Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0ed87b3a-d8bb-3100-98de-5db97a1a810b.roa
File:                     0ed87b3a-d8bb-3100-98de-5db97a1a810b.roa (raw, json)
Hash identifier:          LtUt1+eVL+inKoWnMeS4uiCrYPkeeLlQIBJYJ3IfXGo=
Subject key identifier:   AC:DD:B0:AB:96:E4:06:6F:A2:50:5F:E0:DE:1B:5D:B0:86:82:51:9E
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584DBA3B046646D4D837B1B8AF60
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0ed87b3a-d8bb-3100-98de-5db97a1a810b.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     11232
IP address blocks:        24.49.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:04:66:46:d4:d8:37:b1:b8:af:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=15cb917c-ecfc-4ca3-91d9-e2f1da0c694d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1b:35:33:ed:fe:b2:db:95:54:1c:20:37:00:
                    51:74:19:84:65:c4:c4:32:5c:4c:1e:c9:41:7b:87:
                    56:80:98:97:b8:84:34:29:ab:2e:f8:a6:66:c5:ba:
                    4a:63:ba:7e:c8:c6:65:15:91:3b:74:1f:89:fe:15:
                    1c:f6:06:1b:8f:04:69:e8:5c:f6:79:37:7d:f5:07:
                    27:4a:ca:e8:3d:30:76:21:60:ff:62:1a:a0:d9:23:
                    67:24:01:30:07:b1:e2:0c:9e:37:c7:de:7d:6d:92:
                    f1:f7:71:fc:4b:d7:5c:d7:8b:6f:4e:d1:15:65:35:
                    c1:37:69:83:88:7b:47:be:6e:f2:4e:69:b0:e4:ce:
                    60:e2:46:a4:07:fc:ce:f4:8f:7b:ff:e3:48:3c:34:
                    fc:5e:1c:33:9c:3c:d1:e0:44:57:8b:e4:80:e6:76:
                    27:22:4d:56:9e:a0:7c:60:c9:08:bf:0a:fc:cd:3d:
                    76:18:84:64:8b:a2:44:2e:67:7a:04:b8:c4:bb:11:
                    5f:56:c5:82:ac:42:ff:1f:c5:8d:ed:4e:98:7d:f4:
                    1a:de:66:ac:4c:0d:56:58:f7:63:ba:1b:73:bb:5a:
                    10:ed:48:7b:d7:84:09:55:60:51:f4:6e:c4:98:7a:
                    c2:4e:d0:0e:75:16:a5:c0:c2:08:e0:db:6d:55:30:
                    c7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DD:B0:AB:96:E4:06:6F:A2:50:5F:E0:DE:1B:5D:B0:86:82:51:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0ed87b3a-d8bb-3100-98de-5db97a1a810b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.49.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:2a:42:9c:10:79:25:ed:cc:b9:ad:5d:b0:c9:11:b5:ba:73:
         71:e6:df:f3:4d:d5:cd:90:7b:9f:1e:7d:fa:5f:54:01:c9:0f:
         3c:03:6b:03:11:9b:f2:2b:7c:fb:d7:10:48:05:21:76:af:a8:
         ca:23:0e:fe:10:32:ca:32:61:4e:fe:f7:9a:2f:e8:02:a7:06:
         f6:cc:72:3a:db:32:f7:b3:98:8b:a1:a0:ba:f9:41:73:ae:71:
         16:39:fc:56:82:f8:7f:0b:67:76:49:0f:1a:50:bf:18:d2:b5:
         0e:89:50:10:3c:38:37:58:4c:bd:01:0e:19:b7:99:5a:1a:38:
         b2:e8:c8:b3:7e:12:95:99:d2:19:ad:0a:5c:be:61:72:29:d0:
         81:2f:4d:25:36:5c:f5:f1:d8:07:93:55:51:98:b2:22:79:93:
         19:ee:78:54:4b:e6:25:5b:ad:d3:43:0e:8b:82:43:9d:7c:f8:
         c9:bd:b7:c3:62:5a:20:99:e9:2b:5c:b4:77:81:dd:ed:47:b5:
         51:40:a7:09:31:12:2f:9e:af:9f:61:32:e1:c8:3d:b5:8a:8e:
         a6:be:1a:66:55:52:74:6b:97:1b:8e:89:a5:ba:9a:41:85:55:
         93:29:c5:50:47:aa:2e:0c:0f:55:ef:9a:c2:2a:7a:5f:47:4b:
         27:dd:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:21:45 2026 by rpki-client