Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cbb63b85-0e9f-3c40-9749-985519926b52.roa
File:                     cbb63b85-0e9f-3c40-9749-985519926b52.roa (raw, json)
Hash identifier:          /REl3UZoyWlGsTC70u+RRDVp55aSR4jLFGIwYMQWc/w=
Subject key identifier:   25:46:7F:44:D2:92:6A:8C:7C:7B:32:61:C1:A1:A6:B7:20:EC:EA:83
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37205AF313429FBF3497C00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cbb63b85-0e9f-3c40-9749-985519926b52.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        24.247.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:05:af:31:34:29:fb:f3:49:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=7efff8e9-af5c-416a-8484-36d40ea1e54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:4d:c0:04:f7:d8:e6:9c:e4:7c:dd:9f:cd:
                    e3:7a:b1:5d:22:7d:66:7e:c2:ca:01:de:53:df:54:
                    34:47:f3:1b:66:24:ee:2b:57:8e:15:ad:a5:6b:b6:
                    c5:87:95:40:cf:10:78:a5:d7:1d:49:7b:ef:2c:a7:
                    12:5b:9d:4d:0c:89:de:19:77:7b:ef:ea:35:8f:15:
                    93:47:81:cb:17:ac:97:e4:ff:c7:96:e1:fe:6a:ac:
                    3a:7d:b2:a5:ab:c0:bd:2f:ff:3b:e2:cf:a8:42:9e:
                    bb:cd:82:a4:7e:e9:aa:6a:df:b7:5c:5d:21:c3:8f:
                    ee:a4:4b:04:2e:02:87:6b:7b:f0:53:25:43:a0:05:
                    fc:ed:6f:46:39:3c:83:27:1c:ba:5c:aa:98:20:bd:
                    05:b7:45:56:84:86:11:e0:21:13:9e:1a:9e:52:ce:
                    0b:48:84:78:f3:c1:2b:a0:a0:4b:e0:58:43:ee:e7:
                    b9:50:eb:36:ea:3d:be:02:ec:f1:83:c2:23:f2:eb:
                    c7:63:fb:b9:57:6c:15:17:d9:22:df:b6:17:3f:f6:
                    38:0f:09:c1:c8:52:8b:42:b1:31:c5:88:51:be:4d:
                    e7:f3:8c:f9:79:ca:ad:1a:24:2d:9c:a4:ef:4f:42:
                    b6:3a:9e:df:69:8d:f1:5a:4b:e0:66:d2:d6:91:9b:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:46:7F:44:D2:92:6A:8C:7C:7B:32:61:C1:A1:A6:B7:20:EC:EA:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cbb63b85-0e9f-3c40-9749-985519926b52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.247.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:7d:f2:7e:0d:36:b9:8f:a8:42:e8:18:ba:f4:2d:10:27:4a:
         3c:24:45:4b:e4:1f:07:3d:72:90:8d:d5:e5:b3:d8:31:73:2b:
         fd:ad:31:bb:43:f8:cc:70:6c:1a:42:79:a1:30:8b:10:ac:3d:
         8d:8c:7f:76:f0:e6:16:fc:1e:1a:1d:a1:b5:e5:82:d3:fb:5a:
         8a:cd:73:bb:cf:09:7d:3c:76:d4:7b:26:47:55:0c:6c:3c:d8:
         1d:4d:a5:89:c5:ed:e2:64:86:4e:c1:3e:bb:0f:0e:50:1b:8b:
         5e:ba:e0:79:5e:c8:06:e9:5b:f8:be:e0:f5:58:12:b4:40:ce:
         b8:55:3a:56:36:cf:04:c4:9a:ac:c0:32:5f:27:63:ec:99:ba:
         20:d4:fc:90:a1:20:51:ff:8d:70:6f:e0:37:5c:d4:82:a0:c2:
         a3:45:c2:a1:41:81:c5:32:1d:95:9b:a4:f3:07:ae:83:bb:e9:
         af:2a:b7:f8:cf:a1:b0:2f:98:aa:ff:32:cd:5c:1f:f8:74:1e:
         f3:42:41:c7:58:33:97:84:48:97:2a:e2:f9:15:9a:ea:bf:cb:
         74:bb:0c:fa:3f:27:8e:e2:c0:24:19:10:ea:c0:b1:d3:aa:4e:
         5e:06:a5:d2:60:59:51:8d:bb:1c:de:30:86:2a:00:e1:d3:f6:
         fd:67:8c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:18:19 2026 by rpki-client