Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa
File:                     1351a206-7659-3d84-bdf1-3748c7102b44.roa (raw, json)
Hash identifier:          hcYnx5PVv9scTnZLkbK/DE6WoYZT0PFJJ+fpAwk4/zo=
Subject key identifier:   57:D5:7B:6B:32:5B:8D:53:E2:F4:E0:A1:F2:CA:A7:CE:07:2D:25:29
Certificate issuer:       /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Certificate serial:       010D0C9F4328584E9BE514F6A84AD3287C05B6C0
Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     40788
IP address blocks:        24.54.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:14:f6:a8:4a:d3:28:7c:05:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=ec6b54fc-54dc-486a-a664-9c10042ad7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:70:58:4b:75:95:b8:18:c3:28:76:38:2a:
                    51:b7:ee:e7:12:cc:0f:1e:66:74:4a:5c:48:37:aa:
                    27:83:05:98:b6:b4:44:15:34:ef:74:3d:6a:17:b2:
                    9e:1c:b6:fc:bd:ec:f8:4c:06:c6:d2:c4:7c:b5:75:
                    31:ca:35:eb:64:b3:b0:f1:7f:f8:79:a4:65:fe:81:
                    c6:d6:a6:eb:2b:fd:e5:56:d7:89:b2:2f:21:67:66:
                    da:6b:bd:a2:e7:96:8f:25:c4:e1:80:06:73:c4:2a:
                    76:4a:2d:96:b8:43:7c:41:c2:c9:d6:26:6d:35:86:
                    30:90:ea:6a:a4:64:49:ea:75:93:f1:aa:10:44:3c:
                    85:d7:55:d2:77:cd:55:eb:e1:5d:2e:40:36:dd:74:
                    3f:86:b1:3b:69:42:80:0a:51:2c:38:10:8b:a4:53:
                    c8:73:a5:7b:90:18:e4:7d:bc:b0:42:71:e6:1c:e2:
                    32:25:e7:96:8b:22:cc:a9:90:17:8a:d8:15:e6:fb:
                    10:11:11:43:b2:20:8c:56:11:d2:1c:70:1c:82:20:
                    d9:cb:bf:63:b5:64:54:0f:fd:3a:47:11:88:83:5d:
                    9b:81:24:17:10:f8:e5:43:87:a0:f7:a9:b8:1a:88:
                    ce:b6:da:5c:6f:df:99:99:97:9a:28:ba:72:52:d1:
                    4b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D5:7B:6B:32:5B:8D:53:E2:F4:E0:A1:F2:CA:A7:CE:07:2D:25:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl

            X509v3 Authority Key Identifier:
                keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.54.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:91:43:61:5a:78:69:a4:0d:20:c2:18:49:90:e5:4a:2d:be:
         bf:ec:c5:d6:8a:b3:69:9c:dd:0f:c2:54:b3:dc:3e:97:38:7e:
         64:ae:8f:3c:99:33:a6:e9:94:aa:4e:cc:fa:77:90:ef:18:8a:
         c6:79:e4:f4:c1:a7:2b:db:60:ee:9e:c6:be:de:4f:84:e8:68:
         83:90:6e:10:97:32:16:5d:24:eb:e8:d9:bb:94:2d:c1:53:4c:
         a2:94:a4:c2:aa:e1:a8:0f:18:a5:1b:7f:d4:0f:6e:bd:7b:73:
         4e:e3:55:d7:d0:e0:c8:41:bf:90:07:76:e6:ea:a6:21:2e:e0:
         e5:99:e7:8b:08:47:7e:af:b1:8f:14:68:89:56:5a:15:75:9a:
         27:a7:f2:d6:f8:37:39:4d:64:7a:75:72:62:1b:b6:c2:2a:7d:
         70:3d:12:2f:0a:27:2e:9d:d5:9e:60:e3:e4:9e:dc:50:a1:11:
         7f:fe:ba:64:2a:26:43:19:ae:57:0a:aa:e0:a7:4a:1a:6a:ae:
         ba:b0:b1:5b:46:50:66:78:0d:b1:77:3a:26:9b:39:d2:11:7d:
         6c:71:86:86:aa:ff:27:9b:5e:c5:85:6f:5c:65:c1:65:da:41:
         a1:c4:f1:93:04:6a:da:d6:d9:45:0f:5c:63:16:c6:81:32:9d:
         6d:d2:6c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:48:24 2026 by rpki-client