:38:8c:0d:21:db:f1:85:55:e8:06:e7:b6:0a:d4:90:ed:
         b6:b8:f4:1f:85:15:52:bc:d4:6d:83:5b:4b:d5:45:17:89:2e:
         20:7e:1b:ba:e4:7a:ba:c3:26:88:13:09:b9:31:1e:fe:4c:c0:
         eb:41:98:db:7e:87:57:59:18:f1:4a:b4:eb:a0:5f:86:42:aa:
         95:f4:b5:c4:4b:56:3f:8b:f5:0e:87:00:02:9c:17:3e:33:2b:
         3a:b5:7d:59:35:4b:fb:dd:67:60:5e:56:a5:35:c9:d3:0b:e0:
         cb:0e:96:79:05:42:d8:1b:2c:aa:ff:67:e5:09:79:d6:23:88:
         f1:e0:4c:a9:08:7a:c0:65:7e:b1:16:4c:19:c4:63:e6:6b:fc:
         15:79:23:c6:0c:8b:29:2d:6d:5f:a7:fe:2a:92:ac:da:7f:50:
         e1:c9:76:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:58:43 2026 by rpki-client