Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2ca242cf-cd66-3ae4-ab5f-3b4a3c3fdbd0.roa
File:                     2ca242cf-cd66-3ae4-ab5f-3b4a3c3fdbd0.roa (raw, json)
Hash identifier:          E937SXx+crWQ2CymnOQbx2NWa5qDKUV4g38hHJmMoVo=
Subject key identifier:   46:2A:2C:DF:5A:DE:2E:67:AB:8D:AD:80:36:B7:4E:53:DE:8D:BA:90
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584CD99CEA73EF679DF7AD08E200
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2ca242cf-cd66-3ae4-ab5f-3b4a3c3fdbd0.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     11232
IP address blocks:        24.230.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:ea:73:ef:67:9d:f7:ad:08:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=6e42cab0-645e-4e57-9348-aa9277999c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:5e:5c:f5:37:8d:2c:12:9c:ff:fd:19:40:
                    71:05:61:54:86:79:6d:58:3d:14:4e:10:86:c0:52:
                    d1:3d:ea:66:3d:a2:e3:1c:67:b3:11:c6:b1:a2:70:
                    8f:06:27:0b:ed:3c:b1:b6:54:58:e4:1e:01:fa:0e:
                    30:aa:f9:9d:74:7a:9c:cf:b9:26:73:de:fb:3f:f5:
                    1d:17:f7:7f:f7:43:02:82:0f:29:1c:71:9f:b2:d3:
                    5b:6e:c9:24:78:bd:7b:65:2c:08:67:9f:b8:b5:6b:
                    9c:6a:e8:51:de:07:a6:85:b2:c0:eb:53:66:df:3e:
                    ad:65:32:38:e1:cb:21:70:0f:06:4f:09:bc:46:06:
                    63:a9:03:e5:0e:e4:bc:46:21:fe:db:ee:f0:de:63:
                    e2:43:db:6b:b8:4e:13:5f:d6:38:a1:17:9d:2e:52:
                    b8:62:dd:fc:69:2e:19:d8:46:4d:93:2c:1e:a0:e6:
                    15:9c:0e:5c:23:f7:c5:fd:de:9d:de:54:8a:32:ef:
                    fe:93:42:6c:cf:5a:66:47:83:97:ff:19:89:14:a4:
                    7f:13:5c:2b:51:ba:d0:6e:87:c2:54:c7:9c:dd:e8:
                    77:fa:b7:1a:86:03:b7:a2:be:63:69:f7:64:2e:e8:
                    1b:a8:78:cc:a6:78:3c:2b:28:fe:e9:72:31:60:af:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2A:2C:DF:5A:DE:2E:67:AB:8D:AD:80:36:B7:4E:53:DE:8D:BA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2ca242cf-cd66-3ae4-ab5f-3b4a3c3fdbd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.230.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e6:ac:cd:dd:9d:04:cc:28:31:9f:11:1d:50:90:e9:68:8c:
         06:a0:82:13:04:a3:2d:0a:c7:cc:90:f8:8c:fc:1b:3f:da:d9:
         92:72:4f:03:27:fa:03:59:93:54:51:f8:96:25:8b:9f:03:5f:
         49:f5:90:35:4a:59:4e:a8:8e:71:7e:e8:40:8a:a2:5a:8c:9d:
         15:1b:69:c6:92:14:eb:10:99:65:4f:5a:cd:74:ae:56:c7:32:
         77:9f:e6:ff:f3:b3:61:7f:c7:31:11:c0:fc:27:fe:8f:c2:85:
         40:e7:40:da:fa:09:77:58:8d:3e:36:ee:c6:4f:f3:fc:ef:ba:
         6e:fc:2f:53:eb:7c:df:6f:83:a3:d4:1d:6d:6f:bc:de:02:dc:
         b6:d4:60:40:d4:b7:b7:64:c0:a1:13:a7:fe:26:38:a2:c1:c6:
         43:94:87:61:db:c2:38:bb:f3:40:de:a3:1f:00:9e:8d:6e:7c:
         6e:02:f0:51:68:5e:80:ad:d5:b9:1f:3f:18:a5:ad:46:d7:2e:
         9c:89:ea:0d:21:de:75:3a:f9:2d:a8:d6:37:42:5a:4f:90:85:
         ca:3f:bd:e5:69:77:bc:b0:1c:f2:18:8b:14:7f:d5:4b:4c:59:
         4d:61:e4:5b:ab:6c:54:af:95:91:14:ee:78:f7:12:8a:2a:ca:
         87:c8:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:06 2026 by rpki-client