Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa
File:                     f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa (raw, json)
Hash identifier:          zp/e2LhJEHogpQhkGkcrZo7sYvhtRA1ucB4XQ4cSafg=
Subject key identifier:   44:32:BC:47:25:32:29:8D:16:67:2A:44:96:7A:DB:4A:0F:7A:7D:AE
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584CD99CE96F2E1470C29F717080
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     11232
IP address blocks:        24.52.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:e9:6f:2e:14:70:c2:9f:71:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=a90a8ac0-fee2-4d86-9307-a97904f39b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:86:4a:dd:d4:f2:68:6a:51:3a:60:44:d6:
                    e2:e1:e2:9c:c8:f1:53:3d:ba:8a:15:44:b2:72:f5:
                    a1:20:50:26:25:13:d9:45:0b:22:1d:38:d3:06:43:
                    71:3f:c3:58:c4:b6:d6:cf:62:1b:2a:c3:4d:6b:45:
                    54:ed:72:f7:8f:54:66:65:de:de:74:ff:b0:76:6f:
                    b7:74:0a:d0:50:82:75:54:d6:7f:03:8e:db:02:b5:
                    6d:fc:32:54:a1:21:80:cc:44:d0:e4:5f:71:4e:a5:
                    a6:92:1a:68:28:75:44:8e:ee:8b:22:85:30:95:6a:
                    f2:a3:4a:fc:7b:5e:f7:fb:09:f2:c0:82:2c:db:16:
                    88:c0:a9:77:63:13:f1:fb:f3:df:ff:cd:16:7d:48:
                    1d:a9:a4:83:45:e2:a3:d4:44:bb:7b:53:d6:02:89:
                    cf:7a:49:a1:45:c1:dd:b5:cb:9e:82:ca:e0:66:e0:
                    fc:86:16:13:1c:8a:c7:10:a2:2a:9f:36:f0:ee:45:
                    03:ed:47:03:a8:74:b9:44:0d:59:99:6e:28:45:45:
                    3a:7e:91:92:32:cc:cf:ad:54:35:31:50:c5:fb:75:
                    21:19:ab:5a:79:f0:66:38:e2:37:04:b0:7d:cf:06:
                    08:ce:db:53:58:db:61:20:0e:88:0c:8c:8c:4c:3b:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:32:BC:47:25:32:29:8D:16:67:2A:44:96:7A:DB:4A:0F:7A:7D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.52.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:34:e1:9e:9a:d8:cf:ae:34:cf:af:61:4a:cb:c9:95:36:9e:
         c1:79:15:b8:b9:dd:db:34:44:1a:92:b3:0a:b1:40:47:72:67:
         9a:04:c2:a7:3a:4d:38:e1:1f:4c:91:25:b9:6e:f7:bf:3a:e1:
         51:5f:2e:99:0c:8a:96:d7:6c:ae:9e:67:45:aa:02:76:3a:86:
         75:b1:bd:18:79:0a:b0:a4:40:78:60:fa:a3:00:93:33:2d:fd:
         eb:ae:f7:8f:b6:86:57:b7:12:44:51:c7:1c:fb:8b:a7:b7:cd:
         13:9b:17:83:16:31:6d:48:8f:d9:d0:6f:53:4a:cb:ab:4b:29:
         4c:f1:4f:f7:9f:e9:86:d4:b0:30:eb:7d:04:e9:b9:4a:1d:d1:
         66:e7:18:7c:7e:47:f4:a4:c8:2d:8e:1f:9b:ff:80:71:05:df:
         d1:12:4a:6a:bf:44:78:88:e1:93:56:6d:4d:5e:a6:86:f3:04:
         4f:40:5f:7e:70:59:31:7c:25:95:a3:0b:a4:89:04:4e:3e:42:
         ab:37:56:b6:9f:0c:fc:96:91:9d:a8:0f:e3:58:f0:64:dd:0e:
         3d:0a:01:89:49:eb:a2:84:28:a6:63:3c:08:43:b0:62:51:7a:
         4e:41:11:46:8d:c1:ab:32:6b:3c:81:0b:ca:34:13:de:ac:fd:
         b9:9b:a0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:24 2026 by rpki-client