Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa
File:                     ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa (raw, json)
Hash identifier:          iqt6OkzoqnXR6nAhzuRKeDJRoyxdFqLKkXxHCjShmnM=
Subject key identifier:   F7:38:4F:F1:47:95:AF:D0:13:67:32:45:21:28:03:13:96:0D:FC:3C
Certificate issuer:       /CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
Certificate serial:       010D0C9F4328584E66DA16FAFFD77B6E76A0CB00
Authority key identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        212.32.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:16:fa:ff:d7:7b:6e:76:a0:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=781b4008-6fd2-42c7-ab58-cc42ce1105c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b2:c7:3b:8b:dc:52:0c:4e:1d:88:9c:1e:b7:
                    24:9a:4e:be:55:0a:2c:3f:54:45:69:ec:0e:d9:4c:
                    a7:c8:96:95:ff:2a:cb:ab:b5:7e:ba:33:c8:50:ba:
                    60:00:52:c6:96:97:fe:b2:7e:2d:09:6c:fb:ea:e3:
                    55:54:9d:46:fb:00:32:c0:bd:46:35:0e:d7:9f:81:
                    40:05:0a:8b:67:d5:39:31:02:47:33:b1:a6:4c:e6:
                    39:e9:0b:96:e3:6f:c9:76:81:08:73:2e:ed:56:7c:
                    1f:3a:38:98:a9:75:60:f6:61:9e:b8:ac:bd:23:d8:
                    06:89:b0:05:20:1e:55:7b:3b:13:0a:69:bb:82:b1:
                    34:95:fd:8c:cb:5b:0b:04:ae:a3:06:64:dd:ea:e7:
                    0b:ba:d2:3b:aa:e8:35:eb:d9:93:36:95:41:22:2f:
                    94:21:35:a2:7d:22:17:87:17:08:7a:74:31:81:fc:
                    bf:89:81:cd:1e:6c:dd:1d:c2:18:f5:5c:27:48:93:
                    c3:83:71:6c:23:da:8a:d7:90:b7:50:88:d2:b2:54:
                    dd:ea:20:79:23:fa:cd:ba:5b:86:30:cf:e3:0b:bf:
                    f5:a4:ed:9a:72:3d:73:cf:e6:e7:df:c4:4e:31:e2:
                    0e:9f:62:66:a4:df:d6:5c:4e:4c:dc:10:43:3f:62:
                    94:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:38:4F:F1:47:95:AF:D0:13:67:32:45:21:28:03:13:96:0D:FC:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.32.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:12:80:f4:a7:67:d8:14:54:ef:24:30:db:97:57:23:95:04:
         6d:ff:b1:0a:ae:67:ce:26:2a:7a:ea:02:84:a2:de:91:7d:d4:
         66:a4:e1:dc:83:7d:bf:4e:f1:8e:e0:5a:07:a9:41:e1:aa:00:
         b8:0a:71:29:5c:7f:6f:c3:b9:b6:b5:1f:30:6b:4b:97:ce:2a:
         71:1c:2f:9c:7e:62:d0:0f:c6:d2:95:69:a3:9f:6f:c7:96:f9:
         db:a5:43:d9:d1:0c:2f:a4:69:55:db:4b:f7:0c:12:12:22:f2:
         ba:2c:9e:82:90:f3:e4:78:9a:23:3d:2f:6f:58:10:18:5b:20:
         33:2b:e9:c4:ce:aa:e9:ab:f9:7c:61:5c:17:d9:37:eb:1e:41:
         0e:06:4b:eb:cb:42:6a:40:ef:b5:22:b0:00:a1:bb:af:c9:88:
         6e:bc:d5:85:24:8b:42:b7:48:e1:3b:01:9e:c0:bb:c9:d1:47:
         9d:34:98:83:b5:d0:3d:25:3d:23:ce:74:0e:fb:aa:84:68:43:
         68:af:eb:ce:2a:9a:37:74:b7:f7:fa:00:7d:5f:1a:98:96:e9:
         df:a6:ba:f4:41:1a:b3:f3:ef:a5:2b:0b:66:2a:ff:81:85:2c:
         db:cd:2d:eb:8b:05:a8:f7:89:d7:ca:95:0d:9b:a1:91:79:20:
         bd:cc:2d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:12 2026 by rpki-client