Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7260bb0d-d416-3928-87e3-8079f1005b4c.roa
File:                     7260bb0d-d416-3928-87e3-8079f1005b4c.roa (raw, json)
Hash identifier:          QmfsUhP6l38CKa/zcOvtmraLq0l8fey0PdICYox0Hmc=
Subject key identifier:   EE:C4:37:80:5B:5A:87:17:04:00:ED:DC:BE:82:F5:7F:AF:00:B3:F7
Certificate issuer:       /CN=7478c754-137f-4ef1-a8b5-aa954253fb79
Certificate serial:       010D0C9F4328584F7BB300195FE9D6B8463D1FF0
Authority key identifier: E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7260bb0d-d416-3928-87e3-8079f1005b4c.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     18474
IP address blocks:        24.40.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b3:00:19:5f:e9:d6:b8:46:3d:1f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7478c754-137f-4ef1-a8b5-aa954253fb79
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=87803615-ccd2-4fc1-aeca-53a933e406ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:12:62:16:06:6c:0a:2e:a8:d9:2a:b0:2a:f0:
                    6a:49:e7:3c:13:2c:5e:67:de:ef:55:42:0c:cf:10:
                    28:9a:d4:59:75:01:e6:22:7d:f6:22:23:7b:1a:00:
                    0d:41:0f:73:4a:08:27:6e:71:69:6a:71:97:c3:ce:
                    9a:58:7f:e6:f9:d6:ee:6b:af:d9:7b:02:44:a3:63:
                    5c:87:b4:2e:a0:47:00:85:b5:f9:46:ef:18:37:71:
                    f2:ad:b0:0c:d3:f0:72:8e:af:68:50:9e:07:e8:7f:
                    ef:61:6b:d6:79:2a:3c:4e:d8:30:5a:8a:23:a1:40:
                    2a:b4:bd:8c:79:19:c9:1e:21:28:73:ba:42:bf:27:
                    54:91:9f:3a:81:70:9a:e2:a4:7c:33:96:41:da:9a:
                    9c:76:e4:19:79:18:56:4e:a2:37:3d:e9:86:b1:53:
                    1a:9c:ba:97:f1:ef:5c:f9:35:e3:cd:03:22:97:32:
                    aa:0f:1c:d5:1b:96:ca:5c:82:eb:a0:3b:63:5b:0a:
                    8a:55:25:be:c0:87:f0:82:74:78:ff:49:01:33:ca:
                    a7:d3:a5:9b:7e:60:6f:b6:51:de:e5:62:6c:75:ec:
                    79:46:3d:0c:e6:ec:b2:3e:96:b9:42:5f:b6:0a:7c:
                    d6:ad:5b:45:14:90:cf:74:f2:9a:84:c1:d8:6e:38:
                    45:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C4:37:80:5B:5A:87:17:04:00:ED:DC:BE:82:F5:7F:AF:00:B3:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7260bb0d-d416-3928-87e3-8079f1005b4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.40.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ca:e0:b9:da:78:25:8c:f3:3d:ad:65:db:8e:37:2a:47:4f:
         b8:da:f0:b0:c7:05:5f:27:41:20:7e:d3:25:7e:07:4a:a7:e3:
         f2:ee:b3:67:ae:cf:14:0e:4b:fd:74:44:fe:fc:19:b5:63:d3:
         ab:69:00:fb:56:9a:f7:ec:51:36:72:85:70:b1:85:03:f6:78:
         88:85:00:cc:7d:22:d0:50:0a:3d:a3:21:0c:f2:03:2a:d3:c8:
         9a:5a:56:a6:9d:92:c2:34:6e:78:73:c2:8f:74:1c:07:5e:ca:
         50:a6:59:dd:3a:74:af:48:34:76:05:c1:3e:8f:32:2e:75:e5:
         99:ee:f3:38:34:74:bf:c3:ec:d0:8e:dd:3b:ef:aa:15:b2:11:
         f8:ee:0f:61:52:94:04:6f:61:86:52:75:6e:55:68:1f:1e:c8:
         a1:90:2b:cf:26:d6:1e:0d:8c:4e:39:21:f5:19:5a:b8:4d:ff:
         82:62:0d:78:76:b5:7c:40:59:41:2d:6f:0d:c3:50:a6:3a:3f:
         2c:9d:8a:be:d8:90:14:cf:fe:b8:f1:65:47:45:3f:c2:3b:eb:
         41:67:36:02:b4:19:76:6d:d8:b6:72:44:84:5d:a0:a1:c4:42:
         a3:23:69:b6:97:1b:3a:9d:b2:3f:c5:bd:78:be:aa:0f:d3:18:
         36:fe:b7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:28:30 2026 by rpki-client