Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa
File:                     a68996cc-64bd-36b9-b93b-500d1edd511f.roa (raw, json)
Hash identifier:          ENrjsc8eD+Kp4cHIWzS4EA1JCBobb3aJ/NCqagNe3So=
Subject key identifier:   4A:B4:44:97:BC:46:45:9F:1E:1D:27:69:B9:12:B2:23:23:AE:EC:3D
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F4328584D571FA77BFB5C9760E1A75D00
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     20278
IP address blocks:        172.93.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a7:7b:fb:5c:97:60:e1:a7:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=c31ba1ff-4f9f-413f-8c7f-ddd8a3b70535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:5c:2f:61:5a:23:54:23:cd:23:aa:f8:0e:
                    af:c5:3f:48:8a:ba:e9:d9:0d:1f:2f:0d:2f:de:4e:
                    ca:c7:cb:14:b7:8e:3f:ba:d2:cd:5b:43:2c:0a:7b:
                    d0:4a:10:63:00:57:d7:e0:a4:eb:d3:df:45:3e:c8:
                    e5:a0:fc:49:6b:e5:7e:0e:e3:21:45:34:31:bf:11:
                    42:26:2e:94:fc:51:d7:de:28:f7:b6:f5:59:c7:0a:
                    c8:55:32:b6:0c:c6:f1:f2:c8:dc:9d:20:03:59:06:
                    59:05:c4:d3:ee:b8:65:2f:e6:80:bc:26:15:aa:02:
                    6d:77:b4:25:7d:7e:e8:4e:6e:ec:46:e6:53:69:b2:
                    8a:2e:8b:16:50:c8:93:82:26:1e:47:b3:e0:02:05:
                    75:b5:e5:4b:ce:4c:e4:8b:02:5d:03:16:2f:28:09:
                    b6:e2:1a:82:98:79:c3:17:b1:d1:10:21:94:5e:3b:
                    84:97:63:af:37:13:0d:e6:90:81:76:24:e6:14:08:
                    77:06:2b:b1:37:05:45:c9:ec:22:d0:7f:94:2d:da:
                    08:2a:6d:a3:d7:f6:b9:72:e2:1f:33:0d:99:c2:b7:
                    77:41:35:45:cf:36:f6:6f:df:66:e2:55:6c:a7:ba:
                    83:bc:0f:71:a8:70:e6:a8:e1:97:cd:95:17:14:e2:
                    a4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B4:44:97:BC:46:45:9F:1E:1D:27:69:B9:12:B2:23:23:AE:EC:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:98:50:b3:1a:40:38:6f:53:46:5a:7f:f4:8b:e2:5d:a5:c2:
         8b:d7:e1:6e:2e:d8:47:da:e4:11:7d:6c:0b:2b:3d:b2:e7:11:
         a2:f7:d0:43:88:45:19:e5:ed:b4:03:07:0b:d5:72:e9:20:9f:
         60:98:a5:27:89:61:6e:25:3f:4f:5d:e0:8b:33:d5:2d:5e:3d:
         b0:05:ab:db:9b:c1:1d:b6:f3:70:a0:de:6b:6d:c9:a8:85:86:
         60:23:e2:41:9b:04:e0:0a:62:4b:a3:99:ea:4f:c9:c1:a5:f7:
         08:e6:d7:b9:a5:ed:9e:78:60:42:28:73:70:cc:e6:1d:52:0b:
         bb:5c:bb:75:60:25:0e:d1:a2:75:52:fc:c4:79:a8:7e:f6:9c:
         47:ee:7d:87:71:79:51:06:67:69:d1:68:56:b2:fd:3e:ab:47:
         85:9f:4e:2b:cc:2c:f4:71:83:69:a0:d5:b8:05:79:b8:ae:21:
         a0:99:16:43:d6:9a:e7:70:ea:21:08:72:52:62:51:40:de:bc:
         5e:fd:7e:64:ec:ab:fe:78:f7:40:ed:09:6c:88:c6:dc:d3:88:
         d5:1c:28:cb:53:52:66:7a:5d:ed:18:b4:a1:a1:e2:f1:61:05:
         51:9a:c6:75:b2:35:c8:35:90:5d:d2:a4:55:7c:77:c7:98:79:
         4a:31:f7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:31:53 2026 by rpki-client