Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ed5d066-7faa-3b70-9d80-7b2cc4c357f8.roa
File:                     8ed5d066-7faa-3b70-9d80-7b2cc4c357f8.roa (raw, json)
Hash identifier:          xAjGYEgn/qRhHHY1dcrpQf7ar6OQDg5f6JLSCir6OZY=
Subject key identifier:   2F:25:5C:59:C1:AD:5B:2B:7B:0F:33:CB:9B:12:73:DF:0C:8E:5F:AC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3728A2E7C68457D85FE1D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ed5d066-7faa-3b70-9d80-7b2cc4c357f8.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        24.197.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:8a:2e:7c:68:45:7d:85:fe:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=525dcc4e-d7e0-4dfb-963d-ac8f08389c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:26:c9:3d:3e:57:55:45:3b:99:1a:6c:9c:
                    e8:74:33:98:b2:fb:9c:22:a0:67:32:c1:12:be:47:
                    ed:cb:bf:bb:87:b5:fb:09:dd:f9:51:1a:d4:3e:a9:
                    84:6a:41:6d:3e:fe:fa:f6:6c:3c:fe:b0:c4:5f:5f:
                    3c:61:2f:94:99:8a:73:12:75:8d:07:f1:9d:4e:05:
                    12:27:4d:00:e4:3f:a5:09:fd:f9:c4:43:65:ab:1b:
                    d2:a3:be:57:0a:6f:02:d0:a9:04:b8:ba:a2:7a:52:
                    87:f2:28:2f:59:9e:f8:aa:04:a3:82:39:e5:4b:07:
                    0f:f8:74:c8:d0:56:17:48:73:89:2a:20:b5:94:16:
                    c5:79:23:b8:90:45:5f:3d:35:33:5d:c9:13:56:d4:
                    aa:b0:69:53:2e:60:aa:a6:56:f7:d2:49:f7:d9:41:
                    b6:44:cd:0f:17:b0:64:71:b0:be:a6:08:47:66:4a:
                    6d:30:de:f8:fe:77:dc:bd:95:7a:bf:49:1c:d5:64:
                    44:9a:96:13:4b:2b:de:d5:6f:5e:b7:16:af:1a:bd:
                    88:25:80:00:1f:f4:7f:c8:56:0c:ec:86:83:d4:4d:
                    8e:1d:81:a9:f4:3e:ab:8d:fb:b8:82:31:ca:6e:3b:
                    ff:51:ca:aa:86:4b:3c:5f:91:32:9d:a0:da:8a:5c:
                    cd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:25:5C:59:C1:AD:5B:2B:7B:0F:33:CB:9B:12:73:DF:0C:8E:5F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ed5d066-7faa-3b70-9d80-7b2cc4c357f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.197.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:71:2c:ef:58:88:00:32:e8:fd:e7:cf:3c:3a:23:4b:d0:0b:
         0f:4b:b6:b4:0a:dc:95:93:8f:9f:95:ce:c9:b2:7a:5c:5c:a5:
         af:26:13:ba:ac:82:56:44:b4:79:d7:c0:ec:cb:bc:b3:26:a9:
         9e:a9:b4:01:58:97:cd:74:88:69:1d:c1:5a:3d:00:10:6f:95:
         fa:0e:69:d4:36:07:b0:7c:5a:5d:1a:4b:56:d9:e9:2a:34:85:
         01:01:bd:db:3d:e2:73:91:00:33:75:c5:3a:15:99:eb:02:45:
         3e:bc:77:42:1f:cc:cb:aa:22:24:f6:43:33:94:6a:94:df:b4:
         6f:fc:77:73:4b:e7:6d:67:f2:07:4e:b7:58:39:8a:47:5f:b8:
         8a:58:78:eb:9a:2b:33:65:5b:32:d1:d6:c6:86:1e:3e:d4:8a:
         3e:1f:01:1b:2c:6b:7d:81:80:51:d9:43:af:c8:cd:6d:4a:44:
         9d:8d:1c:43:ed:1c:d0:45:a2:59:4f:db:de:4f:5a:fe:cb:a6:
         76:18:a3:40:77:f2:f4:3e:39:d1:ee:14:77:d7:4a:7d:79:e1:
         23:69:78:bc:6c:b3:93:43:ac:7d:35:fe:38:a1:2b:96:90:e2:
         2d:63:4b:29:60:ce:f2:82:0b:9f:e8:cf:ca:2b:ba:6d:ba:47:
         86:7f:25:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:57:55 2026 by rpki-client