Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/32cd9e6a-6b08-3b0e-8210-f35c47b3cea7.roa
File:                     32cd9e6a-6b08-3b0e-8210-f35c47b3cea7.roa (raw, json)
Hash identifier:          DvqMgrllIMt87CPqZ8VHUL3vlau4LiayfG78ktc2dBI=
Subject key identifier:   E5:E4:62:E4:ED:51:8F:89:75:53:34:23:8C:4A:53:05:9C:FC:8F:AC
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584D8D8FE49858ACEDE19DD0EB80
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/32cd9e6a-6b08-3b0e-8210-f35c47b3cea7.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     64267
IP address blocks:        198.1.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:e4:98:58:ac:ed:e1:9d:d0:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=f7128a11-6741-42dd-a940-e2ca1284af98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c3:4f:38:2d:19:97:17:a6:f3:31:b0:3e:9e:
                    7e:8c:ab:7d:ce:c9:88:9a:ef:7e:b0:bb:3e:e4:39:
                    a8:00:08:70:e8:96:20:13:79:43:ec:1d:e1:69:e0:
                    26:99:72:f0:9c:a3:4d:d6:48:dd:5e:94:3b:39:30:
                    6a:f5:a4:8f:97:bf:8e:19:11:18:70:1b:a4:6c:2e:
                    4f:36:f1:4d:94:09:b9:b2:d2:b5:4e:7a:a3:ec:23:
                    58:c3:b0:dd:3b:c5:78:d5:6f:84:18:5d:0e:dc:c9:
                    03:10:70:73:8a:b4:84:18:1a:27:61:4f:52:8f:c0:
                    51:6f:fc:fc:1a:ad:c3:02:d7:60:b2:fc:af:50:fe:
                    39:0b:a4:7b:ed:82:e0:c8:75:19:f1:26:dd:92:98:
                    01:bd:fa:9c:2c:e7:ae:03:5e:94:b3:5d:02:e3:9b:
                    c2:8a:33:3a:99:00:10:9f:7a:c2:a2:27:df:bb:6a:
                    92:dc:df:ad:b3:da:c7:79:e3:62:60:d5:b4:a0:dd:
                    d9:7a:e6:d7:f7:9e:57:01:cf:0f:bf:96:69:a0:86:
                    98:88:b3:80:c3:81:5b:30:28:4a:4d:89:44:f5:00:
                    f8:b2:95:1a:ea:6d:3f:2b:91:c7:a6:ae:bb:27:7b:
                    f7:5a:b9:00:0c:c3:06:79:7c:85:b5:88:9f:38:bd:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E4:62:E4:ED:51:8F:89:75:53:34:23:8C:4A:53:05:9C:FC:8F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/32cd9e6a-6b08-3b0e-8210-f35c47b3cea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:0d:7e:64:09:75:9b:6d:e1:3a:40:fd:fd:2c:c0:49:ac:47:
         8c:4c:b1:fd:02:5c:9a:26:33:a0:99:aa:84:ba:c8:b0:af:96:
         19:3b:5e:64:98:c4:b8:ed:67:ca:81:cb:f3:92:f5:eb:d6:63:
         be:a3:9c:3b:ed:be:39:d5:b9:d3:01:a7:5d:d0:fe:40:4a:c3:
         4a:54:0c:11:52:23:5d:12:3d:3c:e3:6b:6b:f4:5d:05:36:79:
         fc:f7:6b:35:8f:8a:4a:89:61:91:48:03:fc:04:91:23:7c:09:
         f0:b8:8b:8e:1d:57:6d:93:18:8d:19:58:26:a1:f8:60:94:dc:
         97:b7:ca:81:1f:b8:e9:38:35:bb:05:cb:38:cb:bb:ef:63:d3:
         09:76:03:73:e4:b2:b3:0d:2b:c8:21:fe:f7:51:40:17:59:08:
         35:f0:f8:cb:05:47:80:88:15:6b:50:e7:75:7a:0e:1f:02:73:
         72:d4:9a:0e:ab:56:ec:00:92:94:1f:b8:88:06:03:fc:21:69:
         22:c8:65:55:4d:30:dd:fe:9e:18:ce:ec:26:49:a3:d0:64:84:
         8c:91:a7:a8:e3:12:27:e5:1d:c3:6a:b0:30:5d:4c:8a:bd:0b:
         62:b0:c7:f5:f0:46:dd:6c:f1:16:7f:7e:5c:23:97:cb:aa:38:
         d4:6a:bd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:15:15 2026 by rpki-client