Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/797113c8-eb74-34bb-90f6-91aaeae53f85.roa
File:                     797113c8-eb74-34bb-90f6-91aaeae53f85.roa (raw, json)
Hash identifier:          KehxZxpYBHrCibc7bL3SHJrQE0InyQ/B0ZC4DFENauQ=
Subject key identifier:   54:06:8E:70:57:D7:EF:71:97:65:02:05:68:67:ED:D4:04:66:A6:C7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3721555576D802FBEC73880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/797113c8-eb74-34bb-90f6-91aaeae53f85.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        24.177.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:15:55:57:6d:80:2f:be:c7:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=bcca9b05-c815-417d-a904-0534833348c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:3e:76:b3:93:31:54:f5:6b:c5:b2:58:5f:
                    00:5c:57:9d:67:74:ec:8f:a4:a9:f6:cc:53:9b:43:
                    66:d5:54:88:a0:4e:b0:2e:c4:8b:ec:4e:3c:9b:92:
                    10:37:03:c3:6a:dd:06:11:d7:40:a8:5e:18:19:8c:
                    a3:a6:22:ab:73:71:f9:1b:eb:a9:70:f2:c7:50:49:
                    22:33:27:b6:ae:64:d9:1d:4e:9c:52:1a:a4:dd:5d:
                    ca:08:53:68:82:d6:99:16:a7:3c:78:43:bd:7e:2a:
                    fd:4b:a0:2b:31:a8:3c:51:91:35:63:67:87:ec:93:
                    ff:b3:c0:19:42:e5:2b:e1:58:64:ca:d3:1a:09:73:
                    a1:ad:1c:86:47:a3:e3:3c:4d:2a:96:68:60:54:62:
                    a0:c5:81:ee:61:f4:c5:37:04:5c:2f:12:c0:0f:1f:
                    fb:c3:cc:16:7a:02:5d:15:db:95:47:a9:16:08:fa:
                    74:b8:21:ec:62:03:55:e9:eb:19:df:e7:7b:c8:85:
                    79:a6:6b:c8:e6:a9:d0:d6:f7:3a:6f:ce:53:61:1a:
                    b5:76:19:48:3d:fa:fd:30:91:1c:33:e1:14:3a:c5:
                    b6:93:6b:5a:19:55:02:94:ce:e6:1c:98:20:57:c5:
                    90:0d:04:57:10:22:ae:a3:85:c1:07:bf:09:a7:82:
                    40:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:06:8E:70:57:D7:EF:71:97:65:02:05:68:67:ED:D4:04:66:A6:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/797113c8-eb74-34bb-90f6-91aaeae53f85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.177.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:00:b8:07:19:b9:26:d9:aa:f3:dc:d8:69:1c:3d:6b:b9:87:
         37:29:ff:4e:1d:be:a9:a1:a4:8c:ac:a1:ef:d1:d4:9e:1f:dc:
         2c:26:f6:53:dd:6c:b9:67:41:25:cf:b7:c7:1a:8b:b4:c9:33:
         b7:3d:41:8d:a5:a8:65:68:c1:03:c8:6b:1e:c8:c1:74:a9:1f:
         79:e1:96:78:1c:cf:27:d0:8e:6e:5f:3f:10:e4:68:d8:68:57:
         19:4c:ce:b3:98:0c:31:58:dc:9a:4a:92:10:e9:3f:20:1b:c1:
         c8:91:04:8d:f3:9b:b1:cb:41:79:56:c6:b6:1e:b4:ef:1a:e8:
         af:a6:90:da:b7:9a:2f:11:4e:1d:f3:6c:ce:5f:1e:a9:64:57:
         27:f1:cd:d5:95:ff:d0:03:e5:bb:d8:f3:76:4a:ae:07:0b:aa:
         1b:d8:2f:3e:43:2a:fd:59:af:c7:2b:89:d8:78:ef:72:3c:d1:
         c0:0e:4f:41:fe:43:37:51:bf:55:a1:aa:ad:d0:79:16:c6:90:
         63:6b:3b:86:e3:cf:b9:ab:df:27:7e:5f:91:f9:f2:91:bd:3d:
         f0:b9:fa:ba:e5:fc:77:71:3e:37:d2:e3:fa:56:69:25:d9:e2:
         01:9b:44:59:e1:a7:b0:d7:1d:a5:36:f3:32:84:50:1c:3e:2c:
         65:dd:1b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:58:18 2026 by rpki-client