Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5cd01a3-0227-3563-9ae3-f115bcb8daa1.roa
File:                     c5cd01a3-0227-3563-9ae3-f115bcb8daa1.roa (raw, json)
Hash identifier:          2Jcgsw7MA4rtDBhJSOPYPYd8lfm5BDkgCnIvjxArbZ0=
Subject key identifier:   8B:12:69:25:DF:EE:42:29:75:85:9E:5C:43:59:F5:19:85:44:22:73
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DCD751B78C425C9E44880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5cd01a3-0227-3563-9ae3-f115bcb8daa1.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        24.178.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:cd:75:1b:78:c4:25:c9:e4:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=a351b382-4c57-4c36-8a55-de775e8b7eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:06:52:a3:7f:c9:fe:75:52:1e:6d:16:f6:50:
                    de:d1:a0:1c:39:08:9b:41:7a:b8:b4:b9:8c:98:04:
                    bd:4c:27:76:3b:8c:e5:23:f4:3d:5e:b5:8b:c9:65:
                    0a:01:fb:a8:2f:49:5f:a3:13:70:4b:bb:75:de:d3:
                    16:23:82:87:39:b6:19:ba:c5:97:f4:dd:6d:a6:ef:
                    84:c5:5f:df:02:78:38:41:c6:77:b5:c7:99:04:49:
                    83:ca:9f:a2:a8:9c:3b:7a:20:23:aa:9e:83:09:16:
                    e1:79:af:45:5c:fb:e5:e3:cb:c2:b4:2d:ac:a3:a3:
                    33:2c:6f:dc:19:4d:94:7f:7b:3d:ee:ad:6b:50:80:
                    4b:87:71:7f:20:40:db:0f:19:52:b4:8f:1e:c3:b9:
                    75:fa:c7:db:ba:c1:a5:82:23:72:f3:4f:c6:c7:8b:
                    1f:49:bc:65:ec:e6:fb:f4:75:78:d8:0e:c5:24:2d:
                    49:d3:35:da:da:53:e7:6b:3e:3f:6f:db:27:87:5e:
                    c3:8c:93:0b:c1:33:0f:5c:92:e7:18:6b:d8:04:dc:
                    4b:2b:3e:51:b7:f7:71:71:c1:0f:19:a9:37:b3:6b:
                    99:28:9b:24:bc:84:d1:c8:ff:f6:ce:fb:14:d4:00:
                    6f:2f:a5:13:57:13:2e:86:f2:f9:32:4b:77:0d:f7:
                    6d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:12:69:25:DF:EE:42:29:75:85:9E:5C:43:59:F5:19:85:44:22:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5cd01a3-0227-3563-9ae3-f115bcb8daa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.178.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a8:f8:39:ce:3a:98:65:2d:dd:ec:b4:08:9d:00:d1:5e:aa:
         a9:a0:78:da:e0:06:f3:b9:30:4a:bd:e9:83:44:e9:e0:f0:3b:
         fe:e2:f2:8f:60:f2:ae:e0:62:90:c8:9b:3a:70:55:72:3d:6a:
         86:e4:77:77:e9:e9:9b:90:6b:89:52:81:63:7e:83:6b:0a:58:
         61:53:8a:85:08:2e:4a:b6:79:89:dc:bb:6f:79:a4:d1:34:49:
         21:97:18:32:79:3a:06:25:ed:4e:6e:a0:bf:38:5e:44:4d:58:
         02:76:e3:59:39:cd:c6:ce:02:af:a4:82:18:cb:73:8b:6f:4a:
         e3:63:63:c9:ad:e9:ea:ee:55:c2:8b:ef:a1:07:2b:b9:b3:e9:
         a4:93:51:ef:09:c0:f6:a8:0f:99:06:95:35:37:46:73:71:c1:
         cc:fc:57:43:0a:b1:e8:f0:89:9c:80:ce:3a:a6:55:f8:74:e9:
         f2:7f:82:74:b9:63:6d:30:8e:11:67:43:70:a6:ce:d0:1e:d9:
         33:d7:c6:38:5f:36:32:7f:29:4c:b3:cd:b0:44:6b:93:d8:02:
         3a:61:d5:93:d1:33:1e:35:a3:09:5d:76:e1:9d:8a:03:3a:63:
         68:17:8b:3d:32:c3:93:3c:b9:e7:1a:f8:6d:5d:a3:b6:6a:a0:
         91:62:70:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:59:13 2026 by rpki-client