Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24a643ae-62c4-310e-a4c4-fb3f551f7417.roa
File:                     24a643ae-62c4-310e-a4c4-fb3f551f7417.roa (raw, json)
Hash identifier:          eZ2h1mOdkYqiYcuBtmHpXYvGMh7d68LhbtzrFXWJVNo=
Subject key identifier:   F1:96:FB:ED:33:B2:A3:5D:2A:11:8E:83:77:53:1B:90:C9:23:6F:3D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37211C01761B295D7530280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24a643ae-62c4-310e-a4c4-fb3f551f7417.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        24.177.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:11:c0:17:61:b2:95:d7:53:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=edaed0c3-6c5b-42e7-8849-e58a927b63a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:22:06:94:d0:b0:ac:70:b1:8d:4b:47:d2:b5:
                    a2:84:dd:da:43:f8:fa:ec:8c:37:cf:e0:f6:d6:b2:
                    c3:1c:73:c3:c2:d5:bd:84:2c:7c:df:7b:01:5f:5f:
                    88:58:04:be:3b:01:f5:4b:a5:bf:78:b7:72:f6:f4:
                    41:51:07:08:db:5b:b6:41:69:b7:0c:2d:80:36:0b:
                    0b:88:5d:4e:29:d8:cb:4d:09:5f:53:39:36:12:2b:
                    5f:51:04:58:be:65:1e:df:dc:61:e9:8a:4e:cb:43:
                    19:93:5c:9f:9f:07:0f:70:c8:f5:9a:d6:94:52:38:
                    ab:49:07:81:1e:af:d5:83:e4:e6:fd:c3:e3:17:e3:
                    44:f3:7a:54:e2:6a:01:a9:c7:07:10:79:94:c1:b1:
                    c9:35:c3:06:05:d6:2a:de:92:f4:e8:bb:ec:18:cb:
                    93:7a:98:c5:30:a7:fe:46:ba:30:fc:63:31:e2:d7:
                    a6:25:d0:24:33:13:f5:12:65:88:84:96:b6:be:28:
                    8e:f4:08:9d:81:bd:ef:35:89:44:d3:23:07:27:ae:
                    1a:d5:6a:83:18:85:a7:5e:74:0f:bf:60:8b:fd:7c:
                    f4:57:3b:b6:77:32:b8:15:0a:f4:17:40:36:de:1e:
                    3a:8a:e1:f6:16:14:f5:5f:e6:3c:c0:99:4a:8a:7e:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:96:FB:ED:33:B2:A3:5D:2A:11:8E:83:77:53:1B:90:C9:23:6F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24a643ae-62c4-310e-a4c4-fb3f551f7417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.177.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:bd:92:ea:de:01:1c:a1:71:7b:1a:fb:0d:9c:a7:29:04:40:
         94:de:49:3c:72:4f:d5:5f:76:3e:2d:98:66:c0:68:5f:dd:69:
         87:70:75:20:22:29:d2:b4:cc:b9:08:af:37:44:20:e3:e3:66:
         14:2f:8f:f5:63:6d:6a:cc:f0:87:48:bb:c7:e3:4f:69:0c:53:
         a8:43:d5:8a:2e:81:3c:ac:6b:68:80:f9:88:34:76:6f:d4:19:
         13:5c:fd:8b:e6:b2:9c:7f:af:46:29:15:76:8f:a1:b4:bb:d1:
         d1:36:fd:f6:ad:da:27:d3:02:f1:3f:31:3a:17:8a:80:90:f6:
         5e:ae:93:55:b4:3e:42:5c:02:c8:31:36:f1:88:15:22:aa:e3:
         70:f3:d3:ac:b4:81:88:c0:40:d5:e4:8a:b3:1e:fc:3d:45:59:
         f6:69:39:d0:c6:65:d9:08:5e:a9:85:ee:2d:4b:67:1c:d3:25:
         0b:10:95:ed:08:5d:41:be:6b:0c:ab:f7:12:f1:1e:c3:08:46:
         02:d0:63:10:68:54:c2:1b:c5:2d:60:14:2e:32:f1:40:6b:89:
         83:91:3a:e1:f0:2e:2c:08:49:73:79:3d:f5:22:fd:b6:16:67:
         cf:3c:75:9b:7e:03:09:2b:83:81:64:80:37:e6:e8:80:4a:55:
         81:fc:c6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:16:43 2026 by rpki-client