Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96d0edaf-4ea5-3d46-88ee-cfd37f8e58f4.roa
File:                     96d0edaf-4ea5-3d46-88ee-cfd37f8e58f4.roa (raw, json)
Hash identifier:          Ob35pSAOfpplx/H725Z/s4+9ABhOWVBcHO5o6NB1Id0=
Subject key identifier:   77:32:1B:8B:0A:B2:F2:E6:23:45:A6:D8:60:C0:CF:FA:B7:90:EE:E0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DC274DACBAD8D6787E970
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96d0edaf-4ea5-3d46-88ee-cfd37f8e58f4.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        24.159.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:c2:74:da:cb:ad:8d:67:87:e9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=e720eb90-d673-4f43-9d08-a4b3b082ef90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f9:18:16:41:eb:ba:82:50:26:67:23:c5:84:
                    e3:84:15:23:2b:06:6b:e4:52:4e:4c:ba:d2:9e:c0:
                    d4:49:79:04:cc:69:2e:54:0d:16:7d:69:56:4c:37:
                    4f:b0:18:5e:85:12:e1:3b:58:7d:8e:8e:db:df:f0:
                    53:97:b4:e1:af:00:b4:2b:a6:6d:a4:1d:f8:62:55:
                    01:9b:86:0d:84:0c:e9:bc:c2:2c:fe:b6:6b:f2:ac:
                    64:1a:e6:d8:17:bd:6d:a1:79:e4:ab:6d:0c:9d:60:
                    73:06:81:df:da:21:79:42:4e:44:94:fb:e1:54:a8:
                    5c:87:8e:71:58:76:a7:0d:e4:13:78:77:c2:ba:38:
                    b5:36:c9:0a:cf:cd:80:dd:7d:0b:3d:8a:c5:ca:a7:
                    9f:cb:62:7a:68:6c:60:73:c7:ff:4e:47:88:d0:e8:
                    b2:d7:04:60:d6:8a:96:89:ed:bb:ff:67:80:8d:cd:
                    4c:fa:3b:d5:56:f5:68:ef:ea:2a:5b:11:1b:8a:e3:
                    f9:76:2c:2b:25:c7:46:7f:ea:fe:4c:c5:38:54:6a:
                    f4:93:71:ff:3f:15:64:07:64:11:3f:5c:2a:ff:a1:
                    2a:c4:73:ed:95:af:fd:03:aa:a3:81:68:dc:3b:5b:
                    d5:2a:7b:42:4b:dc:87:e6:c2:14:fe:e6:f5:a6:8b:
                    59:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:32:1B:8B:0A:B2:F2:E6:23:45:A6:D8:60:C0:CF:FA:B7:90:EE:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96d0edaf-4ea5-3d46-88ee-cfd37f8e58f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ef:7c:bb:9e:e5:af:4d:f6:c6:b2:33:91:92:18:a0:f5:67:
         af:41:25:fe:3f:da:24:05:a2:0b:cf:ce:d1:60:e5:df:e0:5e:
         58:a7:68:f6:28:e1:f5:21:62:69:88:ab:a9:a0:34:8c:66:0b:
         ed:27:c2:7b:47:01:70:b2:65:4b:2d:01:9a:91:1f:40:3b:a8:
         9b:16:ca:27:4f:e0:68:bd:3d:62:ea:c1:d1:b3:56:d2:ce:bf:
         a5:5b:a0:8d:31:4a:e8:64:c8:52:a5:bb:16:c4:79:a3:cd:b1:
         01:0a:b9:91:f4:49:1f:b1:8a:9a:6d:ec:af:32:a8:fb:22:d8:
         d2:62:ce:b1:31:22:4d:b6:6e:64:2d:af:4a:1d:2b:cf:58:1c:
         42:48:aa:ab:df:a3:ae:63:8b:61:53:49:7e:2c:26:57:f5:42:
         39:80:cd:d0:d2:a0:45:27:bf:8b:03:7b:26:c6:b5:16:6a:19:
         ac:1b:85:8b:cb:57:a3:2d:71:d0:b8:52:3a:dc:a5:b9:1c:1f:
         72:f0:c6:aa:90:a9:33:c6:fc:a1:f7:6a:c0:b9:2d:f1:be:b0:
         5d:4f:d0:d8:b2:11:3c:44:2f:b9:d2:c7:c2:b2:e9:d5:aa:ff:
         70:58:60:26:b1:0f:cb:f2:25:55:fd:5f:db:b2:2f:63:2b:50:
         c5:45:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:11:39 2026 by rpki-client