Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74abcacc-2133-3c48-be1d-e70b12efb5f3.roa
File:                     74abcacc-2133-3c48-be1d-e70b12efb5f3.roa (raw, json)
Hash identifier:          FH7aVBLT8lqavDsfY4gPBstcRLXTObgzdRy6XdIJLXA=
Subject key identifier:   DF:8B:67:4D:CF:43:51:A1:82:1E:35:81:1A:8E:01:9E:CC:89:68:99
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E09CB3AA5A1C4E887AF158D00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74abcacc-2133-3c48-be1d-e70b12efb5f3.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     23222
IP address blocks:        24.176.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:3a:a5:a1:c4:e8:87:af:15:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=f48b48fa-f6fe-4f4a-b3b6-0ebcfbaedf73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:37:cf:a1:6e:f8:ba:7d:84:ea:c4:34:fc:25:
                    3a:ad:b1:9e:14:1f:be:91:ca:02:d0:5e:30:26:d3:
                    73:63:f5:bb:70:78:97:e8:6d:f6:61:5f:ba:29:52:
                    8a:ce:5b:50:91:ea:7f:d0:32:a3:d3:b9:c1:e8:12:
                    d6:bf:5b:b3:fb:81:15:0a:fd:31:42:82:4b:ce:77:
                    3f:91:94:75:3f:43:81:e8:6f:b0:37:3c:0f:a8:d4:
                    2a:19:80:77:5a:f7:d4:45:24:2b:7c:12:90:9d:10:
                    1b:d8:4d:f1:1b:bf:24:d6:19:55:92:20:4a:30:59:
                    dd:43:72:ec:ef:07:bb:e8:c7:9a:4d:ba:16:cb:0d:
                    0d:f1:9c:63:07:f1:c2:96:96:1e:18:31:5e:49:46:
                    90:c3:06:4c:57:8f:15:07:55:6b:7c:3e:a5:18:70:
                    42:5f:c1:c3:12:2b:00:d4:60:78:3b:77:2e:e4:d7:
                    2b:0a:7b:22:1f:8e:f5:06:f6:c5:1c:99:85:fb:d7:
                    bd:83:bd:56:78:92:c2:c8:e7:f1:62:ee:39:01:0b:
                    c6:8b:02:35:32:08:6d:fa:00:39:7d:9f:00:ea:13:
                    8f:af:e9:15:17:bc:8b:96:9c:62:03:a4:39:ff:75:
                    7a:fc:5f:12:6f:00:a5:7c:98:2e:d1:23:43:82:cb:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8B:67:4D:CF:43:51:A1:82:1E:35:81:1A:8E:01:9E:CC:89:68:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74abcacc-2133-3c48-be1d-e70b12efb5f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.176.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:88:5a:d6:05:89:a1:3d:18:42:22:90:8a:63:b3:e2:14:df:
         43:fc:e7:8d:42:75:f0:52:c9:80:bd:9d:fd:6e:8b:3b:80:d2:
         8d:e8:46:76:96:65:cf:8e:99:68:7e:9e:27:46:b5:89:bc:ce:
         d1:4e:d8:ae:ad:60:7f:3d:88:0f:2c:68:6b:2b:99:4c:f8:eb:
         a7:22:e9:e0:d4:a0:b3:65:91:3b:ab:30:c4:d8:68:0a:2d:7f:
         20:d2:c3:9c:30:d4:5b:e8:9d:f1:25:c5:26:0f:35:ea:51:d4:
         2f:6d:e8:80:54:20:2b:c3:90:03:4d:4b:4a:5c:74:ff:a7:07:
         50:e5:28:e5:b8:c0:f4:b3:14:7a:30:e7:c7:27:8f:83:a3:67:
         3c:e0:e3:54:76:51:e6:be:bc:35:9e:18:73:74:93:41:99:3a:
         39:7c:c8:65:9e:af:1d:c4:e9:18:c3:0e:1b:f7:4d:bd:68:58:
         cb:05:d7:26:d1:d5:56:f7:ee:7f:a7:a4:7d:66:ab:89:dd:80:
         49:5f:12:7b:f0:e4:72:ce:c9:b7:db:3f:7b:c8:e0:3d:98:11:
         3e:0c:d5:82:83:2a:68:18:28:a2:41:8d:e3:5d:0f:9d:29:e5:
         40:ef:12:35:d7:96:f4:25:11:b0:d7:e0:17:cf:a3:91:51:50:
         9d:66:0f:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4JyzqlocToh68VjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDYwMjEzMDAxMFoXDTI2MDgzMTEzMDAxMFowLzEtMCsGA1UEAxMk
ZjQ4YjQ4ZmEtZjZmZS00ZjRhLWIzYjYtMGViY2ZiYWVkZjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDfPoW74un2E6sQ0/CU6rbGeFB++kcoC0F4w
JtNzY/W7cHiX6G32YV+6KVKKzltQkep/0DKj07nB6BLWv1uz+4EVCv0xQoJLznc/
kZR1P0OB6G+wNzwPqNQqGYB3WvfURSQrfBKQnRAb2E3xG78k1hlVkiBKMFndQ3Ls
7we76MeaTboWyw0N8ZxjB/HClpYeGDFeSUaQwwZMV48VB1VrfD6lGHBCX8HDEisA
1GB4O3cu5NcrCnsiH471BvbFHJmF+9e9g71WeJLCyOfxYu45AQvGiwI1Mght+gA5
fZ8A6hOPr+kVF7yLlpxiA6Q5/3V6/F8SbwClfJgu0SNDgstIWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN+LZ03PQ1Ghgh41gRqOAZ7MiWiZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNzRhYmNhY2MtMjEzMy0z
YzQ4LWJlMWQtZTcwYjEyZWZiNWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGLCwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL6IWtYFiaE9GEIikIpjs+IU30P8541CdfBSyYC9nf1uizuA0o3oRnaW
Zc+OmWh+nidGtYm8ztFO2K6tYH89iA8saGsrmUz466ci6eDUoLNlkTurMMTYaAot
fyDSw5ww1FvonfElxSYPNepR1C9t6IBUICvDkANNS0pcdP+nB1DlKOW4wPSzFHow
58cnj4OjZzzg41R2Uea+vDWeGHN0k0GZOjl8yGWerx3E6RjDDhv3Tb1oWMsF1ybR
1Vb37n+npH1mq4ndgElfEnvw5HLOybfbP3vI4D2YET4M1YKDKmgYKKJBjeNdD50p
5UDvEjXXlvQlEbDX4BfPo5FRUJ1mD14=
-----END CERTIFICATE-----
Generated at Fri Jun 5 17:30:54 2026 by rpki-client