Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/e424377f-c02a-388b-9bf9-2519f68bc529.roa
File:                     e424377f-c02a-388b-9bf9-2519f68bc529.roa (raw, json)
Hash identifier:          4yy/hrcZMhgjfXsJY81iVVIPMovTarJ7ApBREao2DII=
Subject key identifier:   8F:D8:86:BB:D8:19:9D:92:0D:9A:D0:21:09:3A:28:16:F6:08:5E:88
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584E9D4A608D124385B850999780
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/e424377f-c02a-388b-9bf9-2519f68bc529.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     32806
IP address blocks:        216.130.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:60:8d:12:43:85:b8:50:99:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=246528e7-5d56-47a2-b04f-57104d242537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:05:cd:23:2c:2e:91:30:8b:ef:a8:c4:80:3b:
                    cc:20:d4:20:6f:6a:dd:e4:77:f1:97:4f:c6:05:20:
                    c9:fc:0f:fc:d4:9c:44:af:b1:44:dc:0e:f6:ff:04:
                    6f:91:b1:f6:14:df:71:38:2f:92:17:fb:a3:f3:e2:
                    2e:0f:6a:c6:51:25:a3:2f:aa:d1:f7:93:31:49:f4:
                    d5:ce:cb:7c:71:3a:61:f6:fd:6d:78:7e:43:2c:15:
                    f4:c1:58:a3:f5:a7:cb:ed:b2:b9:36:99:32:47:c8:
                    31:14:7e:37:4e:90:34:c2:91:f6:fd:21:b3:c3:6f:
                    3c:26:5e:27:8c:ad:14:a4:de:4f:48:24:a4:3d:1e:
                    cb:73:0f:03:bc:eb:2b:e9:cc:fc:49:8c:5f:3a:ea:
                    b5:7b:b5:12:31:96:b4:64:66:db:8f:36:50:73:50:
                    64:a5:34:47:4b:15:54:ac:cd:4f:e7:ea:b7:14:d7:
                    e7:d9:40:6c:b8:b6:c2:2d:93:ff:27:0d:f6:6e:d1:
                    66:9c:78:2c:3c:14:cc:2e:2b:84:9b:01:82:ee:97:
                    ae:45:9c:ec:38:d0:19:d6:8c:ff:c4:3d:cc:65:81:
                    82:25:9c:eb:73:25:b3:f2:3f:db:03:91:cd:f7:fc:
                    36:fe:49:83:3b:10:d8:05:3f:9e:5e:c3:b8:ff:e0:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D8:86:BB:D8:19:9D:92:0D:9A:D0:21:09:3A:28:16:F6:08:5E:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/e424377f-c02a-388b-9bf9-2519f68bc529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.130.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:bd:0f:dd:e5:5f:e4:44:3a:cc:c3:79:95:57:57:65:8f:0a:
         03:ea:70:18:94:76:ea:ca:75:92:e1:4b:33:f4:17:8d:f9:0f:
         cc:83:4c:23:ac:99:67:11:8f:fa:4a:2e:b9:32:05:b0:50:df:
         3a:86:e6:68:45:81:38:3a:aa:bc:03:73:f9:f3:ec:82:c0:ca:
         e8:70:a0:fe:bc:65:a6:ac:e5:76:3e:b5:27:50:8b:20:02:29:
         5b:58:84:e0:74:95:2c:44:47:2c:b8:75:1e:ea:75:a1:77:bf:
         87:96:68:c8:9e:42:33:29:c0:ed:4b:29:88:6d:fe:ef:a1:77:
         a6:ba:2f:6b:ca:f9:17:22:bc:d3:97:5f:fe:b5:47:44:04:47:
         fd:6b:be:c1:db:c2:ba:80:e0:57:e1:bd:e1:57:be:a3:dd:6b:
         0e:f6:49:0d:c5:6f:a6:7b:72:d1:d2:e6:74:75:51:b7:14:8d:
         e2:9e:86:b1:d7:3a:0f:f3:99:52:6b:ef:0c:1e:7b:43:1c:5f:
         da:33:60:c4:cb:08:cb:47:9b:dd:d7:91:4b:47:90:10:ac:ae:
         e8:af:30:73:d7:b7:6a:66:d1:3a:a3:e9:b6:a4:66:f8:63:b3:
         11:13:58:92:a8:73:d4:ec:e1:45:4a:f1:07:6e:a4:82:64:4a:
         20:bd:5c:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSmCNEkOFuFCZl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1
OGQwMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
MjQ2NTI4ZTctNWQ1Ni00N2EyLWIwNGYtNTcxMDRkMjQyNTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQXNIywukTCL76jEgDvMINQgb2rd5Hfxl0/G
BSDJ/A/81JxEr7FE3A72/wRvkbH2FN9xOC+SF/uj8+IuD2rGUSWjL6rR95MxSfTV
zst8cTph9v1teH5DLBX0wVij9afL7bK5NpkyR8gxFH43TpA0wpH2/SGzw288Jl4n
jK0UpN5PSCSkPR7Lcw8DvOsr6cz8SYxfOuq1e7USMZa0ZGbbjzZQc1BkpTRHSxVU
rM1P5+q3FNfn2UBsuLbCLZP/Jw32btFmnHgsPBTMLiuEmwGC7peuRZzsONAZ1oz/
xD3MZYGCJZzrcyWz8j/bA5HN9/w2/kmDOxDYBT+eXsO4/+DH7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/YhrvYGZ2SDZrQIQk6KBb2CF6IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh
N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvZTQyNDM3N2YtYzAyYS0z
ODhiLTliZjktMjUxOWY2OGJjNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm
MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1
NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2
NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IIvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGi9D93lX+REOszDeZVXV2WPCgPqcBiUdurKdZLhSzP0F435D8yDTCOs
mWcRj/pKLrkyBbBQ3zqG5mhFgTg6qrwDc/nz7ILAyuhwoP68Zaas5XY+tSdQiyAC
KVtYhOB0lSxERyy4dR7qdaF3v4eWaMieQjMpwO1LKYht/u+hd6a6L2vK+RcivNOX
X/61R0QER/1rvsHbwrqA4FfhveFXvqPdaw72SQ3Fb6Z7ctHS5nR1UbcUjeKehrHX
Og/zmVJr7wwee0McX9ozYMTLCMtHm93XkUtHkBCsruivMHPXt2pm0Tqj6bakZvhj
sxETWJKoc9Ts4UVK8QdupIJkSiC9XGk=
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:14:59 2026 by rpki-client