Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1ee8b4c8-ee02-3987-acd8-0ea66755e603.roa
File:                     1ee8b4c8-ee02-3987-acd8-0ea66755e603.roa (raw, json)
Hash identifier:          rzTYNSvr9lxUy6x9150l83XLjKOsAfnCkKTxj81fE90=
Subject key identifier:   2C:05:90:F9:28:4D:49:45:09:1C:4F:71:C4:A9:FC:E7:D7:1B:94:87
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC372873102C0B679C6BBBA00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1ee8b4c8-ee02-3987-acd8-0ea66755e603.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        24.181.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:87:31:02:c0:b6:79:c6:bb:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=dc4264e7-037c-4218-b4e0-e655fd1b6568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0e:62:e0:97:ef:ee:d3:c6:f0:2c:7a:c1:65:
                    e3:c0:2f:63:7f:f6:d7:a7:0e:f1:1f:fb:23:b2:3f:
                    5b:c1:bf:4b:e6:3b:b3:47:c1:ed:16:99:39:ba:20:
                    a2:0d:2c:d0:7a:b6:96:de:e1:ae:79:76:69:b6:c5:
                    83:98:0a:00:09:35:e4:d2:cf:60:9c:eb:f7:9f:dc:
                    1d:78:b4:97:5a:9d:df:b9:9b:39:18:03:9a:da:da:
                    e9:00:bc:06:38:15:80:65:9a:03:5f:c5:66:bd:4d:
                    1e:e7:f8:fa:eb:fb:43:3f:ab:a2:eb:3f:fa:00:db:
                    4f:2a:60:b8:30:d1:9d:39:16:92:0e:86:d5:d2:2b:
                    ec:e2:d7:0a:94:ec:0b:27:d9:5f:96:45:32:04:a3:
                    e2:ac:0c:5d:12:c5:d8:70:da:60:d2:2a:e1:a5:49:
                    b8:12:a3:0d:97:3a:10:fc:d1:97:70:55:bd:3a:21:
                    07:60:f5:cf:b0:6d:9f:f1:99:a0:94:17:f0:da:30:
                    87:79:a6:87:59:e0:fb:d0:eb:1c:f4:17:2a:69:cf:
                    24:11:63:d8:b9:7d:69:31:72:af:82:7c:2e:2c:3a:
                    60:e5:42:6e:92:2d:ee:22:58:1c:cd:b0:5b:23:c2:
                    ab:7c:5f:e6:88:c2:24:cf:25:30:fd:54:cd:a5:3c:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:05:90:F9:28:4D:49:45:09:1C:4F:71:C4:A9:FC:E7:D7:1B:94:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1ee8b4c8-ee02-3987-acd8-0ea66755e603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.181.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:72:cd:5a:d3:58:ce:37:63:8b:24:1a:5c:eb:3d:f9:5d:d3:
         0d:00:a3:bb:5a:50:ea:fb:05:cd:eb:ae:c1:d2:7d:6f:1c:c6:
         87:3c:f7:1b:0e:c1:94:a0:15:39:88:18:91:85:e1:71:11:4a:
         97:86:18:78:f3:b9:02:36:4e:49:de:4d:e6:1e:82:51:90:c8:
         1b:2f:30:16:b4:88:3f:35:94:61:e9:80:c4:f1:1c:23:16:2a:
         22:3e:e1:04:eb:c6:e0:13:7b:01:e4:84:78:fc:90:11:53:fc:
         f5:b8:d5:84:e2:9e:35:df:6d:27:c7:40:1b:3c:a9:41:2a:03:
         e3:94:8c:70:bf:eb:e6:a3:73:7f:79:12:92:20:cc:82:c5:87:
         31:c4:db:46:85:cf:eb:2c:25:15:7b:15:15:55:21:9c:ba:2b:
         52:58:ae:23:71:32:0b:e9:ab:fa:2e:6d:76:fb:1f:45:99:4d:
         6e:d8:8f:7f:29:1a:8f:9a:7f:d1:01:1d:e0:8c:6b:5b:7e:e1:
         7e:27:d5:a0:3a:3b:19:fe:c3:55:7a:c5:39:f1:c5:04:42:c5:
         64:69:d1:29:ee:64:a9:e2:96:b4:04:ac:36:6d:bd:57:bc:9a:
         14:0a:04:f6:02:ef:e7:6d:5d:2c:ba:de:46:2f:55:17:02:81:
         da:f6:5d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:06 2026 by rpki-client