Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/4192f1c2-749b-3db3-91c0-5d2c74f91617.roa
File:                     4192f1c2-749b-3db3-91c0-5d2c74f91617.roa (raw, json)
Hash identifier:          pjpEb4eU4NWxzQcsABcTJd2j9C+tpVWkB2CY+PXy4xE=
Subject key identifier:   53:06:E4:E0:EA:26:C6:8E:71:00:42:60:3C:66:C0:D9:B7:EF:4E:BD
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328584D2A74C72BCD5580CDCC53C240
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/4192f1c2-749b-3db3-91c0-5d2c74f91617.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     5645
IP address blocks:        107.190.0.0/17 maxlen: 17
                          107.190.16.0/20 maxlen: 20
                          107.190.32.0/20 maxlen: 20
                          107.190.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:c7:2b:cd:55:80:cd:cc:53:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=8f7bec6a-6136-4c4d-aeff-05091422c848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:0c:fb:65:b9:15:b2:6b:f7:ba:fa:d8:cd:
                    b4:45:e1:25:33:8a:02:5a:b3:07:72:96:65:a3:9e:
                    f1:af:9a:e4:27:da:78:87:0c:01:85:43:42:9d:bd:
                    4c:a2:9e:fa:d9:4b:3c:44:16:47:5b:9a:0d:a2:13:
                    39:3c:01:d2:32:37:16:21:e1:ff:10:8b:0a:0d:fa:
                    c6:48:5d:f1:1a:76:5c:dd:87:22:0c:2e:17:d2:ce:
                    dd:0d:28:82:3d:7b:f2:bf:f2:dd:82:ad:bc:3d:72:
                    74:0b:18:e4:4e:94:04:03:77:1f:87:cb:ef:8a:d1:
                    f6:8a:88:a2:92:40:8b:df:a8:a5:d3:38:4b:80:17:
                    fc:b0:8f:ae:8a:fa:5c:e5:e1:e8:dc:97:8b:93:8e:
                    2c:05:7c:e3:65:e0:4d:8b:f3:09:a1:0f:01:39:fc:
                    b1:db:f3:05:b7:b8:b4:a3:02:25:15:b9:16:c7:72:
                    9d:2e:49:12:a2:f2:dd:71:38:32:df:2e:7d:20:89:
                    44:4f:d4:15:c2:92:48:d4:8d:98:1d:78:bd:14:05:
                    40:70:72:f2:8d:f1:05:8a:ef:81:ea:f4:fd:de:81:
                    f8:d0:2d:8f:02:9d:8f:b1:05:59:bc:86:8c:8f:1e:
                    7b:86:27:7b:66:30:ff:20:b9:c5:a5:b8:a3:de:4f:
                    b3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:06:E4:E0:EA:26:C6:8E:71:00:42:60:3C:66:C0:D9:B7:EF:4E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/4192f1c2-749b-3db3-91c0-5d2c74f91617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.190.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:a3:2c:c8:88:26:02:73:34:27:63:fe:ae:b0:bb:e6:81:9a:
         95:6f:56:27:41:9a:12:4a:fd:ce:1f:a4:02:bd:ce:92:07:9e:
         ac:bd:88:64:cf:3b:46:7c:6b:07:5a:0c:ae:25:f0:bf:e6:5b:
         28:7c:23:4f:01:f4:5a:08:8f:7d:7f:0d:58:f5:64:88:7f:0a:
         ae:e9:5b:66:a8:77:6e:5e:09:1d:0e:59:69:6b:21:37:cd:5d:
         4b:bf:55:fe:5b:92:47:0e:53:40:ed:b2:ba:b0:7a:bd:b0:06:
         9e:6f:74:72:ca:4a:5d:cf:35:70:cf:c7:36:18:95:ef:32:51:
         7f:2e:14:e4:83:6f:a1:28:7a:0f:5c:aa:84:eb:e4:53:f7:2f:
         cb:2d:9a:b5:76:0e:39:49:0d:dd:e5:c1:d2:44:75:e8:89:bb:
         ee:94:d8:68:48:7b:1d:68:4b:82:b0:31:3b:c0:04:24:fe:33:
         32:86:0e:08:56:b3:83:0a:f9:38:74:11:53:a8:8d:65:68:fe:
         39:cf:1f:1d:ea:e7:55:61:75:7f:a2:ce:22:cb:3c:6c:b4:9e:
         ab:25:85:3e:a9:c1:ec:7e:1d:c0:da:05:21:fe:d3:08:b1:9e:
         59:77:7c:bb:d5:40:fb:9f:2c:0d:28:d5:e4:25:65:82:37:a9:
         b1:13:81:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 18:19:06 2026 by rpki-client