Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/12724e75-0709-395f-8062-34911cd156da.roa
File:                     12724e75-0709-395f-8062-34911cd156da.roa (raw, json)
Hash identifier:          LTwerVzWbpJPLA3n7ZHQ1inZD+4Sati5OOzqrxsbyvE=
Subject key identifier:   57:DD:23:B5:73:0A:C4:F1:01:6C:3D:16:37:95:CD:B4:82:F5:8C:E9
Certificate issuer:       /CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Certificate serial:       010D0C9F4328584B3986FCC543A273C7F92E2410
Authority key identifier: C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/12724e75-0709-395f-8062-34911cd156da.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     27364
IP address blocks:        24.239.32.0/19 maxlen: 19
                          24.239.64.0/19 maxlen: 19
                          24.239.96.0/19 maxlen: 19
                          24.239.192.0/19 maxlen: 19
                          24.239.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:86:fc:c5:43:a2:73:c7:f9:2e:24:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044f7659-113e-4b3c-be9d-200821bc9a5b
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=19d01d7e-4072-4fb3-a036-c532656dd363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:9b:b7:d9:b5:eb:ad:c5:70:1f:1e:cc:d2:
                    0c:60:fe:1a:38:ac:a0:fc:9a:01:33:5a:e1:3e:0a:
                    ba:41:51:26:b3:2f:8e:ba:df:f4:6e:83:54:3e:17:
                    4d:20:1d:ca:98:c9:ab:a5:3e:9b:1a:16:09:ed:c0:
                    55:65:36:c8:b8:98:7f:50:96:e9:ad:2c:5a:6a:eb:
                    7c:1f:6e:b3:62:db:36:8d:aa:c0:73:06:7e:9d:71:
                    65:83:fa:6a:54:ff:9b:ba:f8:55:91:31:d4:66:3a:
                    13:f6:17:03:1f:a7:37:02:d8:f0:64:4f:28:37:9c:
                    ce:ba:c5:e0:72:d2:13:bd:42:03:a0:6b:94:6a:30:
                    92:e1:b4:ca:b2:15:0c:67:1e:d9:df:b6:d9:75:b1:
                    5f:50:f7:0a:98:37:09:2c:7b:ca:7d:ae:cd:cf:60:
                    0d:fc:5b:94:1a:01:e7:e3:49:e8:16:9c:19:bc:5e:
                    31:15:e9:12:51:88:07:09:f8:cc:3b:8d:19:b9:ad:
                    d4:93:01:1a:3e:97:da:11:29:e7:1d:8b:66:4d:a7:
                    6c:e5:60:39:1d:4e:18:c3:ac:a6:fd:5f:e9:1b:c9:
                    95:d1:96:e8:e6:05:f6:e4:46:ca:b4:d8:ee:32:d4:
                    dd:6d:de:88:69:46:61:26:c6:a2:f6:a4:90:6b:e4:
                    e5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DD:23:B5:73:0A:C4:F1:01:6C:3D:16:37:95:CD:B4:82:F5:8C:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/12724e75-0709-395f-8062-34911cd156da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl

            X509v3 Authority Key Identifier:
                keyid:C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.239.32.0-24.239.127.255
                  24.239.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:48:c8:ed:01:7f:e2:97:e1:1a:6c:57:9c:f1:52:7e:52:ba:
         69:c7:83:05:79:0f:52:60:36:91:51:26:1f:a2:12:a5:49:bd:
         8b:ea:b6:b5:70:d8:34:28:50:15:4a:ca:ee:29:ca:99:63:65:
         d6:fe:43:a3:31:e3:86:5d:32:ec:3c:d3:b5:3a:6a:86:64:e2:
         c0:60:40:eb:16:11:31:25:66:02:22:d6:2c:4e:11:2f:9a:c5:
         b1:43:bb:9e:57:fa:27:c2:63:15:66:f8:96:4e:7c:ea:f9:fc:
         42:0e:d1:56:c0:fa:27:2f:6e:31:58:91:85:dd:f6:58:d7:80:
         61:be:33:a2:df:62:e2:b9:fd:1b:90:37:c6:e6:b0:f2:e0:e1:
         45:8d:44:f3:70:b0:c2:1d:e5:87:78:90:27:ad:71:b4:60:0b:
         09:34:5d:0a:51:c9:cf:22:f7:46:03:cc:44:b2:06:2b:1a:3b:
         99:56:27:3f:2e:fe:aa:70:6f:f4:fd:c8:40:c7:82:a4:e1:49:
         bf:a5:f7:52:cc:cd:b7:8e:f6:bd:40:52:42:40:19:6c:e8:be:
         e6:4e:03:b1:b2:ff:d9:b4:81:de:20:df:11:c4:50:91:26:4c:
         82:e6:0a:09:00:4a:e1:2b:cb:bb:2f:6d:bc:b1:c4:85:1f:6b:
         80:48:41:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:50:19 2025 by rpki-client