Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8dbf8fbc-6ea8-48f1-abb7-1bec2237f968/32b0adfa-0b35-36ab-9325-7cf2b5648535.roa
File:                     32b0adfa-0b35-36ab-9325-7cf2b5648535.roa (raw, json)
Hash identifier:          frdnEqPtX/NTBKgCLJ93bSCqchWVxX2Q9XwyhCsPXY4=
Subject key identifier:   C6:5E:F5:5A:D2:A3:B6:7E:1E:75:36:1E:58:D1:D6:26:FC:BA:13:27
Certificate issuer:       /CN=8dbf8fbc-6ea8-48f1-abb7-1bec2237f968
Certificate serial:       010D0C9F4328584EA17A968A09CA31E250654340
Authority key identifier: B2:9A:8F:B9:F1:9B:13:C9:4B:53:23:36:A2:55:66:E7:84:1C:36:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8dbf8fbc-6ea8-48f1-abb7-1bec2237f968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8dbf8fbc-6ea8-48f1-abb7-1bec2237f968/32b0adfa-0b35-36ab-9325-7cf2b5648535.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     7377
IP address blocks:        132.239.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8dbf8fbc-6ea8-48f1-abb7-1bec2237f968/8dbf8fbc-6ea8-48f1-abb7-1bec2237f968.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8dbf8fbc-6ea8-48f1-abb7-1bec2237f968/8dbf8fbc-6ea8-48f1-abb7-1bec2237f968.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8dbf8fbc-6ea8-48f1-abb7-1bec2237f968.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:96:8a:09:ca:31:e2:50:65:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbf8fbc-6ea8-48f1-abb7-1bec2237f968
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=7e6089e7-571a-4d52-af74-b77b00c6bcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:18:b9:9d:8c:f0:bc:f3:42:f0:e8:e7:e1:81:
                    1a:0a:ea:ac:39:2e:16:08:9d:8a:e3:7b:1e:47:b6:
                    34:fd:a0:59:6d:3d:b9:3d:de:28:e2:52:9e:f7:fe:
                    bd:7a:e6:f3:8f:e0:60:7c:4c:f9:3b:57:0d:fe:59:
                    7c:b9:b3:d8:af:4e:c2:f7:ae:bd:c0:99:0e:05:ea:
                    91:46:ea:0b:27:32:94:4d:68:63:0e:d4:00:d6:19:
                    97:4c:bc:1f:8f:7f:8b:37:b4:8c:b0:be:a0:8f:5b:
                    f7:e8:53:78:25:2c:fa:8b:44:e5:76:b4:09:e5:aa:
                    05:3e:af:ac:61:ca:04:ee:df:88:15:6c:45:c8:08:
                    ec:3b:5d:f1:73:73:15:a2:93:e4:ba:5b:fa:34:30:
                    5c:89:1c:b3:4c:31:d5:b8:c0:d5:0c:c2:cb:6f:04:
                    44:c1:44:df:71:fb:03:83:e8:a1:99:13:ad:3d:01:
                    7b:be:15:0a:e9:90:3a:16:7f:08:99:4f:8a:fb:7b:
                    ec:3d:2f:17:71:6e:b9:5d:55:dd:97:47:b6:ae:fd:
                    dd:74:e6:fe:cc:c7:4e:67:72:98:a1:67:c6:56:7d:
                    a1:7e:ad:12:f0:2d:36:ba:7f:a7:0a:14:8a:c7:69:
                    03:29:89:d9:55:58:03:39:19:e9:19:5d:88:d2:d7:
                    30:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5E:F5:5A:D2:A3:B6:7E:1E:75:36:1E:58:D1:D6:26:FC:BA:13:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8dbf8fbc-6ea8-48f1-abb7-1bec2237f968/32b0adfa-0b35-36ab-9325-7cf2b5648535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8dbf8fbc-6ea8-48f1-abb7-1bec2237f968/8dbf8fbc-6ea8-48f1-abb7-1bec2237f968.crl

            X509v3 Authority Key Identifier:
                keyid:B2:9A:8F:B9:F1:9B:13:C9:4B:53:23:36:A2:55:66:E7:84:1C:36:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8dbf8fbc-6ea8-48f1-abb7-1bec2237f968.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.239.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:9a:00:d3:09:7d:c6:3d:83:f1:03:eb:67:9c:40:cc:e4:2a:
         3b:e9:5f:45:04:94:25:57:90:4b:10:55:7e:75:2a:0e:73:70:
         f0:e1:66:2d:8f:5b:1f:3e:1c:55:15:82:d0:c1:31:86:37:30:
         84:f4:0d:a2:22:56:4c:f3:f1:ea:61:28:3e:55:e9:af:d0:3e:
         31:61:20:51:78:9d:02:70:66:42:97:51:94:63:d7:77:e4:cb:
         0f:41:03:b6:71:3e:de:21:ca:06:5d:8d:6c:3e:09:6f:f4:21:
         29:30:69:04:09:3b:29:8c:2e:7b:de:40:40:bb:83:76:04:6c:
         28:c3:bd:3c:b6:e3:16:26:04:9c:e2:8a:96:f1:40:c8:a0:ac:
         32:85:29:86:6f:e7:b4:b1:49:ee:cb:f5:60:80:e5:d9:46:4b:
         ca:d3:2a:6c:09:35:38:24:cd:f8:6b:cf:dd:72:be:1b:ab:18:
         18:15:1f:7e:cb:0d:69:85:fc:0d:fd:9e:50:18:0d:48:07:6c:
         e3:99:b1:2d:04:5b:02:96:6a:fc:1b:3a:44:0e:c8:32:b7:65:
         48:10:50:b4:87:1e:01:b9:64:a6:1d:44:6a:30:29:be:a4:12:
         bc:80:0a:25:7c:2a:f0:ca:9d:74:75:48:aa:3e:30:9d:f9:68:
         e8:69:4c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:40:22 2026 by rpki-client