Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/1b4a2f2f-185d-3e59-a3b7-2546d7d91a24.roa
File:                     1b4a2f2f-185d-3e59-a3b7-2546d7d91a24.roa (raw, json)
Hash identifier:          k/BRvWvkLCVoe7XJt9Gja5AC9qXfrmEzTeh7HtCWZug=
Subject key identifier:   64:F0:CC:21:96:4F:AA:E4:06:FA:96:8D:B7:9C:F1:7D:C7:3C:37:2C
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584E9BE5167AC8C47EC92749BD20
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/1b4a2f2f-185d-3e59-a3b7-2546d7d91a24.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     7992
IP address blocks:        24.226.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:16:7a:c8:c4:7e:c9:27:49:bd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=a9c2ebac-aa71-4bbd-990f-5e4b308a1b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:67:8f:09:d8:b7:cc:8c:f7:84:53:52:58:
                    e8:ab:00:a0:4f:bb:d7:3a:43:26:c7:67:54:6a:19:
                    f6:e0:4d:ee:80:90:ae:7e:1c:e3:6a:86:87:7d:d5:
                    a0:54:2d:13:6b:b7:b5:4a:71:bb:88:8e:d5:19:61:
                    77:60:42:1e:0d:c6:54:df:25:44:ed:62:72:3a:7f:
                    bd:b8:34:b5:9f:3f:a9:50:67:e7:0d:d7:f6:eb:ec:
                    e4:79:9d:29:e2:fb:4d:5d:d1:05:49:b5:5b:cd:0e:
                    e2:b9:55:0e:de:f7:c0:b8:c8:24:c3:d9:7b:91:38:
                    14:92:f0:1e:af:e1:87:39:63:95:e0:7b:b3:ca:8b:
                    e2:aa:b2:f0:ac:27:cf:8f:51:d3:9a:ff:5a:9c:17:
                    42:86:16:8d:38:06:2a:b2:1e:9b:cc:c7:7a:3d:1f:
                    8d:0c:16:2d:2c:7d:66:bc:6f:ab:e3:73:73:d7:11:
                    01:f0:5a:36:75:76:d6:f3:3a:d2:a4:7b:bc:ab:15:
                    aa:61:81:10:75:c8:c7:f3:ee:d3:06:36:f1:f9:57:
                    a8:36:37:fe:a2:5a:94:67:a3:78:a2:7f:53:1a:21:
                    af:94:10:db:e3:c8:dc:78:ef:53:07:86:0c:63:1f:
                    63:f9:19:da:58:46:64:2b:9c:a2:4d:94:a9:d9:21:
                    f6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F0:CC:21:96:4F:AA:E4:06:FA:96:8D:B7:9C:F1:7D:C7:3C:37:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/1b4a2f2f-185d-3e59-a3b7-2546d7d91a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.226.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a0:01:d4:e0:47:6e:dd:e8:7c:7e:34:26:f6:d6:95:60:2f:
         f2:1b:2e:1f:9c:53:aa:22:e3:bf:7d:11:c4:e8:10:42:76:ec:
         c0:0c:88:19:13:68:dd:14:34:3e:c3:b0:65:2a:44:f6:a9:a6:
         f8:4c:4b:a7:89:2c:fb:2c:a1:44:9a:d4:02:66:7e:84:81:f5:
         9f:68:d5:03:4d:0d:6b:57:6c:da:35:7e:e3:19:6c:3d:eb:91:
         ff:17:c4:94:c3:a6:76:27:24:09:6d:2a:18:c5:72:52:c1:50:
         a3:db:0c:ef:9c:3c:d7:61:83:43:44:ad:18:72:24:64:46:47:
         55:9b:1d:cf:8a:ce:25:78:7c:8f:2a:66:1e:2f:16:b9:93:c7:
         70:03:95:ed:12:d8:69:08:2d:67:85:67:69:02:47:9b:3a:89:
         64:42:82:cc:98:18:1a:d0:66:91:21:40:bc:74:11:80:6a:c2:
         e8:05:2e:a7:f9:11:87:85:62:45:ad:0f:63:dc:2d:53:52:a6:
         96:d0:1e:c7:e2:d4:fc:a1:05:cf:0d:73:4f:35:71:d6:4d:a2:
         f2:5e:11:db:12:b2:72:ef:65:80:c8:3f:1b:2b:7f:f2:c6:f8:
         90:5e:0e:da:d5:36:3e:5c:c2:ce:c0:07:27:ca:f6:3a:0e:ab:
         d1:8b:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:13 2026 by rpki-client