Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0a383b15-ddfc-36ad-87b5-1796416381a6.roa
File:                     0a383b15-ddfc-36ad-87b5-1796416381a6.roa (raw, json)
Hash identifier:          uE39TFyk8GfzPNEFymV/ycEzE3zlhEE38uGLSG5OsAc=
Subject key identifier:   CA:9C:36:C4:51:5D:44:A5:F6:4C:97:24:CC:C5:B8:F7:1A:87:F9:69
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B92DD405D77B303D1F9959000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0a383b15-ddfc-36ad-87b5-1796416381a6.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     14334
IP address blocks:        24.177.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:40:5d:77:b3:03:d1:f9:95:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=e8438656-83eb-4ec3-8ebd-f7f82a0a0383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:f4:1b:c5:41:32:60:a9:26:7d:b3:1b:67:
                    b6:92:92:9e:0b:50:1b:d2:8c:6c:13:05:88:5c:38:
                    90:9c:74:75:a2:b6:35:f5:b4:dc:2a:ae:6f:1b:8d:
                    8f:bf:73:3d:48:e5:95:42:88:66:e0:d2:78:2c:40:
                    59:48:cc:a1:fa:08:3c:d2:09:d6:bc:75:16:6a:80:
                    09:9f:a7:01:f7:11:14:8d:3e:81:0b:f5:6a:5e:2d:
                    69:82:be:03:9a:6d:87:58:68:eb:6e:4d:b1:22:4e:
                    05:c1:0c:04:a7:15:13:af:79:6e:88:74:16:b5:a7:
                    0a:a3:c5:57:6c:f4:67:4b:56:37:ae:72:91:de:fb:
                    aa:e5:aa:27:53:19:af:63:fe:47:05:07:6e:78:04:
                    c2:ab:6c:7f:56:ea:29:c8:ca:85:4f:bc:d6:e5:1b:
                    2e:04:00:98:0c:b3:74:86:3e:31:4d:86:5d:f8:e1:
                    5b:c5:71:7c:c1:56:eb:36:43:5e:04:13:5b:ba:b0:
                    27:ab:b1:16:66:43:4f:1d:d8:ad:4d:2c:1a:8d:01:
                    1d:57:4b:2a:c2:f9:1d:10:90:12:92:bd:40:db:1b:
                    fd:66:72:d0:97:78:52:87:ae:4f:81:24:b4:c8:09:
                    9b:8e:d6:ef:04:ca:e1:c6:ca:1c:36:71:b1:f1:81:
                    7e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9C:36:C4:51:5D:44:A5:F6:4C:97:24:CC:C5:B8:F7:1A:87:F9:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0a383b15-ddfc-36ad-87b5-1796416381a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.177.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:5b:a0:7c:be:c1:52:87:50:25:06:db:83:06:df:53:be:2a:
         4b:5d:9c:3d:97:05:e6:c3:d3:86:6a:3c:76:55:cf:51:17:76:
         de:e8:28:56:19:da:97:3d:5c:4f:a5:2f:49:e9:15:91:5d:6d:
         90:4b:99:0c:6a:69:32:d1:a4:02:b8:9f:cc:4a:0f:15:5d:c7:
         b4:51:51:16:4b:2c:fe:ed:a5:e0:f8:44:fb:f8:88:78:92:7e:
         65:b9:fd:10:ef:32:6b:82:c4:ae:a8:e2:c5:48:2c:32:9b:25:
         d8:47:d1:5f:bb:ca:2e:d6:a4:8a:12:d8:5b:42:2b:63:4b:6c:
         d0:ad:7c:2c:89:8c:c1:82:f6:3a:f1:66:3b:56:49:83:03:e3:
         4b:a8:14:6d:9d:d0:2b:78:0e:18:62:4f:c6:5e:ed:d7:cc:c1:
         4c:09:ea:68:f0:0d:63:a8:36:7c:07:0b:c2:d1:ea:3e:cc:57:
         18:64:a4:1c:67:84:1f:cd:12:2e:a1:a5:07:a6:55:dc:df:76:
         be:e8:2e:6c:97:65:94:29:db:7a:94:d7:3d:44:f9:63:c6:3c:
         02:d1:6c:bf:ca:e8:68:a3:7f:09:5c:1a:83:4a:c0:57:38:3d:
         27:02:d6:63:0b:f4:01:b0:0a:04:da:11:db:41:ab:97:08:d7:
         1a:b8:f2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:02 2025 by rpki-client