Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/155c84bd-2296-371a-9e47-3057e08f05bb.roa
File:                     155c84bd-2296-371a-9e47-3057e08f05bb.roa (raw, json)
Hash identifier:          Kt9VfOnY6FSSgcbhXWv0OtKb/G+uQo6Kd9BmkLeiB0E=
Subject key identifier:   1C:B5:38:2C:20:53:F5:01:D5:29:36:CD:22:5F:0D:A5:28:CA:90:2D
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584B5B07432A681EB6A6F57D2D00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/155c84bd-2296-371a-9e47-3057e08f05bb.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     394437
IP address blocks:        74.124.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:43:2a:68:1e:b6:a6:f5:7d:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=2e698865-9a1e-4c82-b450-bc67cfbe311b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:96:19:ed:f8:0f:ba:7e:f7:92:90:ba:60:b9:
                    15:1c:03:69:bb:d8:9a:1c:4b:db:c1:47:85:28:c1:
                    27:31:1f:53:ef:9b:4b:90:0c:cf:61:2c:ba:75:bd:
                    b6:72:74:ca:b5:5f:04:33:62:e3:a2:c0:3e:00:96:
                    95:29:4a:97:9a:f0:d5:61:4e:5b:ac:bb:d8:d6:8f:
                    0d:db:0f:32:6f:d7:f4:4b:1c:b9:aa:db:72:7e:fe:
                    96:cc:37:c5:52:c4:bf:66:cd:34:e9:cf:4e:27:84:
                    d2:91:ad:95:5c:2f:fd:22:81:4c:57:d8:74:b4:24:
                    7e:9b:24:91:aa:57:95:a8:bf:de:e4:e1:70:13:4a:
                    d2:35:40:8e:20:f2:28:ba:97:0b:75:cb:f9:a9:97:
                    44:bc:02:38:8d:ce:2e:a2:db:fd:82:c7:a4:73:42:
                    93:1f:d4:6d:2d:d3:3d:cb:c4:26:59:3b:ca:ef:42:
                    df:34:6c:ad:49:99:3a:1d:70:39:58:27:d6:c2:d8:
                    31:66:b4:bd:26:6f:1c:fe:50:c2:cc:d3:0d:14:23:
                    5e:b6:54:2a:e8:e8:1c:c4:36:b2:a2:d7:93:dc:8e:
                    d0:11:92:f5:67:e5:b6:72:1d:ee:b2:32:b0:ac:51:
                    a6:49:27:76:e2:71:21:6c:30:78:55:46:8b:a3:fb:
                    b7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B5:38:2C:20:53:F5:01:D5:29:36:CD:22:5F:0D:A5:28:CA:90:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/155c84bd-2296-371a-9e47-3057e08f05bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b8:cb:e4:64:4c:73:b8:eb:88:3b:70:01:d4:2d:92:1a:ff:
         65:67:0c:b5:85:3e:32:db:38:62:f1:17:07:8c:05:3e:41:36:
         06:e1:e0:59:ac:c8:60:1b:af:6e:31:e9:31:d7:ac:94:1e:63:
         f6:37:12:ae:96:fc:8c:6d:ef:fe:66:0b:c3:42:68:06:be:fc:
         09:5d:70:25:e8:9b:d3:2f:5b:73:fc:f1:8e:8e:92:50:c1:be:
         61:b9:24:bc:07:fe:a8:f6:9d:32:cf:72:41:5d:59:bf:4a:95:
         ec:82:b4:21:ae:03:a0:8a:d0:06:a7:d1:92:d0:c0:af:0c:a2:
         30:8f:a4:e1:cc:cc:34:a5:54:93:41:67:c3:5a:ed:99:4f:ab:
         9a:17:8c:22:21:3f:ae:88:f9:e0:06:6e:90:7f:58:9d:66:e3:
         cf:da:13:db:f5:85:ef:4a:e5:bf:2c:c8:5a:78:81:e9:5a:79:
         e8:0e:0f:c8:e1:08:55:de:4b:9d:22:7b:ea:62:b0:82:5d:3f:
         1b:85:82:e0:3d:77:84:72:10:ea:c0:f5:65:33:7b:84:f3:b8:
         0f:fe:90:48:90:a2:bb:f2:c9:86:e7:7b:9f:1c:10:a4:f5:06:
         81:ff:a6:59:11:48:e3:e8:90:b4:6a:6e:44:6d:4a:d9:a5:6e:
         59:97:42:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:13:07 2025 by rpki-client