Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4acee3db-e91d-30ec-9ed0-ea91f34cbed5.roa
File:                     4acee3db-e91d-30ec-9ed0-ea91f34cbed5.roa (raw, json)
Hash identifier:          CEV/BzX+xQY3wOCWx42Sjgxelc9qvAk60S/NiW79hEo=
Subject key identifier:   62:23:8C:79:46:42:0A:03:CE:20:34:98:DD:3C:DB:18:07:22:11:A2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E09CB3E18B39F0F826D02C820
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4acee3db-e91d-30ec-9ed0-ea91f34cbed5.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     22677
IP address blocks:        24.241.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:3e:18:b3:9f:0f:82:6d:02:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=63c0d996-8007-440c-a7b8-af90990d87ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b6:4b:32:47:40:28:8c:38:66:9c:e2:0b:e1:
                    d6:55:58:ed:14:71:98:4b:68:64:8f:30:a3:89:e2:
                    e7:32:2e:e7:fc:af:04:57:45:27:1d:46:7c:3a:c5:
                    6f:97:b6:52:ba:a7:f9:99:e1:15:ae:85:a4:01:d6:
                    fb:7f:97:92:4e:88:af:25:d8:98:5b:74:58:35:ff:
                    5f:22:d1:29:5b:60:fc:1a:07:48:fa:bf:80:d8:58:
                    f7:02:36:66:20:7d:2f:4d:6e:5a:e4:bb:5e:81:ce:
                    7f:21:25:a0:f1:99:15:37:ab:8a:bc:89:23:2c:c8:
                    88:05:9b:9c:b4:76:af:c9:ba:0f:39:5a:8b:6c:f7:
                    56:d1:1f:01:63:b5:c4:a5:e8:7d:3e:23:dd:d1:44:
                    fe:fd:9b:7b:06:dd:52:a1:e2:22:ed:65:78:48:ac:
                    55:d3:16:38:81:17:99:0a:dc:77:5c:ec:f7:b3:40:
                    08:9f:d1:bd:df:61:b2:74:6f:12:ee:d7:0f:d1:b6:
                    6d:ca:ea:16:db:b4:55:12:33:b1:a5:b4:9c:84:80:
                    a8:32:92:27:6d:9e:38:d1:bf:f7:c4:12:71:4b:b9:
                    45:9d:11:a0:ac:b4:25:93:19:72:01:27:43:f0:b6:
                    42:17:b6:4d:b8:81:04:7e:89:90:39:5b:1d:24:2b:
                    95:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:23:8C:79:46:42:0A:03:CE:20:34:98:DD:3C:DB:18:07:22:11:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4acee3db-e91d-30ec-9ed0-ea91f34cbed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.241.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:7b:c0:f6:cc:52:09:63:5b:b9:05:d7:72:ae:ac:73:99:7f:
         f4:12:f7:6b:82:4c:99:e6:ba:87:3a:89:3c:de:12:46:d4:f8:
         77:c2:5c:3e:d2:fa:e6:03:ff:8c:b1:18:ec:92:31:83:8b:da:
         93:04:04:fc:46:25:e9:db:76:85:15:cc:82:5d:e8:0b:c3:26:
         fa:5c:46:a1:b1:7d:5e:45:88:55:1d:21:6b:f1:db:c4:4f:e1:
         ad:9b:91:94:bb:27:5c:68:5f:ad:46:ef:d1:ff:71:e3:18:ff:
         a3:9b:91:33:d8:07:2d:a6:ef:57:70:a4:c9:21:f0:c2:f9:7a:
         ae:46:01:82:5b:12:f2:57:9d:8c:fa:da:67:98:b6:be:20:68:
         b5:f1:c6:d4:b3:3b:9b:d9:44:b8:02:3d:dd:28:55:90:4f:c5:
         70:a3:98:d0:6c:1c:82:70:3d:b5:e1:57:41:00:fb:eb:53:f1:
         72:04:c8:22:d7:09:e8:7b:ef:4a:6c:8c:fe:6b:66:2f:0a:8c:
         67:8a:4c:e0:e4:c9:c9:2c:1f:2e:76:b5:07:87:75:ab:b5:0b:
         16:81:8b:c7:67:32:7a:69:ed:8e:19:f5:dc:43:c1:6d:2a:e4:
         19:ae:5f:e8:9b:d8:7c:da:a9:44:fa:f2:fe:35:70:81:ff:2d:
         fc:e7:af:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 19:24:53 2026 by rpki-client