Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa
File:                     0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa (raw, json)
Hash identifier:          ToqCOlEjvrB1vG8+OB5MgC0lnhwMKc7EQ8oWAxGRKM4=
Subject key identifier:   7F:06:32:E5:27:26:F7:95:FB:80:B2:74:21:6C:A9:EB:DE:E8:56:4F
Certificate issuer:       /CN=a99940f3-ed95-444a-a18b-6d4d902f65bd
Certificate serial:       010D0C9F4328584D47C50493183170E5A9F7FCC0
Authority key identifier: 7F:9E:C8:8D:B1:5F:32:57:D1:3F:F1:02:1A:28:DA:D6:86:3C:54:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     33602
IP address blocks:        132.214.0.0/16 maxlen: 16
                          132.214.0.0/17 maxlen: 17
                          132.214.128.0/18 maxlen: 18
                          132.214.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c5:04:93:18:31:70:e5:a9:f7:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a99940f3-ed95-444a-a18b-6d4d902f65bd
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=014d2895-63c1-45c8-bf53-3bb8d93d3250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b5:f2:fc:a6:76:6a:da:cc:19:e5:7c:a5:5d:
                    c9:02:e6:df:95:2c:d0:dd:2d:90:67:97:f0:c4:2f:
                    e1:8a:43:0e:7c:04:41:3f:3e:99:0b:d1:d1:1c:c1:
                    17:92:ab:ef:20:ea:bc:ae:ec:8f:a0:5a:13:de:9f:
                    8f:65:ce:5c:ce:e0:01:b5:36:89:54:ff:c4:7f:64:
                    56:3b:a6:1d:16:bf:36:05:36:96:88:dc:9a:ed:3b:
                    17:93:63:41:ab:8f:4c:8b:1d:fb:52:ed:05:d8:12:
                    a8:92:0e:b3:9d:6c:c0:12:f3:0f:f6:36:b7:4b:db:
                    03:42:25:c9:f0:5d:7a:be:db:9a:a3:db:9b:6a:1b:
                    27:04:2d:47:8f:e2:85:c9:00:8a:bc:97:7d:8e:a7:
                    f2:cb:f7:3a:c9:7b:d4:3a:6e:8c:af:85:af:25:ef:
                    15:6a:f6:a2:08:c4:7b:eb:0c:d4:05:86:18:9b:71:
                    50:ad:51:47:fc:6b:0e:e8:31:cf:67:07:e3:30:00:
                    58:5d:24:77:31:a4:89:1f:d4:58:47:30:35:85:2c:
                    3d:a7:21:f4:d9:ce:95:98:25:f3:98:02:c7:11:90:
                    91:ea:61:ae:a5:6d:f4:e8:4c:57:c7:fe:d3:7d:56:
                    25:7e:01:56:1f:21:50:8b:a3:3f:01:70:87:90:06:
                    e3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:06:32:E5:27:26:F7:95:FB:80:B2:74:21:6C:A9:EB:DE:E8:56:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.crl

            X509v3 Authority Key Identifier:
                keyid:7F:9E:C8:8D:B1:5F:32:57:D1:3F:F1:02:1A:28:DA:D6:86:3C:54:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.214.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9f:a5:0c:10:1d:2f:57:25:03:d8:16:61:c9:ca:32:e4:59:
         c5:5c:c6:7f:51:61:c4:e8:50:d1:fb:4f:e9:6b:05:31:9e:c0:
         4b:ad:bc:75:8c:0f:40:df:4b:c0:6c:6b:f6:dd:f0:da:86:3c:
         01:41:90:e6:fa:8e:65:dd:a7:4d:d3:09:cd:46:af:0c:d8:e0:
         b9:b3:ce:e8:93:ad:ba:08:4b:57:b0:fe:5e:31:60:ee:99:cd:
         73:d6:27:1f:8f:29:8b:e9:d3:4a:72:2c:a0:09:ab:ca:58:dc:
         ad:7e:00:a5:2e:25:30:8d:b0:f5:e8:7a:b1:c8:d6:b3:0c:f9:
         36:24:e7:25:31:d2:5a:1a:85:28:9d:03:b7:2b:c8:7b:85:54:
         81:59:bd:65:ab:62:27:74:50:83:d4:74:8d:e7:ef:ff:6b:60:
         93:a9:55:81:ea:bf:94:54:af:cf:9b:75:90:ab:25:0b:73:59:
         50:25:76:21:dd:0b:81:13:d8:ea:b8:c7:33:ab:37:44:8b:20:
         7d:99:a9:11:f3:5f:99:27:fa:9e:66:3e:df:cf:10:95:14:98:
         ac:da:f3:08:03:7d:11:23:c6:d9:20:62:91:d7:d9:3f:5e:50:
         ba:ba:5f:54:0f:a7:64:8a:ec:87:ac:96:3b:31:72:51:c4:82:
         54:93:28:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:21:10 2026 by rpki-client