Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b8e660-bfe3-3230-8b4d-b83e0709297e.roa
File:                     32b8e660-bfe3-3230-8b4d-b83e0709297e.roa (raw, json)
Hash identifier:          MvqMaBYDBAAzBn5Tg4KuNDMuUWZZs2FJQNhj2SamRQs=
Subject key identifier:   E4:B4:18:E7:DC:1D:D9:2D:27:48:8A:C4:31:BC:43:CF:E6:BA:D6:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFB9670435B3C710EA4100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b8e660-bfe3-3230-8b4d-b83e0709297e.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        76.118.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:b9:67:04:35:b3:c7:10:ea:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=7cf8970a-cfe1-4348-ab37-cd41dceb8be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fa:7e:44:3c:16:f6:b6:90:9f:d3:56:2a:eb:
                    6e:e6:1a:8d:67:e8:df:84:b7:20:ef:31:50:d8:6f:
                    b2:f8:a2:31:71:0f:ad:72:48:27:72:4f:0c:0f:15:
                    81:96:bb:02:5e:e9:5a:e3:0a:12:46:63:a8:f0:96:
                    65:5a:31:a2:60:f2:a9:89:08:26:09:43:00:e4:55:
                    b4:61:e3:5a:89:58:d1:36:ce:a0:ac:32:55:5b:e8:
                    56:44:86:fc:58:92:d3:96:34:cc:60:0e:02:d0:41:
                    f3:9a:2e:03:ed:06:df:72:c3:a4:94:81:ad:b2:20:
                    31:0b:e6:6f:bf:3c:5d:27:56:ed:b9:73:20:6d:37:
                    2a:eb:ad:db:23:52:6b:8e:43:57:5d:a9:75:50:4d:
                    4f:41:14:0c:97:12:76:44:92:64:b2:47:c2:cb:5b:
                    39:3f:32:e5:5b:e8:4b:d7:5f:a5:04:00:48:90:10:
                    72:e0:67:0c:37:b3:e0:4b:a7:37:25:7b:c1:ee:77:
                    49:b4:57:e4:c0:a9:f4:7a:38:7e:c8:2f:8e:3e:93:
                    7c:b3:e4:0f:95:9a:97:aa:48:f2:cf:49:d9:7d:dd:
                    14:27:f1:b5:95:e3:4a:50:6f:b4:fc:eb:60:9e:53:
                    40:7f:6e:c8:cd:dc:5d:7f:e5:e6:43:ab:d6:e9:46:
                    96:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B4:18:E7:DC:1D:D9:2D:27:48:8A:C4:31:BC:43:CF:E6:BA:D6:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b8e660-bfe3-3230-8b4d-b83e0709297e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.118.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:99:ef:36:c2:d6:8b:dd:b1:48:64:a8:3e:b9:18:e0:d3:1d:
         cc:dd:8b:c5:a6:02:94:69:29:d7:5b:d5:f2:c3:0d:6f:b7:c8:
         09:19:7b:ae:70:56:95:2d:c2:fa:23:40:a4:89:3b:06:41:8b:
         9b:3a:91:8d:60:4f:48:93:59:71:ed:c2:5e:3f:ef:e5:27:14:
         08:1e:53:28:26:86:e2:88:31:1e:51:dc:2f:9e:31:7e:40:67:
         5a:58:da:b3:33:26:fd:0e:e6:91:ef:8e:fc:20:12:cd:d7:76:
         e9:88:11:bf:6a:f7:a5:50:23:74:d8:7c:70:ab:24:35:15:82:
         89:0c:e5:cc:82:f8:66:49:7f:a2:9a:4a:8d:a0:1e:86:af:a9:
         56:f9:00:d6:b2:0a:05:b2:87:12:53:cd:2c:75:3e:17:46:8f:
         53:09:bb:fa:34:6f:48:93:ed:df:f3:5a:5b:8e:44:5a:38:32:
         c4:ea:f0:35:e4:53:22:bc:46:e8:76:8f:69:52:c3:31:dd:4d:
         6e:c3:73:b0:14:cc:ef:92:03:d2:c4:66:15:10:79:6e:8a:04:
         84:5e:99:76:fa:c5:dd:d3:c5:ae:53:1c:ad:60:5d:95:5c:af:
         28:83:e4:19:91:dd:a9:e3:c1:49:18:fe:27:eb:17:25:78:d9:
         c5:6e:8a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:08:23 2026 by rpki-client