Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa
File:                     1351a206-7659-3d84-bdf1-3748c7102b44.roa (raw, json)
Hash identifier:          r/cdAPX13JpHeW0SP+iDS+c6JPc78zV3xodE8PB+a9k=
Subject key identifier:   3B:71:A5:4F:EB:D0:C5:24:FD:03:E2:5D:64:F5:BD:47:FF:28:F6:9D
Certificate issuer:       /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Certificate serial:       010D0C9F4328584DBBA04FC8AEC4950FC3B8CFC0
Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     40788
IP address blocks:        24.54.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:4f:c8:ae:c4:95:0f:c3:b8:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=7e0f51a2-6c2c-45b7-b2b5-9e39d8a9a464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:26:df:df:82:e7:86:38:74:5d:16:40:f9:ec:
                    1c:9c:e4:5a:d2:95:97:f3:4b:57:24:4b:55:03:2a:
                    c7:fb:f4:88:8d:18:23:d6:73:b5:d9:2f:ca:b3:7d:
                    48:4f:4a:f7:0e:56:3b:62:35:b5:6b:d6:f8:21:ef:
                    eb:6c:2b:8f:90:4c:f1:b9:e1:2e:8f:d7:04:e8:7b:
                    b6:c4:c4:2d:6f:53:48:b0:91:23:29:e5:3f:9b:b3:
                    37:0e:ae:c0:54:69:35:b7:9f:c9:4b:18:39:5b:90:
                    e4:f9:ef:58:6b:d8:2b:85:81:dc:3d:13:63:0d:69:
                    1b:fb:2b:96:de:1e:df:97:fd:87:6e:6f:21:d0:4d:
                    ee:83:11:f2:57:77:0a:ae:69:b2:33:b3:4c:48:fe:
                    ad:f6:e9:bd:2a:ec:04:1e:dc:c2:b8:2c:39:aa:4e:
                    8c:fb:fe:6e:c7:d8:63:1e:e9:79:81:5c:c4:fc:f2:
                    13:da:d6:a0:c6:cc:eb:0f:85:a1:5d:fb:77:81:f9:
                    d5:3e:52:3b:f4:75:3d:1a:ad:a3:48:3c:85:65:4a:
                    43:b3:4f:6b:5d:73:a3:5a:2d:30:e2:d0:b1:94:26:
                    5f:10:c3:3a:e7:92:66:50:bc:c2:f2:6f:3e:44:9e:
                    e1:32:cd:78:cd:19:83:11:ad:2e:ca:65:cc:5a:d4:
                    15:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:71:A5:4F:EB:D0:C5:24:FD:03:E2:5D:64:F5:BD:47:FF:28:F6:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl

            X509v3 Authority Key Identifier:
                keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.54.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:07:24:fb:6a:12:e2:00:5b:b7:24:99:99:3a:02:75:d4:83:
         c3:4a:3b:d4:b0:54:b0:8d:bd:cf:eb:47:c4:ce:bd:04:94:1e:
         03:28:6e:41:e9:0e:0b:98:a1:b3:70:aa:f5:24:1c:1c:5c:bb:
         2a:12:24:d5:af:86:29:54:8f:38:68:b4:2f:2f:45:89:fe:87:
         19:c6:bb:6c:af:4a:31:d9:52:05:ad:5b:1d:35:72:c7:ec:0f:
         1a:14:c0:96:8b:6d:56:76:db:d2:7a:c2:e0:ff:62:fc:07:4d:
         d5:4c:56:e4:d7:24:f2:2d:8f:35:1a:9e:e4:a3:21:ab:dd:b5:
         5a:ea:11:4a:45:62:9d:05:9a:d2:6e:f5:5b:86:c3:6c:90:10:
         f7:73:a6:b2:f1:74:c1:2d:ca:f8:19:47:7c:85:e3:c7:0d:40:
         a4:6b:37:7b:d2:ab:56:c7:c6:1c:5c:57:a2:f6:dc:9f:a3:2d:
         d9:5c:15:27:f4:c9:80:c0:83:a9:6b:78:aa:9a:ad:61:cf:6d:
         f1:7a:fa:8d:0c:b4:4a:a8:0e:e7:56:cc:31:c6:9b:0f:e1:89:
         b9:0f:e3:22:2e:fa:cc:f6:fa:53:40:ea:d6:f0:fb:52:98:99:
         4e:ce:68:ad:62:5a:ae:06:68:34:96:9b:6a:b2:47:21:3f:c2:
         44:aa:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:18:26 2026 by rpki-client