Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3882367a-4385-354c-b426-03b9c22717da.roa
File:                     3882367a-4385-354c-b426-03b9c22717da.roa (raw, json)
Hash identifier:          c5uZRGLXjr1GpX37ln9jJorpIU944oKHPicvfGwMaQ4=
Subject key identifier:   08:B4:83:AE:BC:17:7A:91:69:CC:B3:71:43:13:F8:89:39:30:86:4F
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D1B19F0F232F1F754B65ED300
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3882367a-4385-354c-b426-03b9c22717da.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     32043
IP address blocks:        173.232.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:f0:f2:32:f1:f7:54:b6:5e:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=bffe8d65-47ca-478e-b943-cd06825a2b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d7:37:e0:03:84:44:f4:94:fe:e3:d7:f3:1d:
                    f0:9b:fe:57:1c:6d:6d:e0:c2:0b:0c:b4:e7:03:4c:
                    72:93:bd:50:48:b9:db:56:8c:37:62:eb:f6:3b:70:
                    65:7d:b1:e5:81:3f:b7:2e:06:c5:b1:7b:15:38:72:
                    e5:38:05:a7:9f:34:c7:b3:f8:53:ea:21:45:1d:3e:
                    36:a6:60:0d:98:9c:b6:58:b1:04:a9:8d:d5:22:14:
                    3f:a7:8f:73:54:eb:7f:56:e1:70:3b:04:46:a3:37:
                    4c:47:44:95:ad:89:58:a4:d1:ae:ee:40:3c:30:ca:
                    35:0c:82:d1:b6:d8:e7:af:94:bb:69:6d:a2:c4:e2:
                    55:a0:27:4f:7c:ae:e6:2f:db:6d:81:92:80:9e:23:
                    3b:7b:bf:26:00:19:a2:27:38:0c:3d:cc:80:56:93:
                    62:d0:c3:3f:c7:e4:35:73:72:66:5d:70:90:e6:d1:
                    dd:87:2f:2f:22:b0:81:fc:4a:15:e2:f8:91:36:f7:
                    19:cf:3a:0f:1e:fc:ea:65:63:c3:95:6f:0b:12:75:
                    1d:75:42:09:ea:92:5b:02:9d:c7:39:00:80:99:5f:
                    97:28:da:e4:1d:4e:4d:9a:d6:b7:4c:de:33:0c:c1:
                    a8:b9:d2:8b:9e:eb:f5:72:fa:11:e0:3f:7a:77:39:
                    c7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B4:83:AE:BC:17:7A:91:69:CC:B3:71:43:13:F8:89:39:30:86:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3882367a-4385-354c-b426-03b9c22717da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e4:2f:27:df:9f:9a:81:83:bd:e8:16:02:94:02:43:5d:44:
         c7:91:8d:a8:c9:31:e3:40:a8:93:30:a9:ac:37:c2:38:cf:6a:
         1a:26:46:74:35:de:6c:8e:38:b3:ff:0f:78:77:c0:97:d8:9f:
         47:e8:e1:fc:c3:c5:cc:ba:c6:e7:c9:5f:c8:7d:11:92:f3:43:
         f5:ef:ee:96:5c:db:72:9c:74:6b:78:51:da:2b:e5:72:36:f9:
         e2:75:36:e9:1e:f5:5a:be:a5:27:ed:a2:fd:e6:ec:8d:47:d0:
         86:96:a0:5c:e6:9e:c0:a2:25:59:2a:24:50:6d:66:fe:78:84:
         07:2a:ce:94:8f:30:ba:b3:eb:a4:20:1a:3e:d4:2f:82:aa:2a:
         60:e7:46:cf:bb:64:e3:a2:a6:80:b4:24:40:98:0e:2b:e2:c7:
         61:dd:fb:82:af:d5:ae:7e:a7:93:bb:ea:43:67:fb:30:b1:7e:
         03:4a:0d:fc:47:7d:88:b0:3b:40:48:09:c4:28:ff:39:39:64:
         78:80:7e:f4:1a:0c:26:9b:27:e8:04:b8:c7:35:cb:3f:87:65:
         b0:9c:07:d5:8f:5e:92:22:4d:63:37:28:92:43:70:6b:71:be:
         db:32:22:54:65:a8:fa:42:26:01:69:61:0a:b1:9c:74:ae:be:
         50:81:d7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 11:59:54 2026 by rpki-client