Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ada970f-ad20-3b9c-add8-c2108da067c9.roa
File:                     8ada970f-ad20-3b9c-add8-c2108da067c9.roa (raw, json)
Hash identifier:          /ERgCS0L7Fr/+txh7wQXl+reHuOomPhZwYrqeN67pUI=
Subject key identifier:   9A:1B:18:62:60:6B:A1:F8:3A:28:4B:9A:27:04:F9:CB:D2:20:04:F0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB5EBBCA3DE531D5740320
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ada970f-ad20-3b9c-add8-c2108da067c9.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        47.32.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:5e:bb:ca:3d:e5:31:d5:74:03:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=3b9162c0-41f5-40b2-a592-89068ca76538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7f:f5:d1:5c:52:6d:8a:20:6c:ad:ee:5a:04:
                    4b:b4:11:56:7e:ed:43:37:58:7f:b1:9f:36:05:95:
                    b4:a8:32:40:02:c4:25:f8:12:85:53:96:39:2e:c8:
                    bd:23:12:75:eb:ea:33:af:e7:11:79:7a:bb:df:74:
                    46:7b:cc:ea:13:e3:22:a9:b6:a3:cc:af:be:21:4b:
                    07:79:dd:e8:c7:b9:f2:73:61:9b:32:7e:60:4d:32:
                    bf:8b:23:54:5e:cf:8e:be:9c:a6:fa:5f:c2:36:98:
                    35:7a:b7:5f:81:ab:a0:fa:3c:98:71:48:d6:73:cd:
                    eb:39:35:1a:23:9f:10:94:bf:59:fc:b5:f8:50:7f:
                    51:c7:0c:14:2d:a9:61:75:77:6b:f2:a0:34:e8:ac:
                    01:5a:2c:99:c1:d6:84:ae:5f:b5:e7:2c:58:f7:79:
                    8d:fe:00:ff:fc:ce:40:8a:bf:40:4e:3d:4e:28:ae:
                    56:25:ab:20:1d:ad:02:d6:d7:ad:b7:be:17:72:f7:
                    af:53:97:ff:7b:92:e5:9d:ac:e9:05:2e:67:70:9d:
                    1b:23:d1:35:b7:43:5e:a7:4f:d1:cb:6a:51:5e:00:
                    a3:40:71:b9:c5:53:bc:43:9a:db:3b:f1:ad:79:fc:
                    1e:05:5f:96:6f:f0:80:94:f7:93:8a:70:fa:df:7d:
                    e6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1B:18:62:60:6B:A1:F8:3A:28:4B:9A:27:04:F9:CB:D2:20:04:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ada970f-ad20-3b9c-add8-c2108da067c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.32.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:96:42:2d:ae:82:13:0a:93:28:e4:5d:ae:cf:3e:9d:c7:21:
         18:5c:ae:f1:f3:3c:c6:c8:c4:67:94:7f:70:02:37:3a:7b:dc:
         be:f8:e4:12:17:1e:9a:8a:7f:dc:4f:a8:0e:39:1d:7d:da:d1:
         f9:43:5d:3d:23:24:55:92:96:96:da:f3:55:84:c9:38:e7:dd:
         25:ee:0c:b9:4b:4c:05:79:58:94:80:33:13:16:36:73:d6:e4:
         4a:ff:c8:2f:27:1f:f9:f2:b6:ca:0b:65:f7:ff:6e:3c:7e:7f:
         73:7b:a2:4e:59:85:44:2f:6d:68:23:87:dc:df:4c:d8:ad:47:
         d8:86:80:4b:e9:64:2a:aa:e3:9f:a0:78:60:01:07:de:cb:72:
         6d:99:bf:ba:17:9b:d5:b9:62:7c:98:02:c2:18:91:96:c1:44:
         e3:55:08:ec:80:d7:41:11:39:9f:67:51:72:3d:8f:d4:33:37:
         b7:db:aa:0b:b0:04:a8:a8:86:53:3a:1b:7e:2e:12:0f:f0:c6:
         1f:aa:05:ff:ce:e2:50:30:25:3c:60:e6:d1:2a:6f:58:ce:13:
         b7:6d:f7:e0:50:61:22:41:59:f2:8c:f9:c9:a6:70:6e:0b:f9:
         95:d0:04:6f:fc:44:4c:64:5a:00:d2:ba:31:1a:32:2e:51:3f:
         b4:d1:a0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:57:29 2026 by rpki-client