Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa
File:                     08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa (raw, json)
Hash identifier:          5addbgU/X6ksO1qXeCZxfHdufgQ1YUzh/0w5eZkAeg8=
Subject key identifier:   AC:40:5A:08:5B:BF:84:72:CD:B2:BC:3B:60:5E:CC:4D:4A:73:8B:74
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584E9A7FD9CEEE9CDC609535DD00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     11232
IP address blocks:        24.225.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d9:ce:ee:9c:dc:60:95:35:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=98282bbb-ae7a-4b09-b383-b6bff8a2b5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b3:87:11:ec:61:97:2e:b6:15:a1:5e:2a:d9:
                    77:08:e8:6e:2f:d3:f2:f9:2f:ea:4b:ae:1f:7d:80:
                    e4:2d:c9:06:34:cd:59:b2:4c:a8:1b:20:48:00:e1:
                    24:a9:7a:1c:1d:8f:0c:e1:52:3b:79:dc:07:78:83:
                    88:12:0d:f5:39:1d:ae:f3:d7:1e:04:88:62:9f:48:
                    62:6f:58:e4:0a:86:8c:2a:9e:5b:b5:7c:31:db:6b:
                    2a:28:d4:3e:00:f3:ae:3f:56:b5:63:a1:e8:fa:32:
                    69:10:d1:b4:ba:d4:a2:bc:f8:f7:ae:99:2a:b9:8b:
                    e6:6a:27:62:ec:61:57:98:11:9d:74:04:89:cc:9c:
                    60:19:b7:d6:8c:ea:c9:7b:78:01:39:db:27:f1:14:
                    02:59:d8:2f:6e:8b:72:e7:05:ee:d4:1a:74:e2:a2:
                    01:c9:c3:32:9d:86:f7:ac:fc:dc:be:60:b3:f5:ef:
                    9d:25:4e:ce:9d:d1:06:aa:99:4a:87:82:33:b2:c7:
                    aa:35:87:1f:d4:c0:32:91:ac:06:e4:81:31:67:04:
                    ac:dd:72:53:aa:56:33:38:fc:11:ca:18:37:9d:6f:
                    45:a4:7a:fc:19:bd:46:56:12:74:ba:21:07:bf:63:
                    60:be:1b:6b:74:9e:de:9e:55:c2:51:21:46:0d:93:
                    42:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:40:5A:08:5B:BF:84:72:CD:B2:BC:3B:60:5E:CC:4D:4A:73:8B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.225.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:af:c1:d2:12:26:18:28:87:b1:bd:3d:0f:b6:ad:3d:39:4e:
         60:eb:25:76:96:fd:8c:7e:5d:4e:ee:3d:9d:e1:91:bb:6e:3b:
         8e:9b:f3:1e:b2:ae:58:b6:eb:c8:8d:ab:07:a6:4c:d9:eb:9c:
         4e:a3:3d:bf:fd:df:c1:aa:59:d5:b6:ef:bc:f7:fa:39:a0:96:
         6a:00:14:d0:3a:00:ee:93:91:8f:95:59:8c:80:6e:af:48:d6:
         1b:77:99:e9:ae:0b:76:97:1a:f5:29:c2:02:74:c9:cb:5a:4d:
         55:28:ec:5c:4a:76:46:4e:4d:38:cc:8d:bc:d8:c3:b7:6e:3e:
         de:32:e9:0a:9f:34:01:0b:43:fb:73:9b:f4:4a:c8:84:f5:1a:
         09:f0:b4:ac:00:3f:47:5a:67:f5:55:c9:28:b1:e1:08:a8:e0:
         be:46:0a:74:b3:b9:77:2c:95:d4:3b:15:c3:c9:aa:8c:fd:ed:
         f6:69:85:e9:44:f9:60:ed:9b:3f:e7:c1:29:36:b4:4a:be:40:
         e1:4c:76:80:e7:8a:3e:eb:3c:e9:a8:ad:40:f4:fa:e9:7a:90:
         4f:62:a8:5c:3f:bb:08:8f:32:5a:83:7f:57:d1:ab:0f:d5:27:
         8b:f7:c6:91:86:89:39:7c:1f:26:0a:40:f8:4b:1d:28:60:7c:
         1a:9d:76:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:20:18 2026 by rpki-client