Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/44babac3-983a-3a34-ba6c-38248ce2262f.roa
File:                     44babac3-983a-3a34-ba6c-38248ce2262f.roa (raw, json)
Hash identifier:          QTHt1L+HZIb4WykqPnwWruDX3FBnuKnCBmxps7M3mns=
Subject key identifier:   A3:23:5D:88:D9:8B:D5:52:B2:2A:A3:9B:BD:C9:4C:C0:67:F3:CC:37
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584DCF2B1D580F1B463A5925F670
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/44babac3-983a-3a34-ba6c-38248ce2262f.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     812
IP address blocks:        64.201.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:1d:58:0f:1b:46:3a:59:25:f6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=e3991174-8ee3-49a9-8cb4-47dd90069240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:63:bd:a9:c6:91:22:f8:15:e1:e1:54:2f:
                    02:b3:8a:fd:75:31:0b:42:1a:7a:aa:db:b4:24:78:
                    e0:d4:b7:c9:ac:05:30:df:6b:6e:62:35:c1:af:ee:
                    08:29:35:0a:40:71:17:00:2a:df:aa:b5:ac:6d:50:
                    27:c7:a6:94:f1:08:7f:5b:c0:12:3f:69:7d:a7:14:
                    fc:fb:1e:e6:15:cc:b2:48:73:fe:73:e2:72:ae:84:
                    20:0d:53:21:e5:de:54:0c:47:e4:dc:66:e5:f4:63:
                    96:c8:aa:e9:dc:35:fb:1e:2f:86:af:b0:f5:ed:8d:
                    56:70:5a:0d:c7:50:87:d6:ce:88:6b:b1:68:16:86:
                    45:a4:15:24:95:ab:b1:f4:d7:76:3a:d2:2c:e0:bb:
                    03:a9:0b:fe:57:ed:29:ca:43:25:7c:ef:35:57:3a:
                    87:5d:bc:bd:e5:c7:70:1c:05:0f:1f:80:ea:e2:3e:
                    93:43:3b:3e:19:86:72:c0:b4:90:3c:d4:8f:0a:09:
                    4b:c5:5a:0c:25:06:e5:67:b4:31:81:bb:7f:dd:6b:
                    e4:80:cc:ee:4e:57:52:b6:5a:c2:f1:d8:d4:ea:59:
                    cc:7a:20:73:be:e7:73:b1:69:45:72:25:e5:06:ee:
                    5e:de:95:a6:f6:ee:21:15:cc:70:d0:2f:f0:00:89:
                    31:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:23:5D:88:D9:8B:D5:52:B2:2A:A3:9B:BD:C9:4C:C0:67:F3:CC:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/44babac3-983a-3a34-ba6c-38248ce2262f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.201.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a7:ed:f8:86:e9:8c:9a:3d:7f:b4:1a:c5:6b:49:0c:97:57:
         dd:ab:25:93:3a:c9:be:3a:cb:f7:b0:4a:13:91:92:11:fb:11:
         97:cc:62:87:a2:5c:d3:88:73:74:93:6d:54:67:fa:f3:2e:76:
         10:b8:df:7d:fe:35:a5:de:d4:10:82:eb:c8:f4:bb:09:c1:2f:
         45:65:2b:27:52:0c:4c:5e:0e:28:d1:0f:d3:72:1b:d2:c9:2f:
         30:c9:c3:05:ad:ec:2d:47:3b:5c:06:d2:03:6d:4e:c6:fc:34:
         2d:e4:b0:3c:e2:44:71:92:dc:c1:63:38:05:47:99:0a:a5:17:
         f0:08:c1:0b:5f:be:66:5d:cd:bc:6b:ba:8e:ed:5d:1d:d3:60:
         83:ba:2e:f8:e5:d1:6d:9c:4c:b6:44:1c:f2:ef:c6:6d:2b:20:
         a7:f8:ff:dc:1c:ef:68:8f:8c:20:d5:0d:b8:cf:68:a1:a1:a0:
         c2:b5:47:24:0f:97:a9:eb:04:85:03:0e:c1:d4:a2:70:1a:be:
         a2:4e:7b:f0:5d:5f:cb:cc:7a:de:3e:36:2d:78:f9:b4:39:5d:
         3f:b7:bc:e2:05:55:30:9d:0b:0d:44:92:4b:f2:63:ae:c3:ee:
         df:73:43:d2:36:5d:b4:80:23:bd:d8:04:e5:98:c3:69:21:17:
         7e:89:15:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:38:07 2026 by rpki-client