Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e9fba8d4-5ae5-3d6f-8fb0-9bb5e2e89499.roa
File:                     e9fba8d4-5ae5-3d6f-8fb0-9bb5e2e89499.roa (raw, json)
Hash identifier:          6SCKwL5ycXCq5+l/2ODqQNsj1KB1GCDurAqHU0f3pXQ=
Subject key identifier:   1A:AD:51:5C:2A:6F:C5:19:5A:1E:8E:C1:69:0F:34:78:8C:21:1D:7C
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584F3CE2A36F0345BD24AA388400
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e9fba8d4-5ae5-3d6f-8fb0-9bb5e2e89499.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     11232
IP address blocks:        24.52.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:a3:6f:03:45:bd:24:aa:38:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=514c3313-84d9-48dc-83af-239fc26b39d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:8e:42:cc:5e:4a:01:5c:26:f0:3c:a0:0b:
                    dd:73:17:3c:ea:09:96:bd:d8:f3:57:79:53:81:a1:
                    e4:22:11:80:88:c1:ed:74:c5:7b:b6:e9:4f:f9:fd:
                    7a:b9:50:1f:67:57:7b:50:02:30:0b:49:a8:0a:34:
                    4a:ef:47:67:27:d8:d7:66:68:35:7b:87:1e:79:4c:
                    35:76:b1:34:c1:6b:9b:38:f5:ca:e6:07:af:de:2f:
                    e6:4f:00:44:a3:4c:02:29:9b:34:42:5e:00:8d:00:
                    04:56:82:b3:af:33:30:4c:e7:d6:0f:78:62:51:eb:
                    f5:ec:84:fa:ea:c6:17:c8:2d:f5:f4:64:bf:cd:1b:
                    3c:da:b7:69:ef:55:3e:61:87:08:d0:a5:81:81:9f:
                    37:ec:f9:37:e8:df:44:bc:03:b7:7a:00:88:45:6b:
                    70:e1:c8:ad:63:92:fb:ee:12:f4:d4:19:27:f7:f5:
                    01:0c:04:62:3a:25:79:0a:e3:09:27:ea:a1:31:35:
                    72:bf:36:3f:f0:db:00:98:f6:c6:3b:f4:7c:50:01:
                    a1:cb:13:b2:ba:81:f2:00:a4:16:bd:60:50:ba:29:
                    0a:58:38:b1:2c:9e:9c:8a:04:c4:75:e1:aa:00:3c:
                    9e:e7:ea:d1:46:91:01:33:b9:7c:a7:7b:3e:9d:75:
                    bb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AD:51:5C:2A:6F:C5:19:5A:1E:8E:C1:69:0F:34:78:8C:21:1D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e9fba8d4-5ae5-3d6f-8fb0-9bb5e2e89499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.52.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f9:07:00:0b:e8:a7:89:b5:d6:a5:82:e6:33:10:d0:19:99:
         00:22:9e:37:a6:15:3c:7e:e4:52:22:0f:97:c8:47:9d:b2:a5:
         f1:40:c2:79:07:19:db:d1:86:97:39:57:5f:ae:8e:9d:12:06:
         9b:e2:95:8b:0c:e5:c3:94:86:13:fc:06:3c:a8:12:a4:5b:48:
         80:87:21:af:aa:63:4c:b9:63:a6:4b:1e:ab:61:6f:03:3f:99:
         d7:96:4f:33:32:e3:da:33:da:39:1a:9d:e5:3f:55:73:37:63:
         65:97:15:b9:ac:c3:5d:db:c6:06:37:57:0b:0d:43:7f:6a:83:
         3e:a9:0b:f4:6e:4b:91:f4:9e:0f:b6:92:c7:65:82:f0:2c:3a:
         09:a2:89:f9:2e:0d:7f:43:94:1c:de:99:e5:88:e5:de:d8:c0:
         af:51:05:bf:84:70:25:ec:e0:cf:59:c8:7f:50:5e:d1:1a:ee:
         fd:83:8b:c9:91:41:54:41:93:d3:1a:a9:9b:49:5a:87:f5:b5:
         79:87:87:39:39:8b:55:dd:21:2a:14:8d:c8:39:23:0a:50:b4:
         49:56:bd:78:09:18:66:a5:6e:f1:8f:bd:93:0a:b5:ee:65:78:
         63:c5:49:76:c2:26:5f:cb:50:3d:25:b3:24:6d:41:54:f9:a5:
         4b:a2:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:48:08 2026 by rpki-client