Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b5f593ef-d7a1-3c77-84a5-c0db8e11ad6d.roa
File:                     b5f593ef-d7a1-3c77-84a5-c0db8e11ad6d.roa (raw, json)
Hash identifier:          kYK9kICSM2qv8pHPRwTLV7sa/ZK63a5yqHRh2GL+XY8=
Subject key identifier:   1A:96:D6:87:91:33:CD:D3:95:B2:A6:DF:B1:2F:2A:94:09:3D:9D:42
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B3FAC836CB45C7D17566EE820
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b5f593ef-d7a1-3c77-84a5-c0db8e11ad6d.roa
Signing time:             Fri 19 Sep 2025 17:51:13 +0000
ROA not before:           Fri 19 Sep 2025 17:51:13 +0000
ROA not after:            Thu 18 Dec 2025 18:51:13 +0000
asID:                     0
IP address blocks:        24.159.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:ac:83:6c:b4:5c:7d:17:56:6e:e8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 19 17:51:13 2025 GMT
            Not After : Dec 18 18:51:13 2025 GMT
        Subject: CN=6f303c33-750d-4dd1-912f-e94f02ed3995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:99:a1:db:20:b1:8b:8f:bc:c1:a1:95:bc:
                    6d:de:5a:9a:ba:56:46:f8:ea:81:3a:d2:93:42:9c:
                    6e:7c:10:c6:71:64:c0:16:ba:0b:c3:3d:95:df:c5:
                    94:a1:08:92:75:98:3d:0e:fa:4c:35:ec:12:ef:8c:
                    c4:ca:aa:11:eb:25:5f:c2:ea:dd:4a:2c:43:27:6d:
                    19:c6:86:e4:79:27:9a:e4:2e:f1:12:6b:4c:a6:16:
                    f8:75:24:12:ac:8f:f2:b7:bf:bd:55:b8:b5:00:4c:
                    8d:81:6c:09:3b:50:b2:ad:2f:c3:f9:84:60:10:f1:
                    03:59:cf:9a:35:a5:51:6d:39:d3:2f:5f:87:70:0b:
                    8a:94:4a:7b:48:b9:ad:0a:1a:3c:4f:f6:8e:df:53:
                    b7:a4:05:30:bf:13:04:7b:72:71:f0:11:8a:5e:09:
                    21:5f:2d:cf:89:2f:ff:e3:9b:bd:80:ce:3c:04:3c:
                    d2:28:e1:12:6f:e9:70:c7:fc:ea:da:9f:16:9f:cb:
                    12:cc:6f:b1:96:67:08:d8:6e:c5:b2:26:1e:67:37:
                    6c:2c:ae:3b:ff:60:54:0b:7b:1b:79:8f:c4:f9:75:
                    cf:a1:ac:2e:0c:e6:0a:cf:87:b6:b4:26:4f:fc:d3:
                    94:66:b3:15:d0:04:da:98:12:02:cf:76:4f:6e:ae:
                    19:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:96:D6:87:91:33:CD:D3:95:B2:A6:DF:B1:2F:2A:94:09:3D:9D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b5f593ef-d7a1-3c77-84a5-c0db8e11ad6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:33:56:10:1f:24:26:27:84:12:41:b3:a2:82:85:54:29:11:
         a7:c7:9e:fc:e9:64:08:33:1e:7c:01:a6:69:8b:48:b3:44:bb:
         bf:48:73:f1:6f:95:4e:cf:1b:a7:e7:30:4a:dd:0a:18:87:06:
         ad:df:aa:f9:26:c6:c9:7b:9e:04:f1:9c:43:4b:e7:03:bd:d2:
         55:d7:84:48:ee:0a:bf:28:e4:74:24:86:73:7b:3c:2d:03:54:
         f1:0d:37:37:92:d3:a1:cc:c8:a5:ae:1f:eb:a6:cf:79:3c:fe:
         64:c9:af:a7:77:1e:18:7a:0b:f5:3a:b8:b8:dd:55:ed:5d:74:
         3e:b6:44:82:53:03:cd:29:9e:fa:ec:96:25:e8:a7:a1:a3:e4:
         45:9e:f3:26:08:07:9f:2b:41:b1:ef:2b:f1:b4:47:c8:02:fc:
         14:58:47:31:6b:dc:6b:a0:fe:80:76:78:e3:93:c3:83:76:80:
         bb:42:be:93:2f:97:5f:58:7e:ba:4f:60:7f:54:41:3b:67:f8:
         f7:5f:c2:6c:26:da:47:68:0e:f8:13:38:47:88:a5:c3:07:1b:
         6d:8f:17:ef:46:cb:66:6e:6d:0e:37:82:c7:72:70:95:85:81:
         8f:95:cf:da:f4:65:1b:47:af:f7:21:45:7a:fe:cd:9b:fd:6d:
         a7:64:14:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:57:42 2025 by rpki-client