Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c214b06-2a5c-3258-8ef2-edb6ca750c47.roa
File:                     2c214b06-2a5c-3258-8ef2-edb6ca750c47.roa (raw, json)
Hash identifier:          XCZnG1UlTsZqWRPv/jQPAZ9FdabUpOyBsb3V4Q0ntOg=
Subject key identifier:   B0:7E:B8:3F:B4:7E:02:5F:D5:1D:6C:48:EE:94:A9:94:97:C4:A1:88
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA787CBC9FCADDB22E1FB51C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c214b06-2a5c-3258-8ef2-edb6ca750c47.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46690
IP address blocks:        32.208.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:cb:c9:fc:ad:db:22:e1:fb:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b7cb1735-1afb-45e9-a8c8-ad1d8d9a789d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fb:ee:d5:95:e0:78:a9:66:9f:4c:2d:81:90:
                    56:91:e3:65:41:0a:41:8f:14:a7:b4:5f:b9:54:29:
                    6e:fd:15:e3:46:54:c3:0a:e0:f0:2b:80:4c:0c:04:
                    60:88:66:f3:fc:e4:8c:3d:f4:ca:24:9b:0c:c1:2c:
                    04:b9:48:40:72:d6:db:f8:51:a7:a3:09:43:9b:be:
                    25:c1:03:9f:b1:da:ed:fb:4d:46:4f:d5:d9:e4:00:
                    40:ea:c3:2a:d0:4c:23:5e:b2:76:f8:32:f5:48:0b:
                    d4:86:6f:af:1c:93:e7:a2:96:66:34:56:9b:f5:76:
                    2a:be:50:7b:92:24:32:7b:af:c7:ab:f6:13:a0:18:
                    82:68:93:f8:b6:25:91:72:7a:9a:19:34:8c:92:8e:
                    65:a4:4c:3c:b6:38:42:ea:37:10:88:14:96:bb:84:
                    3e:77:76:5d:46:98:04:e8:77:62:3e:11:8f:41:12:
                    dc:a5:c6:0e:00:e4:b2:bd:0c:fd:87:ea:93:85:41:
                    e9:ef:2b:8d:e3:53:fe:eb:50:12:a0:fb:82:06:8a:
                    15:39:1f:4c:79:1b:9a:97:cc:32:75:19:b2:8b:86:
                    03:9a:9f:f9:aa:94:88:d2:e4:1a:b0:03:b3:c9:43:
                    47:b2:b7:70:26:8c:f1:37:19:2b:4f:09:f0:09:1a:
                    47:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7E:B8:3F:B4:7E:02:5F:D5:1D:6C:48:EE:94:A9:94:97:C4:A1:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c214b06-2a5c-3258-8ef2-edb6ca750c47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.208.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c6:43:67:51:79:b7:fb:e1:4e:51:7f:31:7d:e8:8c:86:05:
         7b:1e:46:fe:b5:42:fe:db:ed:74:b9:a1:54:26:93:af:d8:a6:
         93:08:1e:b2:e9:b3:e7:94:3d:96:63:55:78:e5:a6:32:37:48:
         aa:5b:3a:b8:b5:cf:ad:f7:ef:6f:0a:71:02:24:d6:16:8b:e9:
         dd:b8:27:68:8b:e4:26:8e:82:e3:c7:11:a8:95:58:dd:38:64:
         73:7b:ee:1e:fb:ff:0e:fa:62:24:45:d8:77:a9:b0:55:72:55:
         9e:12:1a:7e:5d:27:1f:d7:b2:dd:74:a4:12:18:5f:99:42:a7:
         60:25:a3:ed:8f:15:2b:a8:cc:f5:67:af:83:19:a7:40:60:f8:
         fb:7a:07:c4:bf:57:3e:64:ba:f5:6c:f1:ee:b6:ca:8e:90:3b:
         19:fb:57:79:12:6b:04:37:2d:69:5f:1a:f6:27:52:c2:33:72:
         63:45:79:f4:bf:37:45:d3:8b:41:6f:01:86:07:8c:00:4b:f9:
         ef:a6:69:41:a6:ec:74:7e:0e:aa:3d:d5:36:d8:6c:f8:54:f3:
         ca:ce:d0:09:6b:39:72:0d:ee:70:4b:7e:23:bc:d8:26:3d:e7:
         0d:cd:a9:73:97:c1:c8:2a:eb:a0:19:80:e6:ac:6c:f8:51:9e:
         f2:01:2a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 23:52:21 2026 by rpki-client