Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8187937f-646c-384e-8b76-b0eee191e2ef.roa
File:                     8187937f-646c-384e-8b76-b0eee191e2ef.roa (raw, json)
Hash identifier:          YVwppQsx2QrS5m4yG4EmxrJO8MRhjr6rvBvObuEmo7w=
Subject key identifier:   B3:6B:B2:5B:97:4B:72:9E:BB:74:28:4C:7F:71:41:C6:F4:73:15:B3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F56955BE6FC86DC68CA8F3140
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8187937f-646c-384e-8b76-b0eee191e2ef.roa
Signing time:             Tue 29 Sep 2026 17:55:54 +0000
ROA not before:           Tue 29 Sep 2026 17:55:54 +0000
ROA not after:            Mon 28 Dec 2026 18:55:54 +0000
asID:                     20231
IP address blocks:        24.159.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:56:95:5b:e6:fc:86:dc:68:ca:8f:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 29 17:55:54 2026 GMT
            Not After : Dec 28 18:55:54 2026 GMT
        Subject: CN=910afd61-e53f-48c3-bd8e-31da3fcc889f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:58:ea:96:93:34:00:a2:fc:ce:e4:d5:11:2f:
                    17:1b:28:e0:aa:2d:8f:57:4a:bb:6d:b0:8a:47:98:
                    21:dd:91:d2:64:60:c8:b8:7e:89:0b:d0:36:bc:ac:
                    cd:32:6c:8f:71:56:80:24:d0:8d:2b:6f:54:8e:e3:
                    24:25:9b:bb:e2:20:cf:d6:d8:38:db:c5:18:03:72:
                    e0:aa:e5:94:34:a5:62:3e:c5:24:0f:e0:e8:07:7c:
                    ae:bd:78:0a:f4:dd:fc:b1:81:e1:1b:1d:54:ab:6d:
                    1d:6a:67:14:99:a0:79:c4:61:25:d3:dc:b8:76:6b:
                    64:e1:13:63:67:f0:69:36:1a:95:86:ce:3a:98:8b:
                    a7:d3:66:54:f9:85:4b:de:21:40:9b:48:d2:e5:89:
                    d0:57:08:a7:2d:59:7f:02:4c:e2:e2:ef:93:15:93:
                    a3:a6:8c:b1:36:66:65:e6:e8:83:d0:1b:09:3b:24:
                    e5:74:7c:c8:a1:55:74:74:e9:b7:f4:ce:d8:91:9b:
                    af:50:60:35:ec:88:42:85:12:0d:5c:0c:a0:ae:6e:
                    cb:0c:1d:2b:05:d0:0c:78:99:f0:5e:90:5b:5d:e5:
                    3b:c3:cf:19:7d:33:ff:e2:93:c5:bf:3d:be:25:39:
                    1b:03:f9:e1:7f:ed:66:f6:19:54:55:a9:48:68:0b:
                    ac:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6B:B2:5B:97:4B:72:9E:BB:74:28:4C:7F:71:41:C6:F4:73:15:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8187937f-646c-384e-8b76-b0eee191e2ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3a:67:4b:08:5d:41:25:0f:af:32:3d:07:c5:b4:e4:88:66:
         dd:cf:d8:0b:de:ec:23:3b:2c:de:4f:e6:a2:d2:9c:0b:de:a3:
         11:75:bd:06:0e:2b:72:49:95:6f:3b:b9:6c:6f:60:cb:f0:6d:
         46:bd:0c:c7:4b:ad:99:0d:ab:04:7f:07:76:3d:2a:e6:cb:64:
         c1:e7:8e:b3:b9:ca:4b:81:83:cd:f7:04:41:fe:8b:2c:09:e4:
         72:f9:c4:90:d4:7e:6b:5f:6f:4f:df:e9:39:19:2f:0f:e2:c1:
         97:93:cd:ff:50:af:0f:e9:be:80:93:5c:d6:bc:ab:31:4c:99:
         1d:87:0f:d6:6c:83:79:5c:0b:21:66:79:fc:22:64:24:2a:6e:
         a5:cc:33:cc:e8:67:5c:e6:dd:e8:3e:19:b1:5b:4a:56:1c:db:
         dd:81:b1:33:3a:d3:45:45:41:4b:0a:ef:02:4b:09:d4:e6:0c:
         92:f9:31:1a:a4:d5:b4:c2:5a:2a:5a:5b:62:99:17:34:8f:3a:
         60:33:95:9e:67:fe:54:23:c1:a2:62:21:f1:85:0c:87:ef:44:
         18:5c:c8:d3:aa:7e:4e:d4:40:d1:f0:c4:92:22:51:00:74:f2:
         80:8f:a0:8a:fa:15:80:5b:3d:ec:71:a0:30:dd:69:f1:67:55:
         ef:3b:23:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 14:42:40 2026 by rpki-client