Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa
File:                     32b7203d-9659-3b14-bb18-4e5cd1159b83.roa (raw, json)
Hash identifier:          0W67yz6WGsD+B2dFVKKHUkIPO9BXN89a0Hf6jgGnRjc=
Subject key identifier:   F8:FB:96:70:49:A7:D3:92:DB:14:69:2E:29:4B:10:1B:71:12:BD:49
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584DEF45DD05AE8AF0BA05CB0E00
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     40493
IP address blocks:        216.37.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:dd:05:ae:8a:f0:ba:05:cb:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=26a1a544-ef85-4208-b5c3-da37e2417151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:56:1e:9a:11:12:02:d6:94:6e:bc:8f:29:63:
                    7f:ba:72:7c:08:57:93:e7:ce:51:82:60:3e:4a:ea:
                    f9:23:f7:fc:1c:b6:8d:69:cf:df:32:60:a9:01:85:
                    18:6f:c5:b3:29:02:97:ad:57:0f:76:6b:1f:8b:9b:
                    8d:de:91:aa:98:71:b7:e9:02:22:6b:f9:d6:ce:93:
                    0c:e7:a4:df:d0:9b:ea:d8:d8:e7:df:a8:28:88:6b:
                    5e:c3:48:5c:bf:fe:50:b2:0b:e6:72:8d:88:49:c5:
                    78:9a:0b:5d:cb:a0:e7:91:01:77:30:87:cb:9b:f3:
                    57:f2:ac:90:2e:b2:49:a0:5d:8b:cd:d8:5f:04:52:
                    ad:29:b0:e5:e6:e1:ec:68:c2:a4:c4:84:0c:3f:56:
                    22:af:26:b5:9c:db:85:55:12:1d:2e:26:78:22:74:
                    09:4d:f2:c9:a7:7c:e2:f4:23:28:85:40:90:69:90:
                    dd:21:ab:d4:35:b7:75:4d:21:5d:6e:4f:a2:22:bf:
                    27:aa:17:0c:6b:da:94:10:b7:aa:f2:29:db:9d:e0:
                    02:46:c9:7d:9c:d2:30:eb:dc:62:fd:5a:6f:5b:23:
                    89:49:d1:9d:9e:e9:fe:ca:82:aa:da:0e:a9:8c:8a:
                    1a:62:8d:31:77:95:d4:2a:d7:c0:18:29:f0:d6:b8:
                    72:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FB:96:70:49:A7:D3:92:DB:14:69:2E:29:4B:10:1B:71:12:BD:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.37.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:0a:ec:15:96:f4:ab:0c:38:f2:33:4a:3e:c5:75:b8:86:c0:
         32:10:db:3d:68:0f:81:04:66:1e:01:b4:8d:1d:3c:6a:04:0c:
         d5:a1:03:fb:b6:f3:ac:61:e6:c4:66:40:81:73:be:a8:fc:64:
         6e:15:4c:3b:f8:86:3a:fa:13:e8:d8:76:2f:e5:29:bd:07:cb:
         f8:32:dd:84:f7:08:e8:5f:74:87:e4:a8:4d:8d:82:75:3a:c4:
         da:63:10:4f:67:55:ab:41:d6:b0:5a:ee:39:f2:6d:b1:3e:f8:
         91:41:bf:39:55:73:40:13:db:97:45:de:f9:57:f2:b4:cd:03:
         87:7d:f3:b3:97:f9:ee:ca:57:60:96:76:50:c7:03:14:d5:8c:
         78:a5:4b:9e:1d:6f:16:b5:f0:1e:9f:92:eb:b9:bd:10:e9:7e:
         64:db:29:f9:72:b8:0f:06:75:e2:e2:7e:e6:25:7c:64:5a:c0:
         34:83:e7:a2:f3:d1:e8:d3:f3:c5:20:56:dc:a9:dd:12:38:1f:
         a4:2d:7a:9c:06:c9:02:b1:8c:a5:74:8a:9a:67:3b:d1:0a:70:
         e6:2b:5a:67:a0:d3:8c:45:b6:3f:3b:91:53:13:cc:9d:7f:25:
         43:8c:48:dc:2f:05:52:07:f0:f5:e5:4b:71:00:f0:49:d4:ea:
         4a:86:09:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:41:01 2026 by rpki-client