Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/32bb8fe1-a15d-3201-8e28-2c9628e27fea.roa
File:                     32bb8fe1-a15d-3201-8e28-2c9628e27fea.roa (raw, json)
Hash identifier:          TriHMlSK08BkSkmLhJf6z6KD7uPq6Eaod8aQNvvohNg=
Subject key identifier:   14:03:4F:2A:23:92:7C:49:B8:87:98:BB:50:F2:85:E6:2F:69:82:66
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584F89A85BBA716A63A26CD8F1D0
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/32bb8fe1-a15d-3201-8e28-2c9628e27fea.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     54658
IP address blocks:        96.30.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:5b:ba:71:6a:63:a2:6c:d8:f1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=3a9834a6-e756-41c8-8f84-b2fd8916451d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:ba:59:c1:97:97:13:b2:9f:fe:b4:2c:d3:
                    67:a0:47:72:d7:2c:95:5f:7e:25:0e:31:b5:9f:ff:
                    71:9b:39:46:b9:b0:83:ad:68:3c:60:0d:57:79:ff:
                    44:77:16:dc:1f:41:4b:5c:34:48:92:fb:d6:cc:68:
                    55:c5:6d:8e:38:f3:7a:c5:91:cd:75:06:59:a4:69:
                    68:dd:40:eb:08:6c:f5:4a:68:53:b2:f2:38:a9:2c:
                    aa:d0:93:b7:39:49:c8:d8:4d:07:29:95:f8:df:59:
                    8c:3c:96:66:8d:f1:2d:f8:f8:c9:57:61:b8:c5:08:
                    f4:2c:1d:1e:96:ad:2f:82:1b:e8:f2:b8:dc:07:9b:
                    86:b8:0c:4e:ac:56:c8:7a:11:31:92:59:ec:ba:d2:
                    39:6e:58:96:6b:42:ff:1a:0b:3f:67:4b:c6:26:1d:
                    88:d8:f1:72:b9:97:c4:08:e9:55:c5:a0:ea:2c:cc:
                    53:f1:dd:ca:b7:9d:3a:cc:20:62:1a:a9:16:89:52:
                    7d:e6:c3:a4:d1:7a:7e:6c:70:d5:1c:5e:2e:00:35:
                    82:4d:91:c3:bf:e5:7c:19:f8:d2:d0:c9:35:ee:c5:
                    3a:c7:f6:09:ad:b4:b9:c0:52:c0:4c:d4:3c:f1:c9:
                    53:7d:68:a9:db:5a:e0:69:fd:8a:a5:bd:ab:4c:01:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:03:4F:2A:23:92:7C:49:B8:87:98:BB:50:F2:85:E6:2F:69:82:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/32bb8fe1-a15d-3201-8e28-2c9628e27fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.30.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:c6:14:ea:b1:56:8a:76:c9:89:62:c6:2b:a1:66:e7:81:26:
         c7:07:da:59:d0:f4:59:2e:34:4a:d5:13:c6:a7:23:96:cb:d8:
         89:72:f3:3f:dd:85:3d:cc:16:35:95:79:20:6d:93:f3:65:f3:
         89:f6:e8:11:4a:62:cc:a5:22:e4:56:30:ab:f5:c9:a0:4d:a4:
         47:73:4d:41:84:23:50:d8:2e:0f:93:4d:72:24:8b:af:6c:1b:
         0c:aa:27:b3:44:7d:00:5e:1a:7a:e4:cc:ad:81:5b:b2:e4:c1:
         52:da:0c:16:79:fe:8a:a8:38:4e:ec:c4:1f:f4:b0:a5:55:df:
         7d:84:a8:0d:40:5d:6e:98:6c:7f:92:b9:82:62:2c:99:b7:eb:
         cd:cb:b1:1f:b6:cf:71:53:36:ab:62:11:33:56:43:90:f4:bc:
         b4:a7:ea:c9:9b:70:d3:ec:ec:d3:1b:29:c8:9d:0f:e2:67:32:
         be:39:34:dc:c6:fb:ca:20:94:d0:87:f0:a7:23:a1:76:67:41:
         5c:94:e9:ca:f5:f8:99:79:63:85:43:69:e6:a6:f0:ce:b0:35:
         e2:1f:43:54:69:ee:2c:dc:4f:ca:1f:ce:1c:21:56:2f:92:4a:
         cb:07:0a:a2:48:ae:c8:d2:b2:69:34:1a:8b:36:31:0f:68:5c:
         a0:ba:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:14:32 2026 by rpki-client