Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ef4d9f-13e5-3199-91f9-9122dad25524.roa
File:                     32ef4d9f-13e5-3199-91f9-9122dad25524.roa (raw, json)
Hash identifier:          r7Jw6BmHnbFPPSLgYRv0GPC3ReL2yGBOgNruU9ab0y0=
Subject key identifier:   A0:D3:6F:36:A4:1C:29:44:0E:31:A6:16:FF:81:00:A0:F6:9B:85:80
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF64B3E6381A45DA40C100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ef4d9f-13e5-3199-91f9-9122dad25524.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.64.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:64:b3:e6:38:1a:45:da:40:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=365fb760-f4c0-43c1-8da7-d626ce43de46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b6:06:4c:d3:cb:db:3b:95:5f:05:22:f0:64:
                    07:98:86:5b:f5:e2:11:47:e3:cd:a0:ef:cc:ac:a9:
                    5f:b0:4f:59:44:30:df:4b:50:e6:01:8f:47:98:63:
                    b2:d2:0d:64:55:73:7f:3f:b4:35:01:a0:e0:82:5f:
                    d1:2c:52:5c:38:d6:e3:4d:9b:ef:76:07:3c:7f:c3:
                    6d:81:68:bb:58:45:04:64:5d:6e:55:71:2b:3b:98:
                    56:3c:1f:f2:02:5c:66:fb:03:44:b6:ac:ed:a2:9a:
                    6e:0f:5b:9c:a9:27:5f:db:22:9b:c6:c5:8d:d8:d7:
                    d6:01:a1:51:c6:3f:dd:6c:75:c1:71:b5:eb:d0:89:
                    9e:58:66:fb:44:0b:cb:c4:32:06:76:4d:57:0e:83:
                    03:ef:1f:41:28:b9:50:e7:b7:12:30:65:8f:2d:ea:
                    06:fa:e6:d5:70:57:4e:d6:37:b5:e6:52:5a:7c:ab:
                    0a:7c:ea:d5:1b:d7:01:cc:76:8a:56:b0:b0:90:00:
                    e3:d5:ad:ee:fd:96:bd:3e:7f:64:5b:f6:5b:60:88:
                    ad:00:d6:dd:19:f3:f9:e0:ab:85:5b:ed:88:fa:83:
                    2a:a3:d5:59:3f:a0:ed:ea:91:a2:9c:fb:c3:65:2f:
                    0e:c9:c1:a1:80:a1:a0:c2:9d:f3:30:8f:44:97:21:
                    8a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D3:6F:36:A4:1C:29:44:0E:31:A6:16:FF:81:00:A0:F6:9B:85:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ef4d9f-13e5-3199-91f9-9122dad25524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:65:0a:8f:a9:f0:51:7e:a2:fd:51:b9:03:ab:0f:3e:db:f6:
         6c:73:b9:97:2d:b7:bf:18:15:f3:e5:b1:34:21:8a:29:bd:86:
         60:7a:0f:44:38:a4:82:f1:0e:7b:7f:9e:89:2f:77:e0:f8:74:
         1b:3b:e6:79:1a:64:b8:bd:ad:bc:d7:c1:f5:ab:35:14:85:38:
         66:cf:4b:ac:bd:94:aa:17:ef:e4:f3:50:a7:45:a3:44:a6:1d:
         8c:1a:c7:9f:71:47:38:be:7e:55:bb:00:8c:6e:fd:1d:ef:ce:
         9a:22:7a:47:30:e9:75:18:aa:d5:6d:3d:0f:4a:ef:43:f3:e6:
         7f:56:f8:f5:fc:8b:85:8f:6a:1e:a2:6a:fc:9e:f5:69:a4:c0:
         7a:50:b9:00:35:c1:04:10:e9:98:3e:55:98:98:31:d9:e5:80:
         e1:cc:e8:b4:34:e6:be:2b:a8:b6:05:e0:46:68:e0:ad:93:93:
         8a:3c:d6:72:23:b1:13:a6:d7:dd:74:19:b1:bc:d4:e4:15:af:
         63:77:af:c4:60:63:f1:ea:41:40:cc:9b:26:61:bb:54:55:af:
         65:8d:5f:e1:b6:90:96:0e:37:b3:69:91:40:4b:40:3f:87:8f:
         0d:8a:d2:3f:c8:72:3b:2d:d2:f9:8b:a0:69:b7:d6:5a:c5:ef:
         18:79:fa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:27:30 2026 by rpki-client