Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/471bf59f-b37c-3055-9b37-6ed7a1bc4a4a.roa
File:                     471bf59f-b37c-3055-9b37-6ed7a1bc4a4a.roa (raw, json)
Hash identifier:          1CEXAeoO9atELVsI7u790TxiBC3royykOhyp6GN//9I=
Subject key identifier:   E0:1B:05:A8:8D:D4:64:8C:A0:DB:3C:A2:2F:EE:C7:C3:AE:E7:1D:F1
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584EAA5196C15AB14E5A3DD0F600
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/471bf59f-b37c-3055-9b37-6ed7a1bc4a4a.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     32806
IP address blocks:        208.114.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:96:c1:5a:b1:4e:5a:3d:d0:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=95ad0824-9803-4ef3-bd85-78386152a608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8e:57:6b:1e:e5:46:6a:0b:6a:2a:1f:35:51:
                    f4:1a:ce:f4:b7:cb:9f:0a:75:99:ee:32:13:2a:5a:
                    50:95:aa:cf:42:5d:9b:43:ef:06:74:6d:cc:7d:91:
                    4d:a9:f8:bd:8e:ca:e3:d1:c6:ea:65:7d:eb:16:d5:
                    01:5d:0b:49:f4:35:48:38:18:9d:36:ce:2d:d0:4b:
                    5b:77:4f:53:8a:6f:ae:ba:31:30:f3:ae:f4:68:26:
                    e8:41:9a:fb:6d:10:75:36:8d:42:05:a6:3a:f4:03:
                    73:a1:be:bd:47:4e:8f:40:b1:a5:cf:7f:52:c6:94:
                    b8:ee:c3:e8:f0:6d:22:a0:e4:50:43:7f:62:f7:86:
                    57:6f:81:48:48:7e:07:67:fa:92:f2:99:3a:6c:34:
                    e5:c3:3a:c5:8b:3b:a5:e9:29:e6:6b:2b:bc:dc:ce:
                    35:d6:cc:c6:83:55:5f:76:86:cc:99:58:dd:fc:7d:
                    0b:4b:1d:21:2b:d6:a9:e1:e5:d2:39:91:90:e4:5d:
                    35:36:be:c0:b5:99:44:8e:89:13:1f:02:d7:69:4d:
                    0a:10:f4:89:7d:05:ef:53:30:7c:1c:4f:47:0d:80:
                    da:e1:97:02:2d:4f:29:f6:42:b9:ec:0c:a5:f4:dd:
                    2f:28:eb:a6:77:c7:ed:9f:d1:69:5a:ea:c6:f4:01:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1B:05:A8:8D:D4:64:8C:A0:DB:3C:A2:2F:EE:C7:C3:AE:E7:1D:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/471bf59f-b37c-3055-9b37-6ed7a1bc4a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:5c:71:b6:42:8a:3a:c9:19:96:b0:cd:b3:f8:6b:a2:71:bd:
         1e:d0:61:4d:67:2e:1a:c9:ef:c4:f8:ac:29:da:14:3c:cc:e7:
         cf:0e:78:5f:62:24:4c:12:99:49:22:7a:46:2e:73:09:73:e1:
         52:49:ca:01:17:3d:21:87:c9:8b:3b:1f:70:1f:2b:34:9f:53:
         e4:b7:ac:89:e7:de:80:37:e2:ce:04:86:d0:93:fa:62:97:b4:
         03:3d:f0:95:b5:7d:45:98:92:ee:08:d6:3c:8a:cc:05:64:eb:
         45:37:e3:fb:d6:92:dd:80:6c:30:29:37:b4:4a:d6:f6:16:92:
         fd:65:7d:11:92:b6:d1:7d:10:ec:12:33:93:e4:07:76:88:80:
         9f:a3:76:e8:f9:d9:81:01:b8:a2:49:66:79:4d:a0:a0:6c:99:
         a5:07:6b:fa:89:3f:a1:82:e5:d8:ec:2c:55:86:b6:04:b6:72:
         05:db:66:d1:65:ca:22:8b:5b:47:ec:cd:a7:60:da:fc:95:03:
         74:a1:d9:a5:7b:08:7d:ab:07:a5:7a:43:8c:3e:3b:36:30:3e:
         0f:af:2a:e8:6a:91:0f:f0:5e:f5:26:78:97:3d:ad:99:bc:2b:
         f5:5f:d0:f7:4e:39:cf:7f:35:d6:a9:46:f8:74:c6:a3:71:01:
         0a:8e:96:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 05:42:50 2026 by rpki-client