Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ef4d72f4-68f2-3c65-b533-2a35fc7df07c.roa
File:                     ef4d72f4-68f2-3c65-b533-2a35fc7df07c.roa (raw, json)
Hash identifier:          h/zMabOprjUoGMZuGvzmMnzENF+8Nd027xFomgSfZLo=
Subject key identifier:   B6:2D:46:5E:7A:C6:70:E8:06:C1:14:B6:D6:1E:B5:61:41:8A:06:07
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3721B18683AB84FE3F1A300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ef4d72f4-68f2-3c65-b533-2a35fc7df07c.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        24.205.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:1b:18:68:3a:b8:4f:e3:f1:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=6f17b2fa-871b-4a33-8279-5491392816c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:40:18:3e:20:dc:7f:c3:59:c7:f3:51:76:
                    c1:df:0c:41:24:ae:e8:2c:df:61:51:ed:b7:cc:0a:
                    9b:ec:1b:82:b5:fe:58:ae:76:4c:f9:ee:99:81:0c:
                    34:6a:ab:9e:ff:bc:59:19:3d:5f:41:21:a0:88:68:
                    3a:67:79:e3:a0:5a:df:3d:c9:db:a4:96:d6:d3:12:
                    cd:1f:40:72:5d:cd:f0:48:0f:0c:b2:51:1d:fb:f4:
                    bb:b6:2d:3d:ce:98:84:ef:56:43:29:1f:08:9d:0b:
                    c5:1c:12:a2:53:a2:40:3d:f2:a8:c0:20:a7:c6:aa:
                    cd:82:0d:71:35:bd:59:20:68:81:a2:87:c3:9c:85:
                    de:fb:37:02:fd:5a:db:d3:43:b6:7d:ab:ad:89:4e:
                    2e:36:da:1d:c8:30:28:44:f5:50:ed:e2:86:40:75:
                    6d:eb:4b:56:ff:19:b4:fd:f1:a2:3e:da:93:a6:26:
                    91:d9:10:1e:29:42:fb:2f:f6:9f:7a:df:a7:4d:10:
                    35:ce:f6:b1:a7:2f:bf:25:55:0d:13:31:54:e8:b2:
                    6d:18:ed:9d:14:35:06:45:7b:17:30:ea:40:00:34:
                    79:f9:e5:35:7b:71:7c:da:7f:a6:c8:b3:ac:74:bf:
                    41:ce:80:38:b5:29:ae:95:45:19:75:60:ae:47:2d:
                    7c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2D:46:5E:7A:C6:70:E8:06:C1:14:B6:D6:1E:B5:61:41:8A:06:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ef4d72f4-68f2-3c65-b533-2a35fc7df07c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.205.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:97:1d:f2:95:bc:af:f9:8c:4a:bc:63:40:55:71:83:c1:74:
         7e:c2:40:b4:fd:3d:e0:10:19:cb:d1:69:8d:9a:f6:be:ba:5e:
         aa:cd:de:58:11:d5:f1:1c:40:87:e0:b9:68:0d:85:ee:8e:be:
         a5:ca:c7:b7:51:90:35:16:a0:51:b1:e0:24:af:a5:fa:d5:c8:
         92:1d:ed:6a:1b:46:84:74:20:cb:a9:d8:2b:87:22:79:8b:05:
         f2:48:ed:d8:38:86:38:78:c2:53:14:b9:07:ae:e2:86:bd:71:
         08:07:0e:6b:8f:56:fe:a4:45:35:ce:5a:b5:3f:aa:45:28:bf:
         3e:02:a1:aa:f7:6f:ec:c2:cf:96:e5:01:27:6a:9f:bb:a0:d1:
         5e:20:52:18:79:01:e0:37:d2:3e:0d:b7:e3:46:f5:2a:ff:cd:
         82:d7:45:90:f2:66:1b:80:52:58:d1:d6:c2:bd:a0:8d:4a:38:
         54:d0:1d:54:50:a4:bd:23:10:25:26:ae:94:17:ec:af:c7:9e:
         92:92:a6:01:09:8d:71:ef:2a:19:9b:04:00:a2:f1:96:63:b5:
         af:56:f3:ab:4c:b4:bd:55:31:fa:0d:4d:a2:1a:3b:44:c9:ef:
         8a:9d:2d:21:3b:2b:68:95:82:f8:54:19:de:43:a0:3c:59:57:
         88:9c:c4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:13:20 2026 by rpki-client