Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/64912a5a-c379-310b-866a-c914e186c54f.roa
File:                     64912a5a-c379-310b-866a-c914e186c54f.roa (raw, json)
Hash identifier:          CQT3S2HGr9TO7xT81P1BD5kdUS0222Au7WL2yRcdmJA=
Subject key identifier:   18:D4:81:9F:1D:53:DD:4B:E7:14:C8:19:D0:7D:A0:24:94:1F:92:A5
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F4328584F4987C55FE8356E7FB77E73E0
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/64912a5a-c379-310b-866a-c914e186c54f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399244
IP address blocks:        170.205.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:c5:5f:e8:35:6e:7f:b7:7e:73:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=24ef792e-8a0d-4841-a1f4-35964a4db343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:d0:d5:48:2a:27:a1:d5:be:0c:4d:8a:df:
                    50:e8:98:e4:bc:01:e6:74:d4:3f:ea:af:c5:22:b6:
                    bf:5c:7b:20:c5:b6:00:fe:f7:f1:48:6d:67:69:3f:
                    c6:66:e1:4e:59:5a:ef:f0:bb:ee:df:e5:8f:e0:c2:
                    0d:df:2e:dd:9c:74:bc:99:28:c4:a7:84:93:7b:71:
                    12:5e:24:c3:e6:7a:92:a8:60:d7:89:33:d5:32:17:
                    45:4b:70:9c:78:4e:98:73:82:db:28:60:9a:e8:9c:
                    4d:bd:2c:22:2d:2f:21:f4:2f:e7:ca:8d:ac:11:83:
                    e9:13:11:9f:a6:ab:d9:71:43:f1:36:20:25:a7:96:
                    c4:fc:27:be:8e:30:5c:37:4e:db:c7:68:6b:3a:49:
                    3e:04:ba:bf:38:b8:91:50:af:b9:bf:58:1a:ef:e1:
                    23:1d:27:a6:70:88:04:c5:d8:ec:b8:a1:b4:b7:05:
                    15:4f:e5:79:5b:88:54:48:4f:2c:ba:0d:0a:10:38:
                    71:6a:08:fc:01:6f:0e:e9:fb:96:12:ab:18:b7:4d:
                    61:e3:a3:68:a8:6d:7b:99:4e:06:dd:52:64:cc:cd:
                    16:ba:d7:0b:2d:34:3b:54:df:39:76:3e:e4:3f:01:
                    9f:cf:43:6a:02:8e:2d:a3:1c:99:1f:90:9b:47:1e:
                    d2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D4:81:9F:1D:53:DD:4B:E7:14:C8:19:D0:7D:A0:24:94:1F:92:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/64912a5a-c379-310b-866a-c914e186c54f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9d:b1:8f:5b:8d:aa:53:d4:d3:02:7c:cc:cc:8c:40:72:93:
         89:84:bb:f4:bd:e4:9c:03:af:d9:7e:45:ce:34:66:01:f8:83:
         a0:c0:23:d9:25:c4:67:e9:86:98:d3:b5:06:0f:12:db:44:aa:
         37:cb:ba:d6:a8:47:70:03:bd:ca:d6:03:65:3e:8c:48:4c:d3:
         ce:a7:08:8a:87:0f:11:c2:55:27:f6:b4:ee:f4:02:8d:ea:ea:
         1c:c1:19:88:32:e5:2a:ef:ee:0b:50:84:e7:1d:82:6c:e9:08:
         57:29:e0:f0:c4:00:23:23:5b:ad:d7:2f:9e:ca:00:85:31:c8:
         82:35:5b:29:ae:08:c7:dd:55:f3:3d:5e:e1:95:57:73:fb:b9:
         88:9a:32:dc:0c:9a:d9:c5:49:23:ce:41:ad:d1:3e:92:99:33:
         6e:22:23:68:88:1b:01:79:4b:3a:c6:21:6b:39:63:9f:2e:da:
         5a:bc:e6:e8:cc:ba:30:58:8c:be:12:10:a6:da:60:a6:8f:fa:
         f8:5a:93:7e:60:6c:4a:5f:22:bf:da:b9:c8:4b:71:3d:bd:28:
         30:09:a8:b8:4a:20:ce:1a:0d:48:e9:08:e5:7e:10:61:ca:46:
         dc:15:f0:87:94:44:b1:7d:5b:f9:6e:7c:17:6e:cb:9a:01:21:
         38:fe:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:06:49 2026 by rpki-client