Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/e424377f-c02a-388b-9bf9-2519f68bc529.roa
File:                     e424377f-c02a-388b-9bf9-2519f68bc529.roa (raw, json)
Hash identifier:          NaG5IngWATkbZvujhAApnPzKaCmXSH7+NXF2fRhUca4=
Subject key identifier:   5F:90:56:A3:65:B1:82:A7:A2:A8:58:A7:14:C9:04:96:66:A7:67:02
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584B1C372B713253FA5A41D3F2C0
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/e424377f-c02a-388b-9bf9-2519f68bc529.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     32806
IP address blocks:        216.130.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:2b:71:32:53:fa:5a:41:d3:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=dc2a0748-4a96-468b-a1cc-aaa2d25bfd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:7c:6e:32:44:71:9f:9e:e9:9d:fb:97:e0:
                    4e:41:a3:aa:ca:0f:4b:c2:bb:f8:1a:ac:7e:ec:ba:
                    03:29:5d:79:04:56:86:9e:de:3d:3d:87:04:0f:2f:
                    6f:ce:0f:96:08:19:78:45:ca:55:ea:18:e2:fc:d6:
                    e1:c0:ef:d3:f0:40:fc:8b:a9:4c:16:ac:1b:27:33:
                    ee:13:65:29:11:5c:46:77:bd:5f:7a:c1:dd:f8:06:
                    b8:4b:6f:9c:71:85:4b:0d:37:6e:89:1a:58:f0:7d:
                    57:60:83:69:71:63:0e:84:a3:d4:9b:d5:c2:b5:57:
                    72:25:e1:e0:b8:a1:98:e3:a3:9d:23:86:3f:88:23:
                    ce:e0:6a:c2:e4:4a:de:fb:16:f5:bc:5b:64:29:fa:
                    20:53:95:ec:ed:ee:30:15:5b:52:6e:70:ec:49:32:
                    de:99:e8:4b:2e:25:25:94:cf:99:e1:7e:ac:26:1b:
                    94:68:06:4d:17:bd:3f:60:d6:c1:a7:58:ca:ef:8b:
                    bb:25:b6:09:cf:77:87:59:7b:17:bd:8a:c7:3f:4c:
                    8f:ff:3d:ea:1d:bc:f9:43:98:ec:55:e7:96:02:9d:
                    94:e1:0a:11:6e:eb:96:b6:06:2d:ac:ad:55:08:ba:
                    59:0e:b6:7b:46:e7:b2:a1:58:20:f7:e3:26:ce:d9:
                    a6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:90:56:A3:65:B1:82:A7:A2:A8:58:A7:14:C9:04:96:66:A7:67:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/e424377f-c02a-388b-9bf9-2519f68bc529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.130.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:12:c2:7f:e6:20:2a:08:cd:af:e6:e9:66:6e:98:f1:34:0e:
         19:42:d9:f4:aa:1e:5a:bb:f7:e1:69:b8:a6:80:00:2f:26:aa:
         d7:ce:1e:d3:4a:6c:6e:56:87:1c:41:37:b6:d4:fb:01:85:09:
         d9:59:9d:d2:11:89:c1:c6:26:de:76:81:49:b6:8b:14:5d:a9:
         2d:e1:b9:29:47:bc:97:c2:ba:cb:d3:ed:19:fd:5a:81:f5:d0:
         15:5b:8e:f2:bf:61:75:82:4f:8f:3f:70:f8:7f:e6:ef:0b:65:
         e1:98:c4:60:88:99:05:9c:3c:00:3b:19:aa:aa:31:41:89:f5:
         71:b8:40:f1:49:83:26:82:2a:6b:61:e1:94:74:69:7e:b6:05:
         84:aa:93:e5:f6:33:6d:96:e6:8a:60:4a:30:9a:84:ea:7a:a0:
         8d:24:c7:f4:dc:74:4f:ef:3e:9d:2f:b4:ac:58:0c:45:b9:d7:
         69:64:1f:64:1f:cb:8f:54:c9:de:ff:32:24:d9:d4:6a:dc:32:
         86:30:da:c0:23:d7:75:db:e6:bd:cf:3e:92:7d:64:34:f5:e5:
         ff:da:1d:0b:b7:5c:19:9e:8c:87:86:ea:50:ca:09:7e:c3:3d:
         29:cc:77:6d:9e:d0:42:0c:d6:d1:10:49:8e:45:f2:32:49:6d:
         1a:bc:9c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:33:25 2025 by rpki-client