Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/32984439-d873-3743-b2f1-99e76f4c192a.roa
File:                     32984439-d873-3743-b2f1-99e76f4c192a.roa (raw, json)
Hash identifier:          7j//pdQrqMXjAq0lurY/byJn7VW5ukqNkYmFlrssQ4s=
Subject key identifier:   24:32:49:9E:09:B2:15:A8:49:58:92:DF:9F:1C:46:A3:70:A0:45:BB
Certificate issuer:       /CN=45fe4043-69f6-4f38-9003-897cd909fb3b
Certificate serial:       010D0C9F4328584DC995BD3DB7A4D087CB6B0A00
Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/32984439-d873-3743-b2f1-99e76f4c192a.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     13445
IP address blocks:        199.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:bd:3d:b7:a4:d0:87:cb:6b:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=a2d00a7c-78b0-4472-9e7d-96da92e2bea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:d9:27:54:05:85:00:ea:fb:a9:99:cc:03:
                    e0:b3:98:cb:05:d4:93:b0:36:02:54:2a:26:b2:b5:
                    22:39:88:2c:91:e1:61:57:0c:6d:e8:2a:5a:6c:f8:
                    00:8b:c1:a9:dc:3d:e3:59:30:6b:c5:3b:2a:47:76:
                    e5:e8:f7:70:cb:54:11:f5:33:58:d2:f8:76:ad:f1:
                    13:c9:5e:6d:21:eb:29:0e:d6:83:0d:ea:17:a2:3a:
                    3c:cf:2f:97:f9:f3:93:1c:ee:ae:77:80:49:57:d0:
                    fa:5e:61:26:66:ce:6e:26:42:a5:a2:e6:37:39:5f:
                    fb:c6:1b:de:ac:b8:03:35:6f:c2:40:af:a1:16:ce:
                    64:fa:25:d6:e7:44:de:e2:3e:02:95:67:2c:d2:95:
                    70:25:dc:45:a0:05:68:6f:8e:1a:57:12:3a:0b:7e:
                    8e:b8:56:46:4c:a7:25:9a:6a:69:07:11:aa:37:be:
                    9e:b9:bd:67:cb:84:4e:83:10:b6:2d:80:a9:df:e8:
                    54:d9:5e:59:e2:c7:81:2f:07:91:37:0a:f2:61:16:
                    09:ad:5b:43:49:5c:5d:bb:84:a2:2f:58:e3:d8:ad:
                    91:f8:04:3a:51:52:9c:90:f2:af:46:06:73:5e:17:
                    98:b9:39:3f:6d:1f:ca:ba:01:5f:a9:64:e1:79:bc:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:32:49:9E:09:B2:15:A8:49:58:92:DF:9F:1C:46:A3:70:A0:45:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/32984439-d873-3743-b2f1-99e76f4c192a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d0:98:3d:6d:98:55:13:c6:af:04:d2:0a:73:69:52:c5:05:
         87:26:87:6c:b4:46:2e:82:a4:1e:82:0d:ed:8e:5f:6f:fa:27:
         02:5b:6d:81:a1:29:cb:e0:c7:e1:bd:0f:93:d4:8b:97:8c:90:
         fb:ec:ba:31:41:54:2a:c8:c3:ec:14:ae:7e:36:40:55:00:6d:
         58:17:12:0f:cb:21:62:1f:ed:f9:65:ae:45:84:c4:1a:f4:68:
         f8:16:03:49:ed:d0:f5:b7:4a:d7:57:fd:3e:96:d9:51:9f:e0:
         a1:16:9d:6b:65:02:60:13:85:8d:a3:be:c5:2a:38:cc:b0:6e:
         a4:cb:0a:8e:9f:d5:cf:58:28:b0:04:21:c8:bb:14:ad:c5:60:
         a0:14:47:d7:f4:07:3d:0a:77:68:0a:4d:b1:04:96:6b:a2:82:
         33:5b:de:0a:7c:21:b7:1b:ac:96:2e:f5:4d:d1:fb:7f:71:84:
         22:aa:43:e1:a6:43:c9:77:3d:5f:fb:97:18:a9:9a:68:72:87:
         e4:73:ac:ee:18:6a:cb:c5:ca:9f:3a:ac:93:76:cb:1c:99:a3:
         8d:6a:59:f2:02:59:51:b6:4d:de:95:ac:d9:64:6e:6f:1e:c7:
         f1:11:35:b5:3b:ca:7a:3f:4b:34:86:01:78:ce:fd:49:7f:3a:
         f6:6d:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:33:39 2026 by rpki-client