Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/a3ddba2a-e859-3207-b00d-f00374375e58.roa
File:                     a3ddba2a-e859-3207-b00d-f00374375e58.roa (raw, json)
Hash identifier:          IPB574inZ+QSOquX1B9QJN33BXlOBHSLcEY1eVvit1A=
Subject key identifier:   32:85:B8:AE:04:A8:0B:EE:D0:71:00:66:7A:1B:D9:22:49:94:27:12
Certificate issuer:       /CN=be2362de-5bcf-4e4d-a582-af59d5ffb75f
Certificate serial:       010D0C9F4328584D852FD2BED514349CC2E55400
Authority key identifier: 7B:DC:9D:79:C7:D5:10:B8:2C:FA:88:34:CA:F0:64:76:15:61:E7:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/a3ddba2a-e859-3207-b00d-f00374375e58.roa
Signing time:             Thu 16 Apr 2026 01:00:23 +0000
ROA not before:           Thu 16 Apr 2026 01:00:23 +0000
ROA not after:            Wed 15 Jul 2026 01:00:23 +0000
asID:                     32160
IP address blocks:        66.11.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:85:2f:d2:be:d5:14:34:9c:c2:e5:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2362de-5bcf-4e4d-a582-af59d5ffb75f
        Validity
            Not Before: Apr 16 01:00:23 2026 GMT
            Not After : Jul 15 01:00:23 2026 GMT
        Subject: CN=1ad60724-b574-4974-99a2-03f8e1662a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:91:ad:f0:a8:ab:67:fd:37:cb:a2:ee:66:c7:
                    fd:42:cf:ca:0f:11:93:ce:84:22:0b:57:e1:a9:4a:
                    db:8d:2d:9e:93:a3:c5:6f:d4:c6:e4:45:4e:7c:1c:
                    03:47:ef:eb:55:4b:25:55:07:2d:46:55:d9:7a:fb:
                    28:b6:56:ef:79:05:00:a7:30:ca:2a:ef:13:b0:e6:
                    5c:f4:48:26:9a:20:f5:13:35:e4:c0:e2:8f:8b:28:
                    11:32:68:75:a4:5a:83:5c:28:9c:7d:d2:0e:10:ae:
                    c7:21:64:62:a7:fa:23:5c:5c:ee:77:a8:ba:4b:23:
                    f5:d6:36:36:ba:71:6a:ae:4b:f2:22:94:4c:2d:47:
                    c7:70:60:b6:37:b9:3a:d8:94:48:be:6a:ce:e3:ab:
                    ff:7e:10:74:3f:93:1d:0a:ee:5c:d0:9b:20:04:8f:
                    b8:ae:4e:7e:5e:f6:dc:ee:86:b7:61:9b:7d:e9:8a:
                    fd:d8:72:7b:c8:0e:11:6c:92:a0:ec:34:3f:05:9d:
                    0f:cf:e3:91:db:bb:e4:a5:97:e5:f3:0f:fc:25:7d:
                    ba:a4:87:f0:b3:bb:ee:67:be:4a:5d:77:a2:39:04:
                    fb:62:4e:7e:65:ed:23:8d:6e:c8:66:c4:fa:0a:19:
                    84:10:39:59:19:7e:75:ac:b8:79:bc:bb:46:1a:7e:
                    9f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:85:B8:AE:04:A8:0B:EE:D0:71:00:66:7A:1B:D9:22:49:94:27:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/a3ddba2a-e859-3207-b00d-f00374375e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.crl

            X509v3 Authority Key Identifier:
                keyid:7B:DC:9D:79:C7:D5:10:B8:2C:FA:88:34:CA:F0:64:76:15:61:E7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.11.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:fd:8c:ce:c4:f5:2e:5e:05:46:96:c1:73:e8:60:8e:5d:73:
         71:f2:cd:af:8f:53:d5:a8:4a:7e:64:20:fe:94:68:cf:0d:64:
         fe:f2:3b:86:2d:f0:59:fa:49:4b:6c:26:b0:87:0f:ae:1b:13:
         44:6b:3d:1e:c1:7f:9e:83:ef:61:82:9f:8f:81:6d:55:e3:90:
         f9:e1:be:e2:35:63:07:55:48:fa:35:1b:43:f9:1b:97:86:27:
         38:c8:2e:7b:b8:2b:b4:0c:c4:7f:bf:01:b0:25:1a:91:ef:71:
         55:96:63:2d:7e:9d:05:28:7e:a8:84:82:db:57:2f:8f:6f:fe:
         29:42:67:12:a8:3f:b0:77:4c:dd:30:3a:e3:af:44:bc:a9:8b:
         68:78:b1:2f:1d:e3:c4:42:c0:d1:a6:bf:a9:cf:07:fd:0e:5e:
         6a:fc:45:6b:58:d8:8a:e1:62:7f:e0:ec:0f:af:07:58:1b:3f:
         1e:f6:a8:22:00:3c:70:b3:c6:d9:2a:53:e8:30:11:2e:7d:05:
         c8:0d:8a:73:f1:60:0c:1b:fb:b5:91:0d:63:fd:72:a6:4a:8c:
         c3:74:74:14:b9:c5:e5:19:a7:e6:6f:a3:e0:62:9f:44:20:5f:
         ad:23:59:1a:2e:9e:da:34:08:b1:da:56:50:09:29:69:53:5e:
         fa:67:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:03:11 2026 by rpki-client