Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a56a5a50-d9bd-38fa-9569-2abf9d803045.roa
File:                     a56a5a50-d9bd-38fa-9569-2abf9d803045.roa (raw, json)
Hash identifier:          heCW+ro9FpDk3jPGhDYfoOOt+U9OCjVTo46NVNicW7A=
Subject key identifier:   4A:7C:53:2C:84:CE:68:BE:5B:2E:09:A0:86:23:3B:2C:0F:84:F4:7C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC372751A63372193717374E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a56a5a50-d9bd-38fa-9569-2abf9d803045.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        24.240.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:75:1a:63:37:21:93:71:73:74:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=516d7591-77d7-4871-8b57-750bfeb41862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c5:29:10:11:a6:05:84:5d:7c:dc:1d:9e:e1:
                    b2:78:e8:ec:9d:f1:a2:9f:af:b6:ba:42:c3:03:6d:
                    3f:43:c6:48:e0:b0:fd:f1:e6:19:df:00:18:7d:05:
                    be:1a:25:3d:b1:ac:f3:fc:ad:cf:4f:ff:13:24:7d:
                    8f:36:8d:87:6b:2a:d3:54:8d:39:cd:80:9a:bb:e3:
                    47:d4:47:ba:43:36:7a:15:5a:2a:fe:e0:6f:d4:98:
                    1d:02:24:65:7e:ea:2c:0f:a2:8f:6e:63:84:36:05:
                    39:c7:e8:df:cd:df:d5:fe:ed:a0:9b:1b:39:37:3c:
                    62:47:cc:07:16:9d:a9:d3:f4:7d:d7:c1:6f:36:3b:
                    de:97:ee:ca:22:40:16:63:04:79:bf:77:f9:dd:0f:
                    76:88:c7:34:bc:5d:ba:95:93:c5:1c:cc:1d:71:32:
                    ce:5f:87:08:40:af:92:5f:d9:2b:c4:c0:6d:22:4f:
                    80:62:9e:d2:8d:72:82:d8:47:14:29:4d:d8:82:87:
                    35:ab:2a:3a:6c:70:f3:18:66:b0:c8:75:8a:17:8a:
                    3b:8b:6b:d7:38:cd:8f:5b:cb:5f:24:e7:f3:90:d0:
                    83:64:5d:0d:ad:96:72:d4:f0:cf:b2:d5:2c:d2:25:
                    66:b4:6e:28:6e:e4:05:77:7f:2a:e7:9d:d6:1b:8a:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7C:53:2C:84:CE:68:BE:5B:2E:09:A0:86:23:3B:2C:0F:84:F4:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a56a5a50-d9bd-38fa-9569-2abf9d803045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.240.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:00:9a:b3:0f:81:39:65:c4:d6:bf:e0:bd:e0:08:6b:d1:6d:
         e4:fe:1c:3b:49:4a:58:4f:c3:f0:ef:be:35:b5:c1:eb:81:7d:
         ca:95:e2:fe:e6:08:a6:9b:6b:09:65:dc:b3:29:81:1e:ce:29:
         09:49:c9:0e:4e:5c:18:8f:7b:9c:1e:51:6f:81:1d:2a:50:f9:
         8a:fe:c4:97:43:42:26:db:11:f6:f4:c3:7e:ca:6b:d9:ef:ce:
         d6:01:29:7a:33:e4:06:41:90:d5:74:bf:e4:ea:e5:ab:5d:7a:
         1e:64:86:27:d2:19:ce:c1:ea:12:aa:40:3e:b6:2d:2c:3c:e8:
         8a:29:98:a6:ee:71:b7:56:4b:66:49:af:4c:03:16:53:ac:46:
         1a:85:f1:78:28:bb:21:4c:e6:e6:9d:28:a4:73:15:cd:c8:56:
         35:d1:83:51:d6:70:cd:59:cd:74:7f:33:2b:f1:cf:29:e2:73:
         69:72:22:90:bd:4a:69:89:98:a9:65:2f:b9:83:21:61:dd:61:
         43:3b:16:cf:a5:99:b3:22:c7:b9:2d:80:7b:3c:30:53:0b:ce:
         43:99:d5:a1:93:7f:33:89:79:83:02:b8:0b:a8:b9:74:7a:5b:
         ec:8d:2c:8b:7b:6b:80:dc:ea:fd:b4:9b:fd:a5:94:c5:da:41:
         7a:2a:30:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:14:52 2026 by rpki-client