Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/215c6206-8c8c-313b-a11a-9a3c9453d0a1.roa
File:                     215c6206-8c8c-313b-a11a-9a3c9453d0a1.roa (raw, json)
Hash identifier:          4LoWJriuf7j+uiXPmCah9oobmOKjzDYWTamWOUPT/bo=
Subject key identifier:   5C:43:93:8E:2A:C5:45:D5:A0:5B:A2:BC:86:0A:76:AA:8E:B4:16:97
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584B5B0743694743AA0B2F418840
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/215c6206-8c8c-313b-a11a-9a3c9453d0a1.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     394437
IP address blocks:        74.124.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:43:69:47:43:aa:0b:2f:41:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=095f92c0-46b6-4160-b887-0b72dd44ad96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bb:6d:78:f5:19:4b:7b:04:3d:d4:3a:dc:2a:
                    0f:36:03:0c:87:30:0b:20:86:b1:bd:6b:94:e5:d0:
                    0f:51:ce:1d:d4:7a:d2:0c:ee:16:2e:a4:da:93:95:
                    74:f8:7f:2d:2b:bb:5e:c0:4d:5a:3f:c1:bf:b0:3c:
                    b1:7c:12:25:0b:b1:e5:51:8c:a1:4f:2a:d8:bb:79:
                    72:99:26:2c:ad:2a:5c:cf:5b:41:e0:8c:6d:8b:44:
                    33:fc:9b:e7:94:8d:8e:55:c2:cb:5f:a6:b0:bb:e4:
                    a0:7f:6e:a0:29:50:b0:a1:ea:ef:2f:6a:c5:1a:6a:
                    5c:9c:c3:78:12:43:c7:c9:e6:83:6f:3c:9f:46:cd:
                    a3:33:39:e3:59:66:86:b2:1e:a1:e3:41:7a:ef:01:
                    cb:5f:d5:c7:af:63:87:c7:f0:84:14:fc:f7:b8:5c:
                    40:ab:14:be:ac:6d:63:77:5e:79:61:bd:a6:ba:72:
                    09:ac:3c:c1:7d:b5:d1:42:1c:83:82:79:d6:90:65:
                    88:72:ff:71:46:b3:fb:d0:4a:66:8d:cd:94:26:d7:
                    c0:24:04:78:83:f7:5f:36:20:dd:ed:c6:8a:d0:60:
                    de:cf:49:03:44:08:be:43:06:aa:70:b8:41:73:2f:
                    38:31:b6:2a:10:0a:7e:98:e7:d0:04:11:9a:d8:cc:
                    80:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:43:93:8E:2A:C5:45:D5:A0:5B:A2:BC:86:0A:76:AA:8E:B4:16:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/215c6206-8c8c-313b-a11a-9a3c9453d0a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:7b:69:89:8f:a7:c6:29:fb:67:12:8d:90:40:a8:39:3a:a0:
         b5:bd:1e:38:16:a8:70:f2:3d:7e:fe:fb:51:1f:ef:b0:b1:1a:
         15:d3:d9:57:15:0e:86:f6:7d:6a:ec:61:48:fe:e4:e2:2b:77:
         4c:f3:40:1f:57:e2:67:a4:40:5d:25:b1:af:74:7e:75:16:46:
         3f:49:3d:b6:23:41:08:56:28:51:d1:ff:f7:8e:8b:d1:19:67:
         46:c4:1e:6f:90:8e:5a:26:67:aa:28:d6:f7:c3:fd:7f:10:e6:
         d1:cb:a3:d2:ba:fa:25:25:48:5d:b1:44:41:fb:37:83:24:ae:
         76:51:a1:70:b6:19:a8:bb:c8:63:1e:eb:ea:77:98:f3:36:37:
         bb:2d:97:4b:17:3c:2f:37:69:d7:4c:69:da:5a:5a:c7:24:4e:
         f4:38:5f:0a:c1:62:67:66:32:56:be:c2:67:71:91:b0:c7:23:
         ef:6a:04:47:3b:3b:78:fc:b1:38:74:77:61:82:5e:f3:ef:8e:
         0d:6e:97:2d:23:b3:29:7e:ee:01:b0:e0:56:79:4d:53:69:73:
         24:d2:82:f7:b1:9e:77:56:65:db:5e:e8:b4:9a:ba:98:75:fa:
         ea:6f:d8:bf:05:40:0a:f1:01:98:03:5b:ea:3a:12:f3:0c:e3:
         a0:f9:d3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:06:23 2025 by rpki-client