Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/1d1f7f44-57f5-3448-8375-8ace20c4e947.roa
File:                     1d1f7f44-57f5-3448-8375-8ace20c4e947.roa (raw, json)
Hash identifier:          sNyjDWNZmpTwOA+c8EOWhHgvVXnWwy54NNwwHlGMjls=
Subject key identifier:   6E:07:94:6D:8E:E6:1F:9E:88:1F:D9:63:51:96:AF:ED:C2:1F:7D:3D
Certificate issuer:       /CN=cb309158-c6de-47be-ad39-450cc6e8cb6c
Certificate serial:       010D0C9F4328584D59CD9B24FDEB74AB16815488
Authority key identifier: 0B:40:D2:D8:74:61:4E:1E:73:75:78:8C:77:03:C3:FB:D0:0B:0C:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/1d1f7f44-57f5-3448-8375-8ace20c4e947.roa
Signing time:             Tue 31 Mar 2026 12:02:47 +0000
ROA not before:           Tue 31 Mar 2026 12:02:47 +0000
ROA not after:            Mon 29 Jun 2026 12:02:47 +0000
asID:                     7250
IP address blocks:        173.212.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/cb309158-c6de-47be-ad39-450cc6e8cb6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/cb309158-c6de-47be-ad39-450cc6e8cb6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:cd:9b:24:fd:eb:74:ab:16:81:54:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb309158-c6de-47be-ad39-450cc6e8cb6c
        Validity
            Not Before: Mar 31 12:02:47 2026 GMT
            Not After : Jun 29 12:02:47 2026 GMT
        Subject: CN=58bdb965-f156-4624-ba48-f8f2b1acaf45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f5:0c:89:96:21:6f:2e:f1:8f:9e:25:86:79:
                    68:00:63:77:47:06:24:9f:3b:a8:9b:be:03:6f:06:
                    c9:9f:5f:e0:9c:87:3d:55:02:f6:22:a2:30:8f:13:
                    1a:5f:d3:51:a0:5b:1c:9b:1d:9f:fb:d0:9a:b4:a2:
                    b7:32:10:29:58:ea:60:cc:3b:09:65:91:d2:40:d9:
                    2c:8f:15:50:8a:67:09:35:27:e4:00:8a:fa:b9:ac:
                    e6:ab:08:c7:e2:45:0f:6f:94:b3:bc:ae:94:59:99:
                    05:fe:6c:ef:67:b7:c3:98:fc:02:5f:8a:b5:1d:69:
                    c4:a9:22:53:b7:09:c1:29:42:e1:85:13:e7:26:ff:
                    79:94:a1:bd:83:be:0c:eb:3c:33:e4:61:67:7f:3f:
                    02:8d:31:0e:d2:1b:8b:b2:86:3e:a8:89:47:44:ab:
                    03:ab:55:76:92:6c:27:65:a5:98:a7:3b:83:cb:69:
                    65:2a:12:d0:4e:26:9d:e7:1e:af:9f:15:7b:f1:cd:
                    5e:72:91:e7:ea:35:22:19:7e:c3:6c:6a:2e:ea:ff:
                    af:6a:b9:93:8e:37:31:9a:60:e0:08:91:4d:76:bb:
                    13:91:e0:97:d4:09:20:3d:a5:4f:6d:cd:16:0f:60:
                    74:26:da:09:49:97:61:f5:fc:80:23:14:f6:49:36:
                    f6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:07:94:6D:8E:E6:1F:9E:88:1F:D9:63:51:96:AF:ED:C2:1F:7D:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/1d1f7f44-57f5-3448-8375-8ace20c4e947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/cb309158-c6de-47be-ad39-450cc6e8cb6c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:40:D2:D8:74:61:4E:1E:73:75:78:8C:77:03:C3:FB:D0:0B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.212.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:0d:f0:7e:be:81:52:e0:48:f1:0c:aa:c8:d3:d1:1f:80:20:
         75:e5:1a:9f:59:7f:5c:b1:fe:50:c2:76:9c:ad:fb:b3:38:17:
         e5:7d:04:bc:a1:52:b2:e8:7a:f9:fe:94:5c:a0:b2:bf:e0:de:
         8e:c5:98:82:da:85:85:03:de:33:d5:b0:0f:77:7d:1a:05:6b:
         80:5b:ca:74:d7:0a:4a:e1:21:9a:34:54:cf:8e:49:8b:7d:98:
         99:34:26:5a:28:cf:1c:1c:57:09:90:56:40:ea:8a:83:bb:ea:
         ac:c8:06:40:f1:13:fa:c8:23:23:ff:81:1f:58:d5:d6:97:6b:
         86:a2:be:9a:b5:a3:0f:a8:b0:f9:b0:ec:6f:eb:16:a2:ce:8f:
         61:fa:ca:8f:b7:07:50:81:51:6d:eb:a4:63:5d:7c:e4:53:ea:
         dc:7c:53:65:c2:63:11:8f:0b:04:cd:23:1b:7b:2c:74:19:69:
         44:f3:7c:b4:44:f6:b7:9d:28:a7:f8:1a:6b:d6:f6:25:64:ea:
         fd:71:ad:74:9d:32:c7:9d:28:c4:f2:8e:8e:87:97:b5:a2:83:
         4f:0d:d6:7c:dd:b8:7a:22:ff:61:39:5f:50:12:e9:87:e2:c5:
         04:68:80:f9:75:07:a2:f8:19:3a:1e:0f:7c:fc:b9:b7:ad:e2:
         4b:9a:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 16:52:20 2026 by rpki-client