Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/32a1029b-bb0b-3a71-a143-dfa9509a4583.roa
File:                     32a1029b-bb0b-3a71-a143-dfa9509a4583.roa (raw, json)
Hash identifier:          cDexbJUkHzkmkyjsdp8PQplHhhXQilKuGp7oW9eii9Q=
Subject key identifier:   0E:8F:6F:E8:28:91:A9:DE:6D:38:BF:9D:8C:72:58:97:04:E3:B8:AA
Certificate issuer:       /CN=4936e456-c9b5-43ef-8bdf-475338747125
Certificate serial:       010D0C9F4328584F2C225844D6A40EEF1C4DF0C0
Authority key identifier: 96:44:FC:2E:15:E6:90:83:4E:9A:85:53:91:B8:1A:E2:8C:4A:35:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/32a1029b-bb0b-3a71-a143-dfa9509a4583.roa
Signing time:             Mon 14 Sep 2026 13:00:12 +0000
ROA not before:           Mon 14 Sep 2026 13:00:12 +0000
ROA not after:            Sun 13 Dec 2026 14:00:12 +0000
asID:                     32415
IP address blocks:        64.139.208.0/24 maxlen: 24
                          64.139.209.0/24 maxlen: 24
                          64.139.210.0/24 maxlen: 24
                          64.139.211.0/24 maxlen: 24
                          64.139.212.0/24 maxlen: 24
                          64.139.213.0/24 maxlen: 24
                          64.139.214.0/24 maxlen: 24
                          64.139.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/4936e456-c9b5-43ef-8bdf-475338747125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/4936e456-c9b5-43ef-8bdf-475338747125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:22:58:44:d6:a4:0e:ef:1c:4d:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4936e456-c9b5-43ef-8bdf-475338747125
        Validity
            Not Before: Sep 14 13:00:12 2026 GMT
            Not After : Dec 13 14:00:12 2026 GMT
        Subject: CN=9ced6ccc-a867-4135-b551-7b1fce772368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c7:7d:fa:b6:87:36:e0:b7:ad:74:47:5a:52:
                    5e:60:af:0d:d7:28:7e:d5:66:ac:fd:92:7d:62:46:
                    ac:c8:1a:cf:88:a2:77:76:5f:b5:ce:f3:04:68:57:
                    80:af:7b:bd:b1:eb:e1:e1:0d:32:d2:c6:53:db:cb:
                    aa:d1:e1:0b:46:6d:cd:b7:a7:f4:b0:8f:8e:06:1d:
                    7f:db:c4:f3:8c:4f:b1:dc:07:60:b4:1f:3e:45:b7:
                    16:41:b1:21:80:e5:c1:a4:21:96:ec:7d:db:6e:95:
                    3f:f8:b1:45:43:35:a5:52:24:02:cf:ff:98:c9:70:
                    fc:05:d6:9e:da:0a:16:e0:c0:70:aa:70:ab:ad:26:
                    a4:60:5f:0b:74:bd:88:3b:84:b5:da:ba:c4:02:a4:
                    24:61:fd:5b:52:e8:08:9e:62:1d:c0:99:8a:50:0f:
                    7c:b2:3a:04:f8:5b:95:cb:a3:2c:24:fa:30:0e:30:
                    70:42:1d:23:35:2b:2a:7b:19:cd:b6:b4:c6:4c:e3:
                    8d:3a:d3:2f:00:e9:58:ad:c0:f3:36:4f:4a:3a:5a:
                    19:58:f4:5b:d7:08:57:b0:97:c8:00:17:3b:68:87:
                    64:26:8d:ae:dc:58:0c:57:3d:e4:89:94:de:f4:93:
                    3e:64:c7:c3:93:86:7f:b1:8e:f1:e3:f2:96:fc:70:
                    a0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8F:6F:E8:28:91:A9:DE:6D:38:BF:9D:8C:72:58:97:04:E3:B8:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/32a1029b-bb0b-3a71-a143-dfa9509a4583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/4936e456-c9b5-43ef-8bdf-475338747125.crl

            X509v3 Authority Key Identifier:
                keyid:96:44:FC:2E:15:E6:90:83:4E:9A:85:53:91:B8:1A:E2:8C:4A:35:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.139.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:ef:d5:92:df:50:f2:06:11:8d:87:6f:c3:e1:03:ae:32:d2:
         1c:8e:25:33:c3:85:b3:a9:43:d7:e5:eb:05:d9:d7:3e:7d:67:
         f1:e4:55:2e:0c:0a:34:e4:36:8a:96:00:48:7a:4b:e2:56:24:
         44:6c:c5:32:34:6b:09:cb:0f:cb:c2:4c:b7:5b:85:62:a7:19:
         dc:f9:71:d9:ad:f2:62:06:2d:b5:fa:18:48:c5:56:d3:16:ca:
         aa:48:b1:f4:22:8e:5e:80:15:ad:53:b6:5f:16:e7:9e:1f:7c:
         0b:63:99:10:13:6e:a6:a3:3b:4a:03:bf:d4:51:0b:f6:c5:31:
         bd:62:9d:db:c7:50:2c:27:6b:f1:d0:f5:82:2d:f6:d3:61:f1:
         43:66:8a:a5:02:70:79:1d:82:37:9d:15:5b:72:b7:b8:86:8f:
         01:79:27:4c:af:8d:4e:a1:5d:52:60:b7:ac:a4:0b:58:7c:d3:
         2f:a9:07:ad:a6:6c:b7:3d:f7:35:3e:fc:01:51:4d:79:ed:8a:
         b1:ea:db:a9:58:e8:3b:19:31:65:7e:05:11:aa:00:95:85:e6:
         6c:45:21:7e:0d:dc:3e:83:09:30:5b:17:64:dd:7d:4c:c1:8e:
         55:29:81:77:71:5a:ee:5e:47:9e:da:f1:a1:26:4c:86:43:d0:
         71:cc:13:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:22:22 2026 by rpki-client