Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3b03fa34-49cd-368b-8ac7-eadebd73f8d9.roa
File:                     3b03fa34-49cd-368b-8ac7-eadebd73f8d9.roa (raw, json)
Hash identifier:          4vf6BS5QxgRUqTZctG0h96NCng/96rQEDv4lALpd6dc=
Subject key identifier:   B1:7F:EC:AA:45:67:F9:2B:85:20:34:BD:04:0C:55:DD:CA:00:F2:D2
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584F305285C36C9B54B693AF1500
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3b03fa34-49cd-368b-8ac7-eadebd73f8d9.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     11232
IP address blocks:        24.220.229.144/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:85:c3:6c:9b:54:b6:93:af:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=ed9ecaee-4ff7-4c3c-ba86-947d3d3912bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bc:2c:cc:41:d3:26:f4:1c:3d:25:2d:a1:63:
                    55:3f:aa:6e:d9:ea:2d:19:ef:9d:44:02:59:b5:cc:
                    ce:23:c5:2d:d4:10:f3:5c:fb:5f:77:86:87:64:21:
                    26:b0:2a:85:01:51:8c:04:89:10:56:4f:e3:45:8e:
                    27:2e:c1:7a:a3:24:49:ac:67:23:a8:5b:92:87:3f:
                    87:89:81:bf:50:ab:3e:25:c6:14:ad:34:a5:79:b6:
                    1e:71:98:6a:fc:40:8f:e0:f1:0e:5d:1b:d6:ed:f5:
                    ec:04:64:a9:92:2b:e4:45:59:cf:9a:97:98:af:8d:
                    a9:33:c3:40:da:e3:8e:11:9d:6b:82:6c:dd:17:a6:
                    8a:79:a4:7d:13:fc:7e:5b:21:1b:5f:3d:2e:5d:0c:
                    46:f3:31:82:98:a5:6d:5f:15:3e:c1:8e:69:d1:7c:
                    e8:d4:93:0f:55:6a:37:74:a3:b6:a0:fe:47:72:74:
                    97:0a:1e:1a:a9:a4:95:97:17:4a:d8:a5:a3:d0:01:
                    3a:d1:f0:93:3b:7f:58:33:5d:60:95:03:8e:6c:cd:
                    36:57:2e:6f:48:f0:d2:b3:8a:25:99:3c:89:4e:5f:
                    96:9b:88:56:5a:03:63:6c:96:69:a2:22:62:dc:98:
                    7c:1b:28:28:d3:d4:06:02:22:f5:47:ba:bf:1c:79:
                    71:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7F:EC:AA:45:67:F9:2B:85:20:34:BD:04:0C:55:DD:CA:00:F2:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3b03fa34-49cd-368b-8ac7-eadebd73f8d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.220.229.144/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:96:73:7a:55:5f:33:ed:70:cb:1c:77:9c:61:6d:1a:5e:fe:
         8b:9c:9b:09:bd:01:b8:65:4a:3a:74:10:cc:ed:9d:b1:62:4e:
         60:83:4d:24:76:97:53:81:9e:e5:dc:01:02:55:b5:6e:12:03:
         39:be:61:e7:0e:16:10:fc:36:b3:6f:3a:5e:f3:97:cd:c6:80:
         e4:d0:16:a6:18:42:34:85:c2:9c:11:e0:be:77:5e:32:4a:e8:
         a7:2a:a6:72:b3:24:75:d6:e2:db:47:69:ac:99:61:f9:b7:9c:
         6d:fc:d8:ac:9d:dc:51:20:63:67:60:3d:75:78:15:ad:18:64:
         45:32:4b:b1:4a:2c:3f:3d:1d:64:b5:99:13:82:b4:66:02:08:
         41:20:d9:a3:92:0e:5a:3c:cc:b3:f4:b1:91:f0:ab:50:75:e4:
         37:1c:c2:1e:ef:da:be:72:13:e4:9a:e2:85:82:1a:db:3b:ae:
         34:02:98:15:f5:12:a8:45:d3:97:46:88:ff:c7:2c:12:a5:33:
         b3:96:cb:42:ba:bd:ed:e0:86:d9:85:db:d4:7e:27:a4:7e:fe:
         d1:9e:6b:78:50:82:90:85:7b:9d:8a:71:9c:f9:16:1b:9b:ef:
         de:24:d1:f7:cf:73:11:47:e0:94:74:f4:3f:42:1c:91:fb:50:
         f3:4a:44:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:59:24 2026 by rpki-client