Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa
File:                     32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa (raw, json)
Hash identifier:          9YukAFdEH7zjyB16oC1QC68/hJAEYSBF6vWX7gflPAo=
Subject key identifier:   71:55:90:93:92:53:19:BF:9F:80:C5:B9:E4:F2:BB:67:E6:C5:5F:AF
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D143D6A3107A6B15339D50280
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     14114
IP address blocks:        157.133.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:6a:31:07:a6:b1:53:39:d5:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=b37308b0-35ab-4c68-bf69-02b47fe73a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:94:c4:5e:78:4f:29:20:a0:92:66:7f:d5:
                    03:01:9c:2a:c5:00:9a:8b:47:c1:6e:40:16:4d:e7:
                    ae:cd:37:c3:58:2e:0a:ad:56:f9:3c:b1:a3:0c:3f:
                    05:33:26:35:db:f3:d8:a0:ae:bb:c1:1b:e1:53:3f:
                    bc:97:dd:b9:57:1b:55:e0:78:e1:ae:95:61:30:44:
                    1c:2c:fb:0a:6b:1f:7e:ed:0d:28:dc:ea:42:f4:b7:
                    18:81:ba:5b:fb:86:9d:3e:d3:55:c8:28:da:44:ab:
                    0c:e4:fa:6b:6d:41:d6:d1:85:6f:e4:be:31:93:a1:
                    87:4f:9c:96:45:df:d4:9c:dc:3c:cf:64:ef:b3:49:
                    ba:dd:db:4e:03:16:4b:dd:56:f8:a0:9c:4b:a8:14:
                    da:1c:04:b7:09:7f:ca:48:1d:af:b2:48:7f:b7:8e:
                    45:f8:75:28:6b:07:9c:f8:c2:12:61:80:87:dc:ab:
                    75:4b:f0:f4:d0:13:4a:ad:84:fe:b7:29:1c:c5:16:
                    92:3f:35:db:62:43:27:8b:e2:ca:9d:03:90:44:88:
                    f6:db:25:61:65:c7:e2:63:90:03:88:88:32:6c:d5:
                    d0:ff:01:c9:ca:36:b2:2d:67:fa:f2:48:94:d8:82:
                    48:f0:53:57:66:71:97:16:8e:99:ee:62:00:6d:fb:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:55:90:93:92:53:19:BF:9F:80:C5:B9:E4:F2:BB:67:E6:C5:5F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:be:5e:2e:7f:38:68:9e:42:08:f1:15:c3:cf:8c:3e:8f:9d:
         3f:8d:4f:be:f9:24:0f:e8:b8:f5:d8:cc:53:16:3e:82:cd:5b:
         97:19:b9:9e:8c:17:7f:fd:35:1e:88:7a:bc:d3:b5:bb:8a:37:
         53:00:43:75:29:4f:f1:da:3b:0d:84:a5:be:4f:43:12:9f:c4:
         2d:89:a0:c5:0d:04:f9:75:82:f7:3f:c2:f6:c7:67:d7:81:f0:
         30:58:93:31:65:aa:18:73:3f:55:1f:0d:d3:97:53:50:cc:3c:
         02:b6:37:f2:d5:52:28:b4:34:96:6f:1e:87:f3:5d:bb:b3:da:
         64:79:ed:52:d3:46:d2:69:fb:eb:97:70:b8:c4:4c:ab:39:1b:
         8e:c5:8c:79:9e:1e:e9:a3:a1:68:4a:99:11:9f:8c:76:a8:1a:
         d0:8e:81:8b:db:f4:f0:bd:6f:c7:fa:56:ba:65:a0:22:78:be:
         71:42:08:31:b1:8a:7b:7e:91:a6:9a:6b:30:f4:fe:fd:08:2d:
         66:87:64:2b:76:71:3c:99:d2:e7:37:2c:10:82:aa:7c:f7:d6:
         23:de:a1:c3:b3:5f:92:bc:8b:29:fb:43:03:23:50:fb:3f:79:
         5b:ee:ee:18:e1:a4:44:7c:df:07:42:b4:c8:33:5a:f4:31:34:
         36:11:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:55:34 2026 by rpki-client