Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/24aabd3a-ee4a-3e31-a57e-0df0d9cd0201.roa
File:                     24aabd3a-ee4a-3e31-a57e-0df0d9cd0201.roa (raw, json)
Hash identifier:          KIFJmlCHSHpK7CcKk9Hs5lyCKa2ycD9+hSdPnAp3dRY=
Subject key identifier:   F1:88:E0:E3:C5:C6:54:EF:A3:81:F4:B3:2D:D7:D5:D5:A0:4B:1C:F7
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584CD99CE9E18AD4469AAF3FD140
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/24aabd3a-ee4a-3e31-a57e-0df0d9cd0201.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     11232
IP address blocks:        24.56.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:e9:e1:8a:d4:46:9a:af:3f:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=ec6c4c27-e1b2-404a-9dc6-d0ac8d1ba3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d9:8b:35:60:6a:bd:7f:10:62:b5:e6:5d:7b:
                    8f:c9:55:e1:0f:09:5c:48:96:58:67:38:61:c7:06:
                    15:65:af:fc:0a:f1:67:9a:e7:c7:7a:b7:91:c8:c0:
                    09:6f:2c:12:a7:54:29:34:61:12:6d:11:a3:b1:1c:
                    8f:f9:a8:71:51:a5:33:60:6a:41:73:52:a5:81:a5:
                    dc:2d:0c:e2:a4:34:d6:d8:34:56:00:4e:6d:82:3e:
                    1c:29:2d:87:26:67:a0:ec:5c:cf:77:e0:75:fa:1a:
                    3b:c4:86:47:57:28:76:d1:1d:7a:a7:3b:c0:4e:0d:
                    d2:40:c1:62:b3:6f:98:64:e4:06:89:c0:b2:f3:bc:
                    88:4a:c3:46:48:46:97:2c:e0:e6:2a:46:19:14:e7:
                    e1:d1:44:48:97:c1:93:27:44:e4:c3:dc:ba:12:6f:
                    b8:4e:e1:9a:71:9f:72:d0:63:27:32:e0:4b:ad:54:
                    68:fc:d2:b8:a0:b8:c1:a0:00:3d:38:72:03:a0:fb:
                    0d:ad:70:a8:d3:de:24:ff:ed:47:c5:31:06:f4:5f:
                    fb:55:d0:a8:d3:d3:ff:c2:3b:a3:87:59:c5:c1:2f:
                    d7:38:c2:35:a1:5a:d0:0b:28:ba:24:d0:6f:39:f2:
                    5b:dc:f5:2d:cb:26:49:b6:12:75:0b:70:67:ec:71:
                    11:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:88:E0:E3:C5:C6:54:EF:A3:81:F4:B3:2D:D7:D5:D5:A0:4B:1C:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/24aabd3a-ee4a-3e31-a57e-0df0d9cd0201.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.56.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a2:a6:60:6b:6a:48:85:d0:01:5c:91:ed:7a:3f:4d:2f:ef:
         07:d5:4c:ac:84:df:06:36:64:04:77:35:02:ee:22:e7:ea:26:
         fa:bd:1b:b4:3f:60:69:b2:96:cf:5d:1f:fa:55:c1:df:17:b0:
         74:2d:f4:d3:9a:0c:7e:6b:fc:d7:da:22:e4:7c:4a:bd:1d:13:
         7d:d7:c9:ea:31:b6:86:f1:40:4a:18:3b:fd:ca:11:ae:f3:42:
         bd:94:65:01:ab:d2:46:b3:32:dd:65:64:b6:ce:a6:01:3d:2c:
         ee:04:de:f5:08:de:ec:c5:3c:cd:4c:18:a9:88:88:94:71:0d:
         21:0d:03:7a:b7:fd:8e:49:f7:2c:38:4a:ab:07:85:2e:8a:8f:
         92:ba:eb:8c:dc:d1:04:bb:0a:70:e1:59:0a:2c:58:8f:4a:56:
         69:f7:28:28:a5:f5:fc:2d:4d:07:b4:21:54:f7:27:03:bf:2a:
         16:e8:a8:52:9c:33:96:e9:2d:7e:95:56:24:d9:30:13:46:02:
         4c:92:e6:5d:0a:35:e0:36:76:4c:f3:b8:4e:ca:7f:64:2e:04:
         2b:d5:4a:bc:02:03:42:7c:c6:4e:03:7e:09:f8:ae:f4:69:c1:
         93:20:cf:f9:26:37:68:07:82:20:f4:f5:87:da:39:04:b3:27:
         45:08:56:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:05 2026 by rpki-client