Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74c8f8cd-834f-3c10-9d4b-6d4a7ab62db2.roa
File:                     74c8f8cd-834f-3c10-9d4b-6d4a7ab62db2.roa (raw, json)
Hash identifier:          KlRPFZZCWO6OmSET9e8rwShFxhounZTQ+YqZYLiJhvI=
Subject key identifier:   AF:7D:D3:95:85:5B:E1:81:39:9E:37:E1:C2:B5:27:F6:DB:2D:63:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8622B41870F6A17396A9FE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74c8f8cd-834f-3c10-9d4b-6d4a7ab62db2.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        24.60.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:2b:41:87:0f:6a:17:39:6a:9f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=641670c4-ca45-4212-ad29-daeb4951b0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:aa:36:23:cf:07:6d:ba:b6:31:2c:0a:98:30:
                    89:7c:b1:f2:ab:9e:cc:a6:cd:12:78:74:95:99:21:
                    a3:07:1d:51:05:03:50:45:04:74:81:d9:67:60:be:
                    9d:4f:00:62:43:53:e1:61:dd:40:2b:ec:59:bb:3a:
                    13:69:d7:c7:3b:96:8a:ad:c3:5d:09:3e:f6:9f:ef:
                    59:3a:75:e4:12:59:c7:bd:26:11:af:06:3b:6c:3a:
                    ab:70:16:9d:aa:ff:19:93:33:a8:cc:42:67:9a:26:
                    40:29:40:ef:d9:3e:b9:b4:1b:0c:f1:19:05:0b:89:
                    7e:f6:41:bb:8a:92:12:e4:b6:b9:5c:9a:2c:bc:58:
                    70:ce:68:95:44:b8:82:cc:2a:9f:7f:e7:f8:f8:31:
                    20:4c:88:23:05:52:d3:c7:a8:ba:a3:af:a4:ad:91:
                    e4:4b:32:0e:99:b5:2f:34:16:54:7a:d3:0d:54:9c:
                    07:d5:53:ec:1d:98:06:ba:94:ae:a1:f9:b2:6a:d2:
                    08:24:b4:ec:44:93:cc:77:c3:8e:73:9a:20:7a:dc:
                    10:65:75:5a:1b:ad:25:c6:2c:77:ed:a2:15:dc:7a:
                    21:91:74:c6:4b:ae:98:0f:c6:32:39:ef:1d:1b:48:
                    13:12:c7:af:fd:fb:9d:1d:fd:70:be:31:0d:43:dd:
                    7e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7D:D3:95:85:5B:E1:81:39:9E:37:E1:C2:B5:27:F6:DB:2D:63:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74c8f8cd-834f-3c10-9d4b-6d4a7ab62db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.60.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:47:bc:58:78:16:d7:ba:62:b1:04:e3:9d:5a:53:20:d0:f1:
         68:d9:5f:6e:8b:ad:ba:3c:ee:95:68:f6:17:04:a6:a1:75:28:
         1a:04:4a:41:a3:0c:7b:b8:0b:39:62:49:35:82:af:ed:b0:82:
         8a:84:1d:1e:d7:0a:f2:cc:f3:4c:29:77:0b:da:49:84:5a:63:
         ec:e0:d6:4d:12:60:53:f6:cf:a9:13:4f:70:af:50:8d:28:90:
         9c:22:0a:33:cc:5f:b2:65:65:db:a0:5e:f6:15:dc:99:d3:46:
         bf:dc:fe:66:1d:b6:6a:9d:49:ee:de:0a:aa:ec:99:07:9a:35:
         c9:a9:f0:51:f5:ab:d6:dd:77:b8:06:74:d7:5b:8f:15:61:32:
         fc:32:6f:cf:ce:52:3a:c7:92:a5:27:33:18:7e:04:0c:53:b6:
         0e:82:9d:b4:ac:73:90:2b:a7:b9:29:ae:93:df:8e:a2:2c:8f:
         43:c5:61:d5:1f:57:3f:c7:73:2a:e3:27:1d:8f:e1:05:3d:97:
         85:80:0d:bf:2b:34:68:40:84:4b:83:15:57:51:ea:15:79:4e:
         af:cf:ed:64:cb:ca:d6:3e:68:8b:ce:90:15:b9:96:23:3d:39:
         29:6f:b6:81:76:b9:32:6d:b2:aa:43:5d:73:b7:8f:2b:36:3f:
         de:77:b2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:25:20 2026 by rpki-client