Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ebeea92-e510-3df8-a7f6-321e0bd19308.roa
File:                     2ebeea92-e510-3df8-a7f6-321e0bd19308.roa (raw, json)
Hash identifier:          7wOk8xNHpReRmViSXa5FpQ4iTtdml+lJ1yOUYAQISfg=
Subject key identifier:   5B:74:CE:8C:B9:C7:2B:0D:42:61:56:E0:D6:4E:EF:26:16:57:1A:B8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DD3A0C1B0EF4FE70A7B60
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ebeea92-e510-3df8-a7f6-321e0bd19308.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        24.176.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:d3:a0:c1:b0:ef:4f:e7:0a:7b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=0455f607-f9e5-43ac-9d94-0ccbeb26edcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:50:c1:d4:e5:03:1c:2f:da:5c:ab:61:85:cc:
                    80:ec:3c:cc:e6:6c:8e:61:1d:78:af:96:55:fe:b7:
                    28:10:58:1e:e6:99:1f:ee:cb:30:0e:54:86:9a:5d:
                    18:4c:b2:66:53:9e:4f:2d:d9:f7:53:d2:c0:6b:06:
                    1f:04:61:9f:18:57:aa:78:54:97:49:02:4f:91:c5:
                    1e:0d:4e:a2:7c:02:d0:77:da:06:c2:49:18:0e:cf:
                    b8:73:4b:d5:49:af:7d:26:b9:2c:3f:91:7c:75:a5:
                    23:f1:c7:ef:0d:d7:32:39:ac:99:ab:6a:6d:36:cb:
                    6c:1b:f9:3b:c5:12:2d:8e:8f:85:fe:e8:d5:4a:74:
                    27:b6:d5:0e:df:25:3a:b8:06:17:91:23:a7:42:a6:
                    e2:15:b7:23:47:90:e9:36:94:f6:3c:5f:2a:10:f4:
                    d8:1a:8f:d2:93:00:87:a7:0a:8d:fc:64:a8:cb:61:
                    23:44:92:43:8c:5b:0b:77:ad:65:c1:0b:ce:f9:d7:
                    98:80:22:57:52:14:00:2f:c5:8f:e9:bc:d4:61:f2:
                    62:ac:a5:c7:67:0a:0b:5d:ae:8c:ad:ac:de:4e:e3:
                    75:b1:cb:60:c2:43:7a:47:c1:a1:d9:8a:4a:68:5a:
                    21:d8:ae:ee:9a:72:d9:56:cc:66:08:18:0c:7b:ec:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:74:CE:8C:B9:C7:2B:0D:42:61:56:E0:D6:4E:EF:26:16:57:1A:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ebeea92-e510-3df8-a7f6-321e0bd19308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.176.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f8:7c:0a:cc:1c:ac:52:73:84:73:04:7e:7b:30:8d:15:50:
         5d:eb:2b:da:9f:68:0b:ea:3a:11:04:cd:1e:65:3c:88:ff:95:
         e9:c7:89:ff:7c:b7:95:b8:c3:94:27:11:25:27:aa:89:6f:57:
         e1:da:49:4e:b6:b3:86:43:4e:d2:b7:17:03:ab:cf:9a:2c:44:
         10:14:72:82:fe:aa:25:02:7e:b6:bf:59:30:5d:c6:ac:89:f1:
         f7:b1:78:b5:40:73:51:c1:28:77:53:c2:3d:ff:21:60:b4:ae:
         88:e1:19:55:31:a5:ab:b9:30:d9:4f:a7:10:5d:d9:cc:61:82:
         38:b3:29:6e:46:21:fa:db:80:a0:e8:5e:a1:c8:f4:7d:00:9e:
         ff:19:94:94:66:e3:da:9d:ef:fc:40:fc:60:05:18:74:53:a7:
         c0:fe:fa:f8:dc:fd:21:13:71:3f:3b:7d:80:58:7c:86:28:6f:
         93:14:81:a6:0d:ba:70:02:a9:e6:bc:9b:c1:a3:8b:70:08:26:
         29:1b:a0:c2:c3:09:dd:59:66:b3:23:be:90:d4:5c:ba:91:08:
         2d:8e:cf:37:14:59:c1:7e:cd:e9:d8:5c:44:16:57:52:84:6c:
         43:95:d3:89:c6:b8:01:cd:5c:fd:f0:8b:7b:6e:b2:6a:62:9a:
         25:ac:e2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:22:14 2026 by rpki-client