Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/32ccbbe6-ab71-3674-a938-9630bf9d1890.roa
File:                     32ccbbe6-ab71-3674-a938-9630bf9d1890.roa (raw, json)
Hash identifier:          4/rfnoQ7eWUWmD6QSNdHJFS7t4WshQr8HEXwXA/m3Pg=
Subject key identifier:   79:01:49:F0:77:A5:BB:61:97:1A:D9:04:04:E9:FC:C5:30:1F:1D:F6
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584DFA707C29866906F3BD0D6340
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/32ccbbe6-ab71-3674-a938-9630bf9d1890.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     46261
IP address blocks:        23.226.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:7c:29:86:69:06:f3:bd:0d:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=0ac7aa9b-47a5-44e8-989c-fcfcf488e35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:bb:42:b1:90:66:cb:1b:62:be:0a:bb:86:
                    54:95:b2:cd:a1:4b:64:c3:e6:86:1a:44:05:0c:45:
                    bc:8a:a7:95:1d:1b:2a:8c:a1:cb:aa:8e:36:6b:3c:
                    2b:8a:1b:bd:e2:4e:e2:c1:a7:82:d1:cb:04:53:f4:
                    77:6c:b8:50:53:10:c7:a6:ec:ab:58:a0:5b:b2:26:
                    d1:07:9c:8f:4f:89:e2:e6:b9:25:ab:c5:5d:75:bb:
                    13:ea:95:5c:8f:89:b3:54:d0:8a:d1:c1:8b:4a:c2:
                    7b:d2:17:e7:75:d4:b5:fb:06:49:75:0e:78:6b:53:
                    1c:c0:a4:cf:ed:80:05:f9:36:ed:14:93:d5:2a:24:
                    54:b8:1f:97:40:3d:f2:6a:3b:ae:7e:7c:92:3f:9c:
                    ff:ab:09:18:2c:cf:9c:bb:40:23:5a:05:d7:1a:db:
                    39:ea:bd:01:85:1a:d6:c9:52:aa:a7:b2:cf:a8:1e:
                    f6:7d:4e:90:b7:ca:b7:ee:99:25:3a:cc:ec:b0:30:
                    f2:af:13:3e:07:d7:a7:37:db:c7:7e:70:9c:ed:75:
                    50:26:24:8a:63:e6:da:7c:5d:45:6c:d2:80:a6:66:
                    5f:57:01:ec:14:ba:00:f2:b1:53:d6:de:3b:55:38:
                    b7:b5:f5:c3:9f:f0:b8:d4:52:de:df:88:02:2d:5c:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:01:49:F0:77:A5:BB:61:97:1A:D9:04:04:E9:FC:C5:30:1F:1D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/32ccbbe6-ab71-3674-a938-9630bf9d1890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:66:80:7d:98:2c:49:98:e8:02:a6:0b:fd:7f:eb:79:34:90:
         fb:21:ee:9d:bf:36:c1:6d:e5:b3:ce:c7:3d:f8:c0:76:57:bc:
         10:00:a1:a0:2a:8a:a0:fe:7a:c9:a3:62:85:88:94:49:94:f6:
         d2:0d:a2:ca:e3:9c:1f:7d:f0:12:91:e4:f5:77:52:a1:bd:5f:
         ae:b6:f2:ba:e1:4d:1d:b7:83:68:15:27:7f:53:b5:d7:c2:c4:
         ae:d2:e7:0f:24:76:cb:56:93:97:43:1f:21:9a:7f:c0:ae:6f:
         fb:7b:2d:08:a9:37:d7:f8:6c:88:1e:2f:0c:df:24:e7:1c:e2:
         57:d6:37:64:02:89:cc:9e:a2:e9:ed:d8:05:fa:8b:4d:ad:85:
         3c:ae:b7:e8:6a:be:a1:f5:90:78:0f:f9:90:fd:01:65:4c:d5:
         64:35:a9:50:00:ae:a5:b3:7a:40:5b:2d:d1:0c:4a:af:be:bc:
         ed:d7:a4:f3:01:ac:2f:b8:79:df:76:28:fb:d9:6d:16:a1:1f:
         2c:fc:7f:5a:b0:a4:0f:5d:de:79:a5:82:d1:c9:25:2c:97:f8:
         9e:91:4b:52:73:6e:3a:7d:26:9d:b8:17:7a:39:c8:61:fd:0d:
         7f:f5:70:0f:3a:3f:e2:07:18:6a:8b:a7:01:9b:25:49:18:af:
         a8:55:12:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:38:38 2026 by rpki-client