Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/83756db4-4cbd-3dbd-aacc-b1054fb2206a.roa
File:                     83756db4-4cbd-3dbd-aacc-b1054fb2206a.roa (raw, json)
Hash identifier:          gty79AG/jtlgBsY2g5jOoiGqKlXAMAuYuvDfreK5qTs=
Subject key identifier:   06:86:69:0B:A2:1E:A9:9B:58:37:9A:F1:2D:DD:6F:CB:22:E4:BA:42
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EABB6EBB694F731D57C1FD500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/83756db4-4cbd-3dbd-aacc-b1054fb2206a.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     22677
IP address blocks:        24.240.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:eb:b6:94:f7:31:d5:7c:1f:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=b9fb7747-4c16-4d11-9976-a52032677569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:27:4d:26:4a:27:f9:9f:12:7d:7a:72:53:e8:
                    06:75:f0:0c:e3:ea:1c:ba:f7:01:9c:e9:b3:5f:65:
                    71:ce:47:3e:90:5b:d9:6f:01:26:20:65:b2:d3:7d:
                    60:77:f3:7f:04:62:e7:42:1a:b6:b8:e9:5f:ce:02:
                    11:5c:5e:c3:74:a9:58:0b:d9:23:03:84:9e:28:f5:
                    1c:af:b2:e5:ca:ae:3f:74:d2:0e:6d:b3:47:24:19:
                    59:71:3a:73:3e:67:10:a6:11:46:0b:ec:00:17:31:
                    8a:ae:ec:84:f2:66:ee:17:e5:be:82:10:d8:d2:33:
                    c8:f0:f9:f1:b0:5c:25:eb:37:02:6c:7f:b6:a5:db:
                    d5:86:8c:a3:36:cf:11:f2:4d:c1:40:4a:1f:ac:93:
                    03:09:b8:8e:20:07:16:e6:f8:36:80:e0:b6:cf:0e:
                    a1:1f:6d:6d:34:0e:82:36:95:2a:08:4e:ef:fb:b0:
                    27:38:9d:5c:4d:60:37:32:18:b3:76:04:dc:41:6d:
                    a0:7c:64:78:34:66:04:e0:d6:95:e1:ec:80:e3:f3:
                    65:c3:ca:c2:1f:95:2c:4d:98:46:4e:f5:49:d8:f1:
                    02:e7:99:5c:68:3f:cc:bf:b2:37:54:98:2f:52:24:
                    5b:34:7e:e0:79:d5:e9:15:14:47:87:29:65:38:91:
                    30:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:86:69:0B:A2:1E:A9:9B:58:37:9A:F1:2D:DD:6F:CB:22:E4:BA:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/83756db4-4cbd-3dbd-aacc-b1054fb2206a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.240.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7f:70:f5:a0:0e:79:b8:89:88:53:ec:4f:e9:22:b6:7a:37:
         34:c5:7d:d9:c5:1f:ea:0d:c2:ff:78:1a:95:bf:76:14:08:2c:
         1c:af:43:8b:d9:3e:f3:e9:9b:1b:22:9d:a6:b8:6f:21:d7:6c:
         42:4b:4a:a1:06:93:0c:b0:65:83:dd:88:e1:8a:a3:8a:18:2a:
         d2:54:5f:aa:23:98:40:3d:33:13:ca:7b:d5:c5:e0:34:2e:67:
         22:d3:d3:41:a6:54:01:4b:76:3a:b2:85:de:8e:50:f7:a3:83:
         7c:72:21:54:e8:33:21:61:61:e5:8c:bf:e8:86:b0:45:9e:ec:
         62:f8:5d:0c:19:32:15:86:c3:4f:e0:81:c5:2d:e7:d3:60:0c:
         78:54:00:74:0e:78:57:5c:1f:7f:e4:5d:d3:b1:da:b5:ce:da:
         3d:60:30:0d:ad:cf:6e:3e:a2:17:83:b3:7b:93:9f:e8:9e:80:
         22:0e:36:14:21:55:6f:de:4e:e5:f1:4f:47:13:f5:90:9f:d5:
         8d:d9:28:45:34:30:64:72:82:ad:5a:7e:1d:83:35:cc:20:f0:
         09:96:2d:6a:c2:03:4f:80:90:88:aa:e5:7e:c0:94:51:b9:ba:
         04:f5:90:d3:74:e1:e1:cf:b5:ae:6e:aa:9e:3b:b4:f2:44:00:
         2d:1b:fa:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6rtuu2lPcx1Xwf1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDczMDEzMDAxMloXDTI2MTAyODEzMDAxMlowLzEtMCsGA1UEAxMk
YjlmYjc3NDctNGMxNi00ZDExLTk5NzYtYTUyMDMyNjc3NTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCdNJkon+Z8SfXpyU+gGdfAM4+ocuvcBnOmz
X2Vxzkc+kFvZbwEmIGWy031gd/N/BGLnQhq2uOlfzgIRXF7DdKlYC9kjA4SeKPUc
r7Llyq4/dNIObbNHJBlZcTpzPmcQphFGC+wAFzGKruyE8mbuF+W+ghDY0jPI8Pnx
sFwl6zcCbH+2pdvVhoyjNs8R8k3BQEofrJMDCbiOIAcW5vg2gOC2zw6hH21tNA6C
NpUqCE7v+7AnOJ1cTWA3MhizdgTcQW2gfGR4NGYE4NaV4eyA4/Nlw8rCH5UsTZhG
TvVJ2PEC55lcaD/Mv7I3VJgvUiRbNH7gedXpFRRHhyllOJEwLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAaGaQuiHqmbWDea8S3db8si5LpCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODM3NTZkYjQtNGNiZC0z
ZGJkLWFhY2MtYjEwNTRmYjIyMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGPDIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFp/cPWgDnm4iYhT7E/pIrZ6NzTFfdnFH+oNwv94GpW/dhQILByvQ4vZ
PvPpmxsinaa4byHXbEJLSqEGkwywZYPdiOGKo4oYKtJUX6ojmEA9MxPKe9XF4DQu
ZyLT00GmVAFLdjqyhd6OUPejg3xyIVToMyFhYeWMv+iGsEWe7GL4XQwZMhWGw0/g
gcUt59NgDHhUAHQOeFdcH3/kXdOx2rXO2j1gMA2tz24+oheDs3uTn+iegCIONhQh
VW/eTuXxT0cT9ZCf1Y3ZKEU0MGRygq1afh2DNcwg8AmWLWrCA0+AkIiq5X7AlFG5
ugT1kNN04eHPta5uqp47tPJEAC0b+q8=
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:21:46 2026 by rpki-client