Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/47dd8631-d8a4-3418-a200-e9377e3021fe.roa
File:                     47dd8631-d8a4-3418-a200-e9377e3021fe.roa (raw, json)
Hash identifier:          0oUYdN+gBkZ/TfAh6xXsBGmNj210gWRGccEJTIzuytA=
Subject key identifier:   2B:A2:56:60:D4:A6:6D:0A:CF:E1:B1:52:62:68:FD:89:2B:82:2E:12
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584DADAAEAFDF59F092D557D4300
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/47dd8631-d8a4-3418-a200-e9377e3021fe.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     11232
IP address blocks:        24.124.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:ea:fd:f5:9f:09:2d:55:7d:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=18bc0209-760f-471e-a7df-726cbf6f3c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a5:65:aa:34:3a:5d:36:8b:2b:6b:ce:dd:fc:
                    09:32:81:c6:e2:30:04:dc:97:25:60:74:77:73:9b:
                    2f:5e:0b:8e:3e:7e:b0:3a:13:7b:6d:d2:07:a9:18:
                    0c:9b:92:88:50:fe:0e:ca:3c:60:af:93:01:e2:04:
                    d2:ae:7b:8d:85:b3:22:4b:20:5d:ab:fa:86:c0:06:
                    b5:cf:7f:1e:31:6b:01:a7:40:6e:5b:e9:27:05:7c:
                    20:51:2c:76:8c:5d:54:a1:00:ae:4b:91:19:a5:02:
                    47:b2:81:55:eb:82:56:a3:6f:02:dc:9d:d5:ab:e1:
                    10:3f:8f:bc:53:51:fc:f2:23:2c:f8:68:6d:5d:1c:
                    77:8b:64:4a:bd:4d:db:b2:ea:ba:9a:aa:a2:d7:7a:
                    9d:73:41:d5:f1:5c:0a:f5:f0:6e:4a:83:aa:db:6c:
                    89:f5:e4:57:d0:78:ba:6e:0d:2e:77:f9:46:f3:ad:
                    d9:3c:03:96:4c:e1:66:13:08:83:31:da:98:9b:c2:
                    dd:ed:7e:46:ca:2f:f1:84:1a:ec:b3:88:71:3e:10:
                    96:7a:79:c4:37:5d:e3:e5:d7:14:65:6f:6a:69:bc:
                    b9:cb:e2:94:15:b5:ce:5c:b1:14:7c:14:1d:68:e2:
                    99:36:b0:9d:ef:ef:85:05:4d:b1:1d:e2:8b:d8:c7:
                    77:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A2:56:60:D4:A6:6D:0A:CF:E1:B1:52:62:68:FD:89:2B:82:2E:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/47dd8631-d8a4-3418-a200-e9377e3021fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.124.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:90:29:71:cf:fb:8c:9b:63:e7:44:5d:2a:2a:0e:6f:3f:fe:
         25:14:f4:bd:81:52:c4:fc:4e:d6:1b:50:89:1e:94:e7:b1:78:
         48:6a:a5:a1:d3:d9:2a:a5:89:74:f4:ed:53:15:f2:f0:d5:48:
         ce:ae:5d:d3:6c:b4:0d:29:3d:0c:fe:df:ed:c2:9c:ca:28:17:
         41:33:c0:bb:07:11:d1:1c:cb:55:31:30:cc:6c:b2:9d:2c:35:
         1c:cb:1d:d0:35:13:3a:ba:a7:ba:2e:4d:ff:b6:f3:75:cf:f9:
         4d:0f:34:20:5c:e9:98:c6:8a:b3:72:fe:16:09:a7:66:1e:ca:
         c3:3b:7c:f7:67:5d:82:d4:92:f9:a5:49:ae:6c:06:15:48:2a:
         c3:67:92:18:c0:47:d2:ba:9c:66:ab:cc:d8:a9:fe:e8:38:f3:
         48:18:c6:30:1d:88:4d:07:89:e7:17:19:be:7a:68:64:2b:73:
         4d:18:74:f2:7c:9a:36:5d:1a:27:13:52:7f:2f:e2:6e:91:6a:
         ff:cd:05:ce:5f:55:92:09:4a:62:de:49:a7:e6:a1:62:de:1e:
         78:31:4c:ec:12:0e:95:3f:c6:55:f9:a6:d5:b8:b3:69:00:7f:
         7b:73:fe:fa:8a:fe:26:15:59:19:7e:85:3e:1a:93:c3:7e:46:
         38:02:a1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:41 2026 by rpki-client