Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/d86439cc-2774-3a35-9de0-f1f92e20d2c4.roa
File:                     d86439cc-2774-3a35-9de0-f1f92e20d2c4.roa (raw, json)
Hash identifier:          PfUcP8ialLu1GWB5/qHjeHlvxeCbv2WDk/wV43wC3tU=
Subject key identifier:   25:D0:9C:4E:94:F0:C7:F7:42:A5:5C:E8:E0:63:67:61:94:30:DF:99
Certificate issuer:       /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
Certificate serial:       010D0C9F4328584D5E1A498B4E79971ED11C3780
Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/d86439cc-2774-3a35-9de0-f1f92e20d2c4.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        160.32.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:49:8b:4e:79:97:1e:d1:1c:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=080c7682-a2d0-44f9-a430-3c876b31ea5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6a:97:3c:b8:18:7d:28:70:dc:3a:59:70:7d:
                    6e:96:38:66:de:b6:90:82:f3:56:4b:f3:c0:68:2f:
                    ee:41:63:8b:84:06:70:cd:d3:2f:2a:98:de:01:5d:
                    2e:e3:ad:55:0e:1a:a0:91:14:91:9b:3e:68:d3:2f:
                    cb:c0:5b:9a:a2:23:c9:9d:00:d3:8e:d2:f5:18:e5:
                    20:9c:dc:6f:73:09:4f:57:8f:8e:dd:25:9c:37:46:
                    7c:c5:6d:fc:27:11:42:52:85:ed:e8:ed:74:47:fd:
                    f7:d5:7e:95:3f:1d:f6:62:88:00:f2:d8:f2:10:f7:
                    c8:41:39:bc:ec:15:68:1e:43:b2:bb:0e:80:d6:82:
                    3f:ce:3c:fc:4b:6f:a6:7d:03:b3:47:35:a5:56:8d:
                    d0:da:c4:d4:e4:86:f9:eb:f6:6e:a8:e1:5c:a4:7d:
                    6b:dc:cd:5a:85:3e:a2:51:0e:76:09:84:be:57:67:
                    86:69:cb:35:07:e8:f2:0a:b7:63:17:6b:82:b0:10:
                    c4:b9:f5:73:58:52:8b:0d:20:f8:a9:dc:ee:12:f7:
                    1c:5a:1b:0e:86:d4:94:9f:8e:6c:6f:17:40:0d:2e:
                    ea:a5:ba:49:95:61:15:73:4a:20:6c:2b:03:2b:7e:
                    29:17:e9:fa:a5:18:20:0a:f6:11:a8:89:05:6a:74:
                    c3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D0:9C:4E:94:F0:C7:F7:42:A5:5C:E8:E0:63:67:61:94:30:DF:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/d86439cc-2774-3a35-9de0-f1f92e20d2c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e3:cf:7f:52:3d:06:65:bc:14:13:70:22:ae:fb:1f:22:95:
         65:4a:ad:13:8a:79:1b:0c:2b:4c:64:36:4f:54:a9:97:dc:f0:
         1f:60:be:0c:a6:95:ae:8f:ac:d4:53:65:10:a0:5f:e1:aa:b6:
         9e:93:f6:48:45:bf:d3:a3:dd:86:3b:96:9b:bf:34:ef:b4:43:
         69:df:1b:ab:6c:66:08:7d:f9:58:b1:df:fa:74:bb:4f:34:6c:
         3a:f9:c8:2a:79:57:69:70:ad:d9:e9:51:48:83:0b:a6:35:63:
         cc:c8:ea:b1:d0:3e:4b:42:f8:2c:7f:15:e2:3a:b6:7f:b6:02:
         bf:dd:f7:f7:d2:dc:43:44:da:64:19:22:57:d8:8d:66:23:cb:
         bb:d4:41:c9:58:7e:ff:ae:ac:ec:2a:11:99:e6:f2:78:89:c9:
         17:7f:aa:31:2e:6a:ac:b3:ba:e0:1c:4a:b3:9a:c4:2e:3d:67:
         a4:1c:d6:29:48:d3:61:b0:03:5f:db:b4:a1:d1:c2:96:60:66:
         42:92:fe:f2:7c:c6:db:fa:da:c7:8f:91:9a:de:8f:0c:65:0b:
         99:de:41:67:01:af:81:47:27:54:47:3b:20:cb:be:aa:da:52:
         1e:dd:87:1e:0a:bd:af:e8:c7:02:a3:4f:c7:71:35:ec:91:ed:
         de:36:dd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:13 2026 by rpki-client