Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/432a26a4-3ad7-36d3-89e3-6620bdf67eaf.roa
File:                     432a26a4-3ad7-36d3-89e3-6620bdf67eaf.roa (raw, json)
Hash identifier:          QeftHg9DfW1WRAEL0nbuPnDCnQPQ0Rt9UR3xBM70eLU=
Subject key identifier:   35:D7:D7:6C:22:01:C5:47:2D:84:A6:8D:80:90:54:10:D5:F7:7F:DB
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584F3CE2A5A01A6A17AD5867EC00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/432a26a4-3ad7-36d3-89e3-6620bdf67eaf.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     11232
IP address blocks:        24.54.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:a5:a0:1a:6a:17:ad:58:67:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=87503871-42ea-41cc-a8a7-303243550025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:68:13:ea:79:5c:8d:e5:f1:98:7d:b9:15:
                    73:99:fa:0a:9f:0d:05:fd:4b:5d:2e:3a:e9:3a:dd:
                    64:4d:5b:63:d6:7f:d5:6d:1e:82:e3:35:3c:72:b9:
                    90:72:f5:b4:c0:eb:89:c9:30:f7:74:ed:57:ef:ce:
                    77:e1:cb:2e:32:3e:c6:de:66:ed:fa:fe:fd:b1:44:
                    07:3b:3e:95:3a:80:05:21:95:cf:b1:aa:e7:03:49:
                    9c:36:e6:a9:68:5e:97:30:29:2d:f5:72:10:36:ea:
                    2b:42:4f:d6:d5:a6:6a:2a:6b:11:89:62:77:8d:83:
                    18:3f:61:18:42:79:47:91:25:77:c0:ca:8b:d7:2c:
                    ec:a1:0b:be:c2:1a:14:96:7c:1e:4f:48:0d:86:e8:
                    b1:ea:12:ff:f5:78:f9:66:4f:86:e4:33:49:65:70:
                    b4:49:12:75:97:02:fd:df:23:d2:aa:3d:e3:2b:54:
                    7f:a1:27:e0:84:2a:ff:ae:77:75:78:cd:92:9e:ef:
                    a5:59:77:63:ae:e3:57:c4:8e:56:3c:bd:26:00:db:
                    5b:66:8e:08:7e:b4:00:59:f4:31:23:3b:91:69:fd:
                    43:20:6e:76:52:6b:05:78:58:2e:ec:0a:ab:90:61:
                    9e:77:fd:e7:9b:22:45:e6:f2:58:22:c0:90:3b:f3:
                    64:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D7:D7:6C:22:01:C5:47:2D:84:A6:8D:80:90:54:10:D5:F7:7F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/432a26a4-3ad7-36d3-89e3-6620bdf67eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.54.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b6:19:63:bc:ed:51:92:94:82:7f:f8:1e:05:b7:3a:31:f6:
         33:53:7d:2d:f5:43:dd:a5:3d:f0:8e:c5:f5:fb:ae:b2:0a:45:
         ec:0d:3e:1e:1e:7d:eb:b5:46:a4:35:4f:ef:d3:4e:87:ae:52:
         a7:9d:ac:4f:a2:32:85:97:07:3b:82:27:de:67:55:b1:76:98:
         41:3e:54:f7:f4:56:76:9f:09:c0:d0:68:c8:1b:33:1b:bb:6c:
         c2:86:1e:d7:5e:36:74:45:cf:8e:c1:8b:d1:77:66:b6:3d:cf:
         35:23:4b:29:e7:58:75:3a:d4:ec:59:f5:96:84:30:22:79:79:
         8e:b7:37:d3:a5:7a:28:4b:ee:77:28:a5:f1:0e:83:e1:72:9e:
         b1:3a:8a:d2:be:3a:1b:be:33:f7:a6:f7:29:b0:1e:68:96:2e:
         f8:44:b5:f1:6c:f1:06:f0:f9:67:fe:ac:82:d4:de:af:c7:bb:
         9a:94:c6:ec:59:a0:8e:f9:ca:0c:3a:21:ac:5a:62:1b:83:4b:
         0a:9a:f3:37:15:90:80:66:80:7c:5a:70:80:88:94:0f:bd:e7:
         56:07:6f:76:3f:d1:39:ff:6c:97:ac:99:ab:ca:60:a0:5f:50:
         98:b4:8a:51:e9:a6:f0:23:36:16:ee:59:16:9f:b2:21:ab:41:
         5c:02:b6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:32:32 2026 by rpki-client