Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/32891ff4-2a6f-3708-87ef-f3586572e869.roa
File:                     32891ff4-2a6f-3708-87ef-f3586572e869.roa (raw, json)
Hash identifier:          rqPKxdnpq6pYjxga/veGXecjqO39JCyF3KkQ38DvpwA=
Subject key identifier:   A4:1A:40:74:E6:6F:18:43:A9:A2:1E:AF:1E:07:61:07:2B:E1:1F:3D
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584D300A5DBC804D59B577B38300
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/32891ff4-2a6f-3708-87ef-f3586572e869.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     7181
IP address blocks:        2001:19b8::/32 maxlen: 48
                          2001:4970::/32 maxlen: 48
                          2600:2c00::/30 maxlen: 48
                          2604:7e00::/32 maxlen: 48
                          2604:7f80::/32 maxlen: 48
                          2606:a700::/32 maxlen: 48
                          2607:f1d0::/32 maxlen: 48
                          2607:f3f8::/32 maxlen: 48
                          2607:fc38::/32 maxlen: 48
                          2607:fdb8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:5d:bc:80:4d:59:b5:77:b3:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=874544e2-dd0e-47ee-8659-083565a5813b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:86:12:22:f4:00:ec:b9:5b:d1:fe:81:4e:
                    8b:ce:e0:1b:d6:aa:51:44:b0:57:37:71:4d:25:ee:
                    c6:d7:72:22:67:c3:b6:44:1f:8f:93:94:d9:ce:91:
                    11:af:e1:01:df:e8:4e:30:93:f1:0d:44:ea:50:f7:
                    09:ff:c8:63:2a:78:9b:2b:07:21:46:36:d1:fd:12:
                    b7:11:6d:dd:2a:80:f3:e3:09:b9:c3:3d:a1:05:a4:
                    5e:23:81:f6:39:70:09:b4:95:8c:b2:43:d9:cf:d2:
                    8f:29:51:a6:06:3c:b3:b3:21:72:4c:cd:0d:50:19:
                    70:8e:78:3d:63:b6:a0:c4:f5:2d:74:4c:3f:ca:e2:
                    19:40:c7:71:a9:48:d9:7a:90:d2:19:12:7a:f4:f2:
                    40:9d:7a:26:12:4e:6e:35:a7:62:00:1d:6f:8f:b0:
                    3b:fb:7e:3f:28:6a:c3:13:c0:6f:c4:62:56:d5:ff:
                    c2:fc:85:50:54:24:e6:e7:7f:aa:55:31:4a:81:ee:
                    30:81:d8:fb:e1:83:69:3b:e2:91:45:b6:07:72:44:
                    9e:32:c6:0e:30:fa:db:ce:9b:de:b6:2d:f9:96:33:
                    7e:e8:46:86:2c:3d:6b:4e:e1:06:2a:37:1e:46:84:
                    53:31:2b:3e:cd:58:dc:67:14:b1:25:aa:31:b0:30:
                    62:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1A:40:74:E6:6F:18:43:A9:A2:1E:AF:1E:07:61:07:2B:E1:1F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/32891ff4-2a6f-3708-87ef-f3586572e869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b8::/32
                  2001:4970::/32
                  2600:2c00::/30
                  2604:7e00::/32
                  2604:7f80::/32
                  2606:a700::/32
                  2607:f1d0::/32
                  2607:f3f8::/32
                  2607:fc38::/32
                  2607:fdb8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:bf:e8:d4:79:b1:d8:9f:01:56:27:b5:03:66:0f:ed:8d:e4:
         3b:62:b6:e6:1d:2a:e6:96:8a:27:27:e8:b8:3c:9a:00:ed:53:
         ad:71:d8:01:74:a0:cd:39:67:b8:09:0b:a5:89:76:38:9b:80:
         4b:ba:25:e9:4f:ec:11:f9:5e:91:78:62:ef:22:15:08:14:a6:
         24:94:d3:bf:8a:1c:42:66:21:d8:3d:b2:d3:e3:c4:33:7f:ff:
         60:56:97:cb:89:89:7c:19:5f:88:49:bd:0b:65:8d:17:2e:6c:
         44:cd:ea:3a:e0:8b:b9:65:06:b9:14:b3:24:59:3a:9a:db:59:
         57:ab:55:07:4e:78:17:07:3b:85:6b:d3:aa:f2:08:6a:f0:17:
         2f:45:0e:ea:14:8a:a6:f1:a7:08:e8:e8:9a:85:20:94:65:1d:
         59:39:7e:5e:8d:98:6f:2b:d9:9a:13:2e:4c:04:f5:96:64:a0:
         29:6e:83:d3:cc:35:7a:da:0c:f8:90:16:32:c5:98:a0:6f:03:
         6c:58:18:df:aa:ec:a6:e4:db:43:88:15:f4:c6:cb:80:e2:8d:
         bd:2d:84:16:30:6a:c4:03:05:18:b0:23:09:45:c5:4a:5a:91:
         74:b4:e6:66:20:c7:05:c3:93:19:b6:b9:dc:08:14:e3:02:e5:
         87:f2:c8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:03:33 2026 by rpki-client