Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ca5765a9-cad8-37a8-83b7-7393c3c6f323.roa
File:                     ca5765a9-cad8-37a8-83b7-7393c3c6f323.roa (raw, json)
Hash identifier:          W3ZTPOiz3pyEiq4uUW1KcOiBThcU7Q85/e/xNq9ticw=
Subject key identifier:   FE:16:B3:2C:DB:C9:7C:EE:80:88:15:9E:44:7F:48:6F:8A:33:F0:92
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584F549D5F15ECE28CB727C7E2E0
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ca5765a9-cad8-37a8-83b7-7393c3c6f323.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     32806
IP address blocks:        74.119.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:5f:15:ec:e2:8c:b7:27:c7:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=6a3d55fa-8b10-4160-b3de-349b4bfc8b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:5d:4b:5a:2a:25:4e:0d:fe:44:34:94:59:
                    17:0e:0f:18:8f:f9:10:dd:fb:c5:98:f3:82:67:5a:
                    38:82:f4:b7:8c:65:12:e5:c5:f8:b8:ab:41:14:fc:
                    ed:77:8b:32:4a:8d:24:a6:31:28:46:0d:3e:0d:6b:
                    ea:61:0a:0b:51:19:b5:33:7e:b2:1b:f2:56:b2:00:
                    66:9e:89:54:ab:01:c2:b2:ac:ce:8e:d7:4c:05:3e:
                    a0:61:3c:54:fb:a0:f9:63:51:77:ac:64:08:58:de:
                    b8:0e:95:bd:dd:c5:92:fb:d1:cd:60:13:73:f0:8e:
                    31:6a:a6:92:f2:6d:66:b6:26:4e:d6:35:4f:bd:74:
                    03:a6:fb:af:64:d8:a0:a9:20:8d:17:35:0a:9c:19:
                    ab:e7:71:90:69:55:09:59:d7:26:1f:a1:ad:25:0e:
                    27:99:27:06:6f:8d:74:16:be:d6:57:3d:98:ea:b5:
                    58:7f:b8:45:aa:9b:00:82:fa:c8:e4:36:b9:12:92:
                    d1:36:39:9a:22:09:d8:41:d7:ba:aa:de:a2:10:43:
                    fc:86:1b:d8:80:3c:02:02:cf:25:eb:cc:dd:6c:d1:
                    ba:c2:7b:b3:cf:13:d9:f7:29:ea:e4:7b:40:e6:0f:
                    ae:39:4c:f5:10:66:dd:d6:6e:1b:90:5b:b7:fb:e4:
                    76:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:16:B3:2C:DB:C9:7C:EE:80:88:15:9E:44:7F:48:6F:8A:33:F0:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ca5765a9-cad8-37a8-83b7-7393c3c6f323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d9:63:69:12:48:04:a2:38:b0:1b:08:30:74:f0:e8:8a:71:
         3f:b0:c2:95:cd:47:99:c2:ed:3e:b0:ce:21:60:b1:48:ce:e2:
         4d:36:45:c5:a9:c4:0c:4c:a8:cd:23:d6:18:5e:08:12:c3:d3:
         7f:bd:b9:be:24:48:00:9b:e9:14:71:82:b5:73:6d:ba:8f:55:
         d9:75:a7:e5:a5:15:3e:44:05:79:b7:1a:f8:a8:d7:1d:20:38:
         8b:ce:aa:c7:d9:8d:43:7e:4a:7f:2c:55:4c:c7:a1:1c:4a:ee:
         66:75:f9:42:3b:83:eb:53:cf:42:a2:e4:ab:6f:c1:0d:f9:cc:
         51:8d:55:a5:bf:37:a5:b7:98:a3:c6:3e:fb:b5:11:7a:9f:b9:
         b8:10:09:de:53:55:80:03:f3:d6:d5:d3:df:18:e9:c2:d5:8d:
         58:da:97:a0:58:e4:12:67:91:62:22:fa:94:c6:26:77:38:f2:
         88:37:03:8f:28:cc:f7:2e:51:a8:49:58:f4:a0:24:76:1a:54:
         a2:92:c7:79:9c:c8:f3:05:ab:8e:40:88:26:a3:74:18:9e:93:
         7d:b7:ac:17:67:dc:86:69:82:fe:15:8d:92:71:9b:0c:31:fd:
         15:43:9a:0d:f8:79:47:7b:89:3e:12:61:2c:de:8b:ec:30:ca:
         07:52:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:10:33 2026 by rpki-client