Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/7548b2f6-a562-3320-bf77-1cffb72c2476.roa
File:                     7548b2f6-a562-3320-bf77-1cffb72c2476.roa (raw, json)
Hash identifier:          6XKFqmCjXw50BQssDCjNiaiAI/Xfs2uldFhkH7QgIwU=
Subject key identifier:   88:B7:65:4F:2A:EF:A8:22:CC:BB:F2:B3:97:E7:FA:45:D2:6E:FE:55
Certificate issuer:       /CN=26f87379-b07b-41fb-8976-6fd9e7149fda
Certificate serial:       010D0C9F4328584D44FA2EC484E61F0803BA7D40
Authority key identifier: B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/7548b2f6-a562-3320-bf77-1cffb72c2476.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     19016
IP address blocks:        24.245.224.0/20 maxlen: 21
                          24.245.239.0/24 maxlen: 24
                          64.93.96.0/20 maxlen: 21
                          216.36.128.0/18 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:2e:c4:84:e6:1f:08:03:ba:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f87379-b07b-41fb-8976-6fd9e7149fda
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=38779b01-e438-4ca5-8082-59e9c90767a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:77:ad:a1:7e:33:d1:73:31:91:f5:bc:5e:6a:
                    6b:29:35:fe:49:2b:90:1c:a6:54:13:80:a7:0c:59:
                    ad:78:87:6d:d2:08:5b:39:7b:62:72:44:24:6c:d0:
                    8c:7a:cc:2f:d8:65:d6:ed:ac:6a:5a:77:ea:50:ac:
                    cb:c7:b2:e0:4f:da:46:ec:8e:0b:e3:b6:52:be:c4:
                    da:12:39:02:9e:46:2c:32:74:59:d7:73:95:48:58:
                    04:1d:6f:8e:4e:a5:7a:ea:81:e1:95:6a:17:76:08:
                    75:9d:aa:f6:4b:49:3b:7f:92:24:49:ec:34:41:26:
                    3c:c3:04:d0:79:61:e3:0f:ad:fa:e0:57:a7:2c:49:
                    6d:e3:cc:3c:cd:ee:0a:2f:f8:72:b9:67:14:35:96:
                    aa:16:9c:2d:d1:bc:5a:42:47:e5:f6:fe:64:6d:bd:
                    e5:12:10:48:b0:ce:aa:4c:65:4a:5f:87:83:35:36:
                    ff:7b:d5:3f:e2:ae:ad:00:3f:cb:cb:e6:6e:90:94:
                    6d:8e:e0:b9:1e:b8:dd:2b:16:04:55:58:de:d2:e2:
                    b9:86:09:38:9e:08:6b:c0:db:1a:a2:94:05:ee:2c:
                    14:ec:48:3e:9b:a5:a6:b3:8f:25:cf:28:0b:3f:28:
                    59:80:de:54:ea:e7:74:dc:c7:fe:79:87:32:4b:5f:
                    4a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B7:65:4F:2A:EF:A8:22:CC:BB:F2:B3:97:E7:FA:45:D2:6E:FE:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/7548b2f6-a562-3320-bf77-1cffb72c2476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.crl

            X509v3 Authority Key Identifier:
                keyid:B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.245.224.0/20
                  64.93.96.0/20
                  216.36.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:e2:66:36:2c:c0:66:15:88:e2:e6:de:49:74:ea:3f:30:49:
         d7:96:4c:ac:44:22:08:81:eb:33:e0:ce:95:09:b8:7c:9e:5c:
         d1:1f:29:0a:bd:09:b4:6d:71:e1:7a:a6:e6:7d:86:cc:b2:62:
         5e:5a:68:fa:a5:6c:17:5c:a9:42:9b:f8:6b:d4:e5:af:69:fa:
         34:67:20:2d:8f:88:e2:29:08:7e:a3:16:10:74:b6:ed:de:cf:
         2e:1c:df:26:88:57:2f:82:ed:95:c6:aa:75:83:2f:99:6e:4f:
         f9:7d:eb:20:9c:18:15:03:a8:f2:25:99:43:b9:fb:18:fe:3f:
         73:85:3d:33:d2:02:e2:90:4c:33:43:57:78:1e:6d:7c:a4:3e:
         06:42:cd:79:b7:a1:88:68:86:83:c5:0d:73:b9:e4:36:f3:9b:
         72:42:aa:f0:1f:2f:2e:35:26:40:c2:d8:1c:38:27:e9:f1:6c:
         90:56:90:5a:d1:b3:4b:12:df:42:ee:43:81:be:d1:ca:14:ec:
         b7:32:87:66:f3:19:16:b0:22:be:5b:b8:90:84:3e:b1:68:d2:
         02:a8:fa:35:57:43:e9:76:31:29:b7:f8:2b:c3:3f:58:8e:65:
         3a:21:56:03:98:ab:1e:30:43:62:09:96:47:08:9d:5a:d3:d1:
         e1:47:bf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:43:48 2026 by rpki-client