Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/32f86f92-7988-34a2-9103-d3c579d34252.roa
File:                     32f86f92-7988-34a2-9103-d3c579d34252.roa (raw, json)
Hash identifier:          Gogtl+3MFfvMNLXay4VJCCvnaiWCX75KBJ4NMkdE/RA=
Subject key identifier:   FA:A2:03:10:49:67:3F:B5:94:0C:15:D0:D6:3D:11:6B:41:60:C5:3C
Certificate issuer:       /CN=d82d4750-e662-4d1e-b294-2c61d570b23e
Certificate serial:       010D0C9F4328584DF69F8DF491DCA620A2B2CC00
Authority key identifier: 1E:04:A2:0C:F8:BE:12:0E:F0:68:DC:A0:99:5A:E8:C0:1A:75:DF:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/32f86f92-7988-34a2-9103-d3c579d34252.roa
Signing time:             Tue 26 May 2026 16:11:55 +0000
ROA not before:           Tue 26 May 2026 16:11:55 +0000
ROA not after:            Mon 24 Aug 2026 16:11:55 +0000
asID:                     402159
IP address blocks:        170.101.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/d82d4750-e662-4d1e-b294-2c61d570b23e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/d82d4750-e662-4d1e-b294-2c61d570b23e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:9f:8d:f4:91:dc:a6:20:a2:b2:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d82d4750-e662-4d1e-b294-2c61d570b23e
        Validity
            Not Before: May 26 16:11:55 2026 GMT
            Not After : Aug 24 16:11:55 2026 GMT
        Subject: CN=0af542da-7ac3-49b8-ac2d-8cfbfb8055ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:47:f9:4e:37:2d:c3:42:38:5a:d1:d7:6a:
                    9b:2f:c3:64:b3:c7:8c:08:95:f9:cb:1a:9b:42:fa:
                    5f:0c:5e:bc:23:90:bb:df:37:15:9a:f1:bb:56:77:
                    b0:ba:68:d1:6d:b0:61:12:00:0a:64:4c:27:c7:80:
                    e7:74:0e:57:a1:56:83:80:e1:0b:d3:5b:5d:ad:da:
                    5e:92:03:68:a2:63:5f:98:70:3c:c5:ce:47:6e:92:
                    ba:4a:5d:df:2c:51:79:0c:23:43:82:b3:60:02:18:
                    47:f8:ec:3f:60:d6:2a:ac:49:2d:09:e9:46:05:c7:
                    1b:ca:29:4f:1c:3b:ef:23:3f:61:c5:44:13:85:20:
                    b0:6a:13:c7:33:7e:d2:4a:37:25:37:06:2c:ba:87:
                    09:ec:4a:bd:d1:8c:ff:61:de:4a:73:d7:b4:a1:73:
                    83:b8:cd:2a:24:b7:2f:26:37:6c:99:db:0a:a9:87:
                    11:ce:de:f7:31:86:cd:af:b5:b3:35:19:82:71:03:
                    14:12:64:3b:76:92:83:5f:52:91:08:52:eb:6c:e2:
                    4a:fc:a8:ad:14:69:05:f0:8c:73:d2:f0:5a:a1:05:
                    eb:f3:9a:47:0e:10:1c:dc:52:41:a0:3a:a5:b2:af:
                    f5:f4:61:ea:6c:c1:e2:e1:c4:b4:19:1e:2f:c5:7a:
                    7d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A2:03:10:49:67:3F:B5:94:0C:15:D0:D6:3D:11:6B:41:60:C5:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/32f86f92-7988-34a2-9103-d3c579d34252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/d82d4750-e662-4d1e-b294-2c61d570b23e.crl

