Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/ece5eebe-12a0-36b1-b8d2-447fa59748cc.roa
File:                     ece5eebe-12a0-36b1-b8d2-447fa59748cc.roa (raw, json)
Hash identifier:          qwMogxxUbWQ5SfBJZwaMyINn3QQTGUT6fnUO2qmoa2c=
Subject key identifier:   4B:C1:E9:6D:EE:C8:FC:A5:B3:71:5E:5C:B0:2C:33:52:DF:EA:77:D2
Certificate issuer:       /CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76
Certificate serial:       010D0C9F4328584D94ACCBF37B3A5F9404296B90
Authority key identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/ece5eebe-12a0-36b1-b8d2-447fa59748cc.roa
Signing time:             Tue 21 Apr 2026 14:09:22 +0000
ROA not before:           Tue 21 Apr 2026 14:09:22 +0000
ROA not after:            Mon 20 Jul 2026 14:09:22 +0000
asID:                     13335
IP address blocks:        149.112.78.0/24 maxlen: 24
                          199.7.70.0/24 maxlen: 24
                          2001:500:210::/48 maxlen: 48
                          2001:501:210::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:ac:cb:f3:7b:3a:5f:94:04:29:6b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76
        Validity
            Not Before: Apr 21 14:09:22 2026 GMT
            Not After : Jul 20 14:09:22 2026 GMT
        Subject: CN=d5b486f5-2c4e-47cf-9ec1-a4d3f42d1840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5e:98:6a:53:28:1a:f0:57:2a:0c:54:cd:09:
                    51:83:b9:ca:f6:a7:c2:24:84:b6:84:8a:97:14:a8:
                    ec:be:a0:80:aa:c5:26:ea:a5:d6:9b:a7:2f:9e:4b:
                    9b:bc:73:9e:11:7c:da:2d:f9:f9:a5:29:e7:ff:de:
                    a4:f3:da:15:03:b6:f2:96:7e:0c:f8:59:b0:1b:a5:
                    30:2c:67:a3:38:73:18:2e:c6:8c:e9:db:3f:9f:99:
                    f0:5b:ea:a2:04:b3:9d:c7:1d:12:77:ea:85:e6:af:
                    a6:55:f7:80:be:48:a5:a2:b4:65:1a:db:ef:65:3b:
                    d6:a5:db:c0:40:71:36:60:e3:6c:ea:12:02:aa:b6:
                    b8:3a:b4:30:2a:92:1f:f4:ef:4d:b5:6d:4e:75:ab:
                    a4:4e:01:f6:19:04:d8:c0:1e:2c:38:55:ff:6b:1d:
                    33:f2:a0:9a:b2:31:d9:ca:63:ee:d9:c4:7d:8b:3a:
                    ce:0a:5d:94:d3:32:f8:e8:05:16:96:df:57:9f:14:
                    50:98:38:c2:00:36:84:53:c7:ee:95:e0:91:02:66:
                    9b:95:8a:65:0a:e7:1f:0b:c6:a4:0c:af:6d:ef:51:
                    6e:13:16:86:ea:ef:79:e7:5a:0d:4d:de:d3:da:6b:
                    39:ba:4e:c3:bb:cf:63:fb:cc:1a:ae:ce:7f:7d:cf:
                    e2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C1:E9:6D:EE:C8:FC:A5:B3:71:5E:5C:B0:2C:33:52:DF:EA:77:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/ece5eebe-12a0-36b1-b8d2-447fa59748cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.78.0/24
                  199.7.70.0/24
                IPv6:
                  2001:500:210::/48
                  2001:501:210::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:78:fc:9c:d9:e8:6e:c9:bc:56:16:89:9b:0b:4d:b5:e9:30:
         11:55:b0:cf:97:75:db:6b:b9:d2:fe:cb:a2:59:12:dc:29:30:
         1e:c4:df:9f:23:fc:3b:65:76:df:02:e6:5d:39:91:52:37:5e:
         dc:75:95:3d:99:05:49:1d:f6:f8:61:f5:fa:7b:0f:13:46:4b:
         0a:d1:af:1b:0d:c1:d4:cd:66:78:35:9f:bf:b8:9d:d6:ff:98:
         31:d3:31:58:bd:8a:02:f3:ee:82:6a:2a:e0:ba:54:bb:0e:2d:
         13:41:9d:28:34:48:dd:a5:fa:21:f6:ed:15:73:2b:78:37:0f:
         67:b2:f7:b5:57:a6:96:6e:5f:2b:65:1f:6d:1c:39:3a:04:49:
         3f:fa:01:df:1c:61:e6:38:4d:de:e7:ff:25:0a:de:bc:bf:5a:
         44:f9:86:0d:ed:dc:6c:e6:90:40:82:fe:59:54:bb:42:3f:29:
         7b:5f:87:97:4d:6b:4c:5e:39:2a:81:4d:ab:b0:86:82:ef:cc:
         e4:1c:bc:c8:77:ed:45:6b:aa:c9:d0:a0:f9:84:c8:d7:08:83:
         e6:4d:35:e0:cf:4d:69:d5:cf:28:cb:76:4b:3e:5c:71:b3:73:
         78:89:63:8f:c9:62:91:18:49:fa:75:e4:6c:9b:c5:e0:de:7a:
         47:ce:be:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:12:31 2026 by rpki-client