Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b7dc30f0-d648-390f-add4-87e4f5144011.roa
File:                     b7dc30f0-d648-390f-add4-87e4f5144011.roa (raw, json)
Hash identifier:          T7RC6zjWMFajEaUzLwhZmHrYnK9ik0DfGr7pdMP9xVs=
Subject key identifier:   22:CA:53:AB:24:FA:CE:F7:3D:63:6A:52:4B:FB:79:72:31:C0:42:00
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3728E64283A75502B15F080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b7dc30f0-d648-390f-add4-87e4f5144011.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        24.241.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:8e:64:28:3a:75:50:2b:15:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=a289d140-0a15-4155-921f-34def3c48976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2d:b8:5f:02:b2:53:d1:c8:5a:59:a8:da:75:
                    2c:3f:c4:d1:b2:18:07:1b:c4:b8:7c:f7:42:cd:90:
                    d3:91:9b:3e:a5:13:a3:d2:c1:af:7d:6f:72:57:cf:
                    0e:d1:85:22:f9:93:02:d7:3b:5f:07:b3:b6:12:fc:
                    8b:ca:73:2d:ae:2e:27:cf:ae:70:73:53:02:47:0a:
                    5d:9f:54:e4:8a:ec:31:c8:91:d4:62:78:6e:f7:81:
                    e7:a2:34:d2:a1:1d:2a:6c:31:c1:98:1e:10:07:5f:
                    3f:15:75:29:dc:43:ea:41:a1:10:33:2d:da:6c:d1:
                    d6:5d:27:66:d2:70:11:c4:dd:43:56:7f:76:30:98:
                    84:0f:72:1d:5d:f0:d5:5c:33:fa:58:18:fd:f3:ca:
                    c3:51:55:69:68:dc:9a:dc:4c:2f:4f:f4:9f:b9:1e:
                    92:65:c4:20:75:04:0f:8c:36:3b:e8:73:33:90:12:
                    98:34:9e:0c:4d:06:cc:c1:0a:6b:35:18:02:2d:48:
                    06:bd:b8:d7:75:0e:10:7f:01:29:f7:b6:70:92:8c:
                    dd:ff:d9:a3:8a:a2:18:83:6b:8f:b9:56:8b:91:51:
                    1e:05:8b:68:9f:b9:79:23:e6:53:0a:03:0b:52:7e:
                    0e:23:40:4e:77:f2:2c:29:30:2d:84:f0:90:53:14:
                    c6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CA:53:AB:24:FA:CE:F7:3D:63:6A:52:4B:FB:79:72:31:C0:42:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b7dc30f0-d648-390f-add4-87e4f5144011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.241.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:9c:63:5b:6a:47:a7:84:3d:2d:41:ff:46:21:07:4f:2a:38:
         e5:b6:1c:9d:53:4c:d1:6f:e3:1c:1c:58:02:1b:f5:99:e7:e7:
         2d:66:b2:d5:9c:42:4a:18:20:bc:10:70:3d:6f:65:50:3a:b4:
         14:b4:28:43:dc:b8:ef:7d:7d:22:24:c1:04:0d:08:62:b4:44:
         95:04:b6:ee:8e:69:98:ed:56:f1:a6:73:16:06:26:f2:0b:dc:
         81:b9:50:a1:20:6d:ce:70:4f:bf:77:b2:8b:41:c2:31:28:1c:
         fa:fe:f8:68:96:16:be:02:7c:31:a6:b9:f0:3a:60:8d:0a:f3:
         fb:7f:d1:51:1c:2c:df:b9:84:63:3e:ec:5a:a1:f2:db:b8:87:
         d6:76:93:24:02:34:88:bd:2b:52:dc:8c:76:73:a9:cb:81:57:
         74:bd:11:f8:3b:2a:77:13:b3:b6:f5:ad:5b:fa:c8:63:d4:59:
         ba:9b:fb:52:84:d9:04:a6:9e:f5:c6:2f:06:61:c6:b6:eb:1e:
         77:20:70:80:1d:8a:ed:30:9a:30:73:09:ef:06:30:6d:3f:bf:
         0b:b6:64:09:b5:95:31:b4:55:26:b5:56:ac:e3:3e:0c:27:19:
         7b:29:42:0d:00:1d:33:43:e2:1c:b5:ce:10:e7:3f:e1:1e:db:
         bd:aa:3e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:58:42 2026 by rpki-client