Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa
File:                     7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa (raw, json)
Hash identifier:          7zRhX1/yzz+UujkKDwe44tDZ61GPfrFQDADe0QPsuPg=
Subject key identifier:   6C:73:9D:54:1C:E6:DD:5D:77:56:29:76:03:25:F3:90:8C:44:21:8C
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F49767031DB80C5B0CE827300
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21
IP address blocks:        128.1.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:70:31:db:80:c5:b0:ce:82:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=38689d57-2fac-40a9-ad8c-77b313dfc3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a2:c9:97:54:57:a7:07:ea:6f:68:be:f3:b6:
                    a2:96:c9:81:9c:5e:cf:5c:9b:65:3f:57:67:95:94:
                    13:04:c1:2a:d3:43:3e:b9:97:50:ef:4d:3d:ac:c5:
                    88:e1:b5:6a:bc:a8:e8:90:db:fb:93:a4:7f:fc:4f:
                    74:99:5d:af:9f:4c:fd:23:31:8f:6d:47:4c:e3:4e:
                    98:11:07:6c:57:f5:2b:27:1d:33:e8:0b:dd:3f:6b:
                    21:bc:b4:c1:cf:a8:9f:64:f1:69:e5:c0:5a:6b:90:
                    b1:d3:cd:fa:1f:75:30:08:00:aa:b8:5c:d9:3b:c5:
                    02:6f:5d:53:1c:f8:45:4b:08:05:d2:50:b2:97:d5:
                    09:64:56:15:ee:41:a8:f2:f0:59:02:d7:bb:10:18:
                    dc:3a:57:06:3b:56:e7:b8:bf:00:e5:a4:3a:ff:1b:
                    d2:a8:ba:33:97:1a:38:c0:31:10:cc:38:11:6a:08:
                    2d:ed:ad:8b:7e:10:1f:86:32:5c:7f:e2:8d:ee:0a:
                    98:46:73:dc:41:71:f6:15:1b:b6:f3:b6:71:26:57:
                    b1:20:87:1f:2f:df:63:d3:ca:16:8e:ac:88:21:bd:
                    66:85:71:c4:eb:5f:2d:6a:2b:c5:57:88:db:ea:68:
                    1f:31:0d:4f:8b:cd:93:a5:df:67:5c:37:66:09:ff:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:73:9D:54:1C:E6:DD:5D:77:56:29:76:03:25:F3:90:8C:44:21:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:10:bb:ac:38:fd:20:ea:e1:ac:f3:3b:e2:79:8f:24:f6:18:
         78:21:e7:13:f9:4d:3d:7d:bf:da:34:26:b5:94:fd:10:0e:8e:
         83:89:5c:70:99:b0:23:aa:91:8b:c6:18:44:40:eb:b6:23:b3:
         22:d4:25:f9:58:43:0d:a5:49:46:13:75:b9:47:2d:89:68:2b:
         b1:c7:12:24:dc:97:bb:f9:e1:62:c4:18:0f:db:74:9b:0b:e7:
         54:3a:f1:88:dc:ed:8b:ab:de:73:5b:42:84:b1:17:66:63:9b:
         c0:c2:1d:9a:e7:e9:c4:41:36:b7:f0:4a:2f:18:1d:8f:86:f4:
         06:70:63:b5:33:ce:41:11:9d:ea:03:98:a3:a8:d1:f5:78:f6:
         12:32:52:e5:42:20:1e:96:13:2f:13:e4:e6:d7:f6:99:b4:c8:
         57:02:c7:8e:09:65:21:5a:3a:d9:36:aa:ef:21:f2:38:d4:5f:
         1c:28:68:d1:68:86:00:ee:90:28:23:05:6a:b5:ce:a8:38:5c:
         04:21:e8:98:40:73:af:1d:ab:5c:7e:5a:ec:f9:a8:99:bb:96:
         6d:09:6a:02:d2:b8:7f:7a:f1:a3:ab:dc:46:b4:e1:e7:68:a1:
         09:01:7d:61:7f:b6:09:65:d4:ec:c2:76:36:ee:1d:d9:41:14:
         79:6c:ca:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:16:17 2026 by rpki-client