            X509v3 Authority Key Identifier:
                keyid:1E:04:A2:0C:F8:BE:12:0E:F0:68:DC:A0:99:5A:E8:C0:1A:75:DF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.101.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:25:a5:1f:55:05:9b:9d:9b:b0:bf:25:b3:49:95:05:60:bb:
         90:e6:06:51:09:26:3b:73:ac:90:a5:ff:bf:c8:b0:43:73:a7:
         ea:fb:3a:f4:b5:77:be:06:ce:e7:22:97:38:ff:60:49:2a:19:
         52:b4:c2:19:61:e3:95:cf:b6:cb:65:d8:f4:c3:b4:f3:54:2b:
         f0:0b:07:49:cd:61:b5:70:9e:8a:45:ca:38:a3:d6:cb:89:b3:
         fb:4c:f8:b5:d5:91:bb:88:9a:9b:61:e9:21:44:c0:a4:bd:de:
         a0:bf:3a:72:24:18:77:89:e8:36:24:9e:fe:e6:77:ef:45:b8:
         10:09:43:b7:e6:fe:57:44:28:0c:c0:78:ec:d4:5b:c3:80:3f:
         92:b5:00:25:1b:f1:8f:65:5d:39:ea:34:b5:1a:0e:d0:0d:38:
         b7:4b:cc:4f:c4:2c:7f:51:69:e6:66:61:0a:b2:49:a7:dd:b5:
         bb:b0:29:3c:43:ef:4c:b4:87:eb:53:56:dc:fe:95:fe:cc:93:
         80:f2:54:3f:1f:7d:1a:9d:d9:4e:7f:87:3c:a1:56:5a:d0:11:
         3a:2e:4f:d8:f6:2c:d4:62:97:0a:42:9a:90:44:d0:25:79:38:
         cd:a5:56:78:66:f6:50:7d:b0:45:db:f6:5d:48:51:1a:83:9f:
         b0:74:5a:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32n430kdymIKKyzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDgyZDQ3NTAtZTY2Mi00ZDFlLWIyOTQtMmM2MWQ1NzBi
MjNlMB4XDTI2MDUyNjE2MTE1NVoXDTI2MDgyNDE2MTE1NVowLzEtMCsGA1UEAxMk
MGFmNTQyZGEtN2FjMy00OWI4LWFjMmQtOGNmYmZiODA1NWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVZH+U43LcNCOFrR12qbL8Nks8eMCJX5yxqb
QvpfDF68I5C73zcVmvG7VnewumjRbbBhEgAKZEwnx4DndA5XoVaDgOEL01tdrdpe
kgNoomNfmHA8xc5HbpK6Sl3fLFF5DCNDgrNgAhhH+Ow/YNYqrEktCelGBccbyilP
HDvvIz9hxUQThSCwahPHM37SSjclNwYsuocJ7Eq90Yz/Yd5Kc9e0oXODuM0qJLcv
JjdsmdsKqYcRzt73MYbNr7WzNRmCcQMUEmQ7dpKDX1KRCFLrbOJK/KitFGkF8Ixz
0vBaoQXr85pHDhAc3FJBoDqlsq/19GHqbMHi4cS0GR4vxXp9mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPqiAxBJZz+1lAwV0NY9EWtBYMU8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kODJk
NDc1MC1lNjYyLTRkMWUtYjI5NC0yYzYxZDU3MGIyM2UvMzJmODZmOTItNzk4OC0z
NGEyLTkxMDMtZDNjNTc5ZDM0MjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZDgyZDQ3NTAtZTY2Mi00ZDFlLWIy
OTQtMmM2MWQ1NzBiMjNlL2Q4MmQ0NzUwLWU2NjItNGQxZS1iMjk0LTJjNjFkNTcw
YjIzZS5jcmwwHwYDVR0jBBgwFoAUHgSiDPi+Eg7waNygmVrowBp13ycwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9kODJkNDc1MC1lNjYyLTRkMWUtYjI5NC0yYzYx
ZDU3MGIyM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqmUgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQlpR9VBZudm7C/JbNJlQVgu5DmBlEJJjtzrJCl/7/IsENzp+r7OvS1
d74Gzucilzj/YEkqGVK0whlh45XPtstl2PTDtPNUK/ALB0nNYbVwnopFyjij1suJ
s/tM+LXVkbuImpth6SFEwKS93qC/OnIkGHeJ6DYknv7md+9FuBAJQ7fm/ldEKAzA
eOzUW8OAP5K1ACUb8Y9lXTnqNLUaDtANOLdLzE/ELH9RaeZmYQqySafdtbuwKTxD
70y0h+tTVtz+lf7Mk4DyVD8ffRqd2U5/hzyhVlrQETouT9j2LNRilwpCmpBE0CV5
OM2lVnhm9lB9sEXb9l1IURqDn7B0Wtc=
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:47:52 2026 by rpki-client