Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa
File:                     a68996cc-64bd-36b9-b93b-500d1edd511f.roa (raw, json)
Hash identifier:          N0Er0l+RoNeEdmM6YA2vq8mPxg9fQfIa8xokgTVvpZc=
Subject key identifier:   33:E6:C0:6F:2A:82:A1:3A:E4:E2:E9:98:C9:26:A8:3A:EC:7A:61:5A
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F4328584E37646D3F946BDE257E98F280
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     20278
IP address blocks:        172.93.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6d:3f:94:6b:de:25:7e:98:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=3edc84b9-58fc-4293-b347-a18b8869b8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:7b:45:fd:77:06:cb:fd:24:17:12:ef:14:
                    24:01:d6:49:1e:f5:6e:36:5f:e3:32:3f:94:b1:a8:
                    9f:15:e7:ce:bb:68:4d:36:f0:c7:da:65:95:5a:0b:
                    65:18:d5:db:b4:56:aa:e1:78:79:e0:3b:f9:a4:aa:
                    f8:ca:ca:9b:30:1e:c8:d4:0c:f0:c1:c7:7f:31:e4:
                    8c:a5:f9:d9:17:b3:22:81:e3:c8:67:e5:87:6c:d6:
                    19:73:df:a5:a9:49:ec:c4:da:b6:05:02:8e:59:ad:
                    93:02:55:2b:c9:97:6a:dc:29:e6:be:6e:5c:a3:55:
                    9b:4f:81:ed:3b:4f:34:27:09:95:e6:aa:67:ea:d0:
                    31:23:66:a3:72:a4:c7:bd:52:a3:e9:57:bb:e4:71:
                    42:10:33:63:40:a7:23:cc:40:2f:14:5f:91:fc:d4:
                    29:bb:2d:a3:93:7a:96:d1:66:e7:40:55:08:e7:ec:
                    0a:b6:cc:2f:7c:6e:21:24:7e:34:fb:17:2c:3e:01:
                    b6:93:17:57:ff:6f:51:15:94:2b:49:b6:c7:fa:97:
                    86:96:71:b7:e6:c7:e0:03:77:d7:c2:b2:bb:b6:3c:
                    43:99:44:b8:36:7f:15:59:6e:fe:21:04:78:2a:98:
                    e5:6b:e6:80:c5:98:2f:d1:6d:66:5c:1a:ce:43:69:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E6:C0:6F:2A:82:A1:3A:E4:E2:E9:98:C9:26:A8:3A:EC:7A:61:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ba:9f:c7:21:cb:bd:18:3a:38:a7:21:cd:15:67:a7:a7:af:
         40:49:6f:7d:7e:42:ca:88:68:dc:9c:52:99:2a:92:de:66:24:
         51:b7:b1:2b:88:c1:29:43:1a:5e:27:81:bf:51:39:00:22:29:
         81:c4:5e:8a:a0:69:32:a2:3c:a8:87:ca:ed:2e:4e:3e:6b:06:
         ab:bb:88:50:0e:5c:95:d1:2d:02:dd:25:ae:98:ba:9c:20:b5:
         59:ed:dd:9c:3b:44:e7:be:79:4a:52:f5:d2:dd:50:0e:7d:fe:
         0b:c8:c1:7d:2f:74:01:e7:62:47:63:13:06:37:ff:1c:03:fe:
         67:ab:40:fe:41:bd:99:b0:53:88:52:d0:74:b6:08:e2:3a:cc:
         6a:12:b4:17:02:7f:00:a4:75:41:3b:4c:a9:55:32:32:40:61:
         34:95:5f:e5:56:30:45:d9:68:1d:f6:96:cc:6a:dc:96:3e:d3:
         bc:8b:22:8f:5d:44:14:86:39:9d:68:54:0b:4b:30:3f:53:3d:
         92:c2:18:db:bf:42:85:c4:6a:be:54:66:a6:f7:38:12:60:61:
         75:ce:78:a8:2c:60:05:5f:9b:25:43:af:b6:4a:01:c2:3b:e4:
         30:f4:f3:18:13:7e:fe:39:0c:b3:51:54:81:05:6f:c4:28:42:
         99:73:a4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 14:50:22 2026 by rpki-client