Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24f9e729-0e99-371d-be1e-d9d733d4b8c9.roa
File:                     24f9e729-0e99-371d-be1e-d9d733d4b8c9.roa (raw, json)
Hash identifier:          YTRJomep1i8XSDk0emcg7M+HqAxYCUmO4qBFNNKkcW4=
Subject key identifier:   29:92:0F:68:83:A8:B8:B2:B6:F9:1A:53:8B:BD:06:82:00:6F:4E:82
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DBFD08647B824CD3B6711F4C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24f9e729-0e99-371d-be1e-d9d733d4b8c9.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     26008
IP address blocks:        74.121.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:86:47:b8:24:cd:3b:67:11:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=0ffe4c72-ee10-43cd-bbc7-08401f954e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:2b:8b:2c:bb:8a:1e:ce:0f:db:eb:cd:e5:
                    8d:91:d4:15:67:e2:fb:be:63:15:ed:ad:e0:72:4f:
                    09:95:8d:6f:6d:15:7b:67:3c:64:ff:f3:ab:d8:6a:
                    54:b6:98:ae:5a:a9:1c:82:6c:8a:07:0d:7f:9c:5a:
                    ee:eb:5c:6d:ff:19:4b:6c:61:01:dc:e5:53:00:c9:
                    40:62:92:db:a0:47:36:db:74:a1:08:b3:05:82:db:
                    d8:16:fe:6a:64:fd:41:4a:c6:2d:46:ef:c4:e1:b0:
                    f6:f5:80:26:d0:02:06:69:f8:bc:ad:63:47:24:e9:
                    20:b1:f7:80:02:b6:f8:94:84:98:b1:47:8c:6e:dc:
                    dc:53:c8:bf:4e:be:35:23:59:01:fb:ea:c8:88:18:
                    32:8c:7d:2e:c4:48:79:74:8e:84:6b:85:ef:cb:8c:
                    df:a6:b9:1f:9b:24:01:67:5e:17:94:7f:55:18:af:
                    33:fa:d3:d0:ab:37:c0:1b:4c:b7:93:46:5d:12:f2:
                    8c:a0:3a:cf:49:be:1c:d2:c9:62:18:2a:85:93:35:
                    26:d4:da:1a:80:99:74:53:c3:bd:08:59:57:0f:ea:
                    c4:5c:24:30:6c:00:20:e6:fe:9b:02:57:d9:be:dd:
                    cb:23:49:07:b9:80:94:10:b7:a1:b5:f7:a0:91:19:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:92:0F:68:83:A8:B8:B2:B6:F9:1A:53:8B:BD:06:82:00:6F:4E:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24f9e729-0e99-371d-be1e-d9d733d4b8c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:5c:62:a1:fa:e2:63:a5:04:71:c0:9d:d3:cc:f3:c4:e2:45:
         5d:83:18:85:0f:65:d2:ff:67:a6:38:2f:88:01:ab:4d:4d:ee:
         cf:9e:3e:6b:f0:42:23:c2:e6:8e:bd:19:d9:6b:14:a4:f6:cc:
         92:dc:c1:c4:cc:c1:0a:30:c8:f5:8c:c9:25:f9:d5:87:d8:53:
         cd:50:c3:93:fa:d9:b4:c0:3f:62:e4:58:cd:42:bb:f6:42:30:
         f0:83:95:82:7e:39:b8:a2:71:ac:f8:69:65:89:7e:5c:eb:09:
         1a:95:95:d8:d9:99:58:a8:8d:7a:89:78:34:51:69:46:6d:01:
         23:87:66:74:84:55:0f:40:a6:70:95:4e:0d:b4:c7:70:bd:f8:
         57:47:e3:8f:25:23:d0:fc:0a:52:5c:7b:17:f1:b9:57:0c:0a:
         5e:07:87:8a:33:4f:e6:ae:05:a4:41:07:be:53:d2:6c:85:f2:
         43:4e:b8:f8:22:f7:be:34:95:6f:23:e3:9b:e1:f0:ed:bd:da:
         1f:4c:ad:60:b7:19:00:08:5c:da:ca:05:b1:5d:f1:64:6f:a5:
         34:cf:f4:34:97:65:1c:b7:54:f0:31:04:ce:6e:dd:6e:6b:0f:
         8a:27:91:9d:20:2a:65:96:11:f3:a8:8b:8e:78:41:c9:65:f2:
         f7:45:fa:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0IZHuCTNO2cR9MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk
MGZmZTRjNzItZWUxMC00M2NkLWJiYzctMDg0MDFmOTU0ZTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnQriyy7ih7OD9vrzeWNkdQVZ+L7vmMV7a3g
ck8JlY1vbRV7Zzxk//Or2GpUtpiuWqkcgmyKBw1/nFru61xt/xlLbGEB3OVTAMlA
YpLboEc223ShCLMFgtvYFv5qZP1BSsYtRu/E4bD29YAm0AIGafi8rWNHJOkgsfeA
Arb4lISYsUeMbtzcU8i/Tr41I1kB++rIiBgyjH0uxEh5dI6Ea4Xvy4zfprkfmyQB
Z14XlH9VGK8z+tPQqzfAG0y3k0ZdEvKMoDrPSb4c0sliGCqFkzUm1NoagJl0U8O9
CFlXD+rEXCQwbAAg5v6bAlfZvt3LI0kHuYCUELehtfegkRnEBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmSD2iDqLiytvkaU4u9BoIAb06CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRmOWU3MjktMGU5OS0z
NzFkLWJlMWUtZDlkNzMzZDRiOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnl8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVcYqH64mOlBHHAndPM88TiRV2DGIUPZdL/Z6Y4L4gBq01N7s+ePmvw
QiPC5o69GdlrFKT2zJLcwcTMwQowyPWMySX51YfYU81Qw5P62bTAP2LkWM1Cu/ZC
MPCDlYJ+Obiicaz4aWWJflzrCRqVldjZmViojXqJeDRRaUZtASOHZnSEVQ9ApnCV
Tg20x3C9+FdH448lI9D8ClJcexfxuVcMCl4Hh4ozT+auBaRBB75T0myF8kNOuPgi
9740lW8j45vh8O292h9MrWC3GQAIXNrKBbFd8WRvpTTP9DSXZRy3VPAxBM5u3W5r
D4onkZ0gKmWWEfOoi454Qcll8vdF+vg=
-----END CERTIFICATE-----
Generated at Wed May 13 09:44:53 2026 by rpki-